Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_iimKHE-SyPMGA8vbSFyiqjrMy0.roa
File: _iimKHE-SyPMGA8vbSFyiqjrMy0.roa (raw, json)
Hash identifier: oyddp3ynKKxM4nTSLkcMbSqSsjlT+S9j694YLXjJ2ak=
Subject key identifier: FE:28:A6:28:71:3E:4B:23:CC:18:0F:2F:6D:21:72:8A:A8:EB:33:2D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01922CC82BACDAD1DC40E33FEA55F18BF2E1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_iimKHE-SyPMGA8vbSFyiqjrMy0.roa
Signing time: Thu 26 Sep 2024 05:22:48 +0000
ROA not before: Thu 26 Sep 2024 05:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 93.114.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:c8:2b:ac:da:d1:dc:40:e3:3f:ea:55:f1:8b:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 26 05:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe28a628713e4b23cc180f2f6d21728aa8eb332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:0a:9a:b5:ae:48:cd:4a:59:ea:ea:72:75:
14:b1:b7:db:f8:5d:0e:03:79:47:2b:e6:11:c9:23:
45:9a:6d:29:e6:1a:28:cf:b5:d9:a5:77:a5:e7:f2:
25:10:b7:bc:a6:c8:68:2c:ed:21:d9:cd:a5:cf:22:
07:85:71:59:f0:c6:49:6b:73:b8:87:7d:cc:fc:6e:
c2:b1:d2:d0:c9:be:3e:b0:bb:8a:22:5d:cd:62:e4:
0d:eb:91:82:00:c5:5e:b2:d3:57:df:74:bc:c4:1c:
10:d9:1b:24:ae:fe:11:cc:ea:0d:83:ef:d9:10:d7:
ea:4d:5b:17:0e:e0:81:59:0d:64:9e:c5:09:c1:cc:
3a:93:16:9a:43:f3:8c:37:9f:4d:46:24:ee:95:93:
11:4b:64:b6:46:f5:d0:0a:80:d8:1c:a0:69:ad:91:
d9:13:c8:ec:48:51:8d:a4:71:61:c0:5e:91:f8:91:
96:61:1d:47:89:8c:25:0a:9a:b9:e9:f6:ae:61:b3:
7c:3c:4a:95:22:0e:24:1d:e1:d8:ba:19:18:19:bf:
5b:56:2c:28:1b:dd:04:e4:52:35:fa:75:0e:c9:96:
c6:db:1a:31:0c:bc:df:4e:0d:1a:a1:a8:29:54:98:
d7:28:c1:ad:49:09:d3:79:7f:f8:90:6e:45:bd:06:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:A6:28:71:3E:4B:23:CC:18:0F:2F:6D:21:72:8A:A8:EB:33:2D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_iimKHE-SyPMGA8vbSFyiqjrMy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:75:08:9f:09:5e:92:93:1f:8c:51:c5:46:65:75:a7:5c:67:
49:a5:fd:74:4c:60:30:41:2e:d9:66:10:99:f2:2b:bc:f2:3d:
7c:da:71:d0:b9:06:90:16:16:9e:e8:df:e3:7f:9f:26:20:3c:
6a:2a:31:65:ca:2f:8f:b0:0f:a7:93:fa:f2:9f:6c:e7:c4:90:
ef:3d:6a:e6:0e:29:06:67:fc:19:f2:de:76:fd:4d:55:21:0c:
3f:4a:6b:91:7d:0f:ce:b3:b3:8b:ca:f5:6f:e9:bd:65:4d:de:
9f:93:89:90:fe:c5:a0:26:74:25:bd:e6:49:48:71:ea:7a:cd:
17:95:c0:33:a8:22:5d:ce:8a:0a:b6:3a:d1:75:d2:5d:84:11:
72:92:57:47:c5:16:ae:69:2e:f0:8c:a5:ee:f9:f0:6a:55:98:
4b:74:43:36:35:b1:0d:b3:30:67:4c:79:eb:e8:94:dd:b1:d4:
73:d4:ab:ed:c5:52:60:4d:2e:8d:4c:ca:ac:86:e8:c8:33:7f:
e3:1d:8c:0f:fe:ab:58:af:46:f8:18:f6:19:e2:6e:dc:2d:35:
d7:08:b0:49:6a:0f:2b:71:a7:4e:2a:a9:db:9f:db:0e:59:36:
cb:f3:4f:59:f1:f1:73:7e:c7:9e:11:c9:58:71:de:ac:fc:bd:
37:a7:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:15:03 2024 by rpki-client on console-fra.rpki-client.org