Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cZ5I0laUoBoxbS_iOiTxU30h9a8.roa
File: cZ5I0laUoBoxbS_iOiTxU30h9a8.roa (raw, json)
Hash identifier: zBkVQ90TOfFZXnWu6PefzKTjTF7yjS5QsxoTh7HHQ7k=
Subject key identifier: 71:9E:48:D2:56:94:A0:1A:31:6D:2F:E2:3A:24:F1:53:7D:21:F5:AF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018ADAEF8E1E8157322E9D41DAF6D17F109B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cZ5I0laUoBoxbS_iOiTxU30h9a8.roa
Signing time: Thu 28 Sep 2023 08:37:27 +0000
ROA not before: Thu 28 Sep 2023 08:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 93.113.177.0/24 maxlen: 24
93.113.178.0/24 maxlen: 24
93.113.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:ef:8e:1e:81:57:32:2e:9d:41:da:f6:d1:7f:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 28 08:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=719e48d25694a01a316d2fe23a24f1537d21f5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:9d:a8:ac:de:25:b3:7e:81:11:2c:67:7a:
c1:ab:b0:ed:36:b4:6d:b7:3d:9d:de:78:18:74:cb:
97:9c:b6:4b:28:c8:d0:7f:01:24:8b:70:89:91:9b:
43:1d:0e:18:25:67:96:eb:ea:6a:4b:8d:2d:65:88:
ff:17:8a:76:4b:f3:4c:58:c2:36:53:a3:07:6b:ba:
25:ed:75:8f:e7:f8:84:d4:e2:c3:91:81:ee:ab:d8:
fd:4e:b2:69:32:7d:3d:c8:ae:9f:93:d5:13:2a:8e:
c2:1d:0c:f0:e4:63:8c:6f:47:2e:66:77:4d:16:15:
4c:e0:80:a2:9a:79:ad:32:13:0e:b3:4c:d9:6f:ab:
e1:d5:8b:20:8a:3e:04:11:71:30:9e:3a:4f:01:b2:
f4:83:c0:62:74:6e:13:84:0e:54:74:5f:67:73:9e:
9b:35:fa:48:76:46:54:d4:3d:40:fd:2c:86:4d:83:
39:04:0f:2c:db:3d:ee:a8:4e:66:e4:f7:9b:2b:0f:
65:57:1b:12:a8:53:49:f5:a3:bb:f4:46:56:b8:eb:
0d:8d:55:8e:46:21:72:68:10:96:38:b2:85:77:5d:
6a:c2:35:24:5b:da:74:6e:fb:ce:23:b6:d5:dc:38:
7f:3f:c7:52:aa:86:72:bc:0c:61:3d:90:39:d0:a7:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:48:D2:56:94:A0:1A:31:6D:2F:E2:3A:24:F1:53:7D:21:F5:AF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cZ5I0laUoBoxbS_iOiTxU30h9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0-93.113.179.255
Signature Algorithm: sha256WithRSAEncryption
73:f3:b7:99:8c:a4:73:57:80:08:b2:84:45:88:d7:e2:e1:1a:
2f:f5:05:a5:72:bb:01:f0:94:19:5e:d1:fb:c5:97:96:a3:63:
c0:74:7d:27:a4:14:a0:16:a3:6d:ed:e5:7b:62:78:79:08:6a:
21:6f:b8:c5:10:ca:19:bc:3b:12:e3:e7:63:3a:59:ff:4a:21:
26:94:cf:b5:be:23:dd:8e:d1:05:e4:dd:7b:1c:de:76:d7:36:
76:bf:99:eb:c5:62:11:4c:91:9b:60:d4:b5:85:9c:5b:77:8f:
71:3e:da:69:9c:42:96:ec:5a:f7:e5:77:05:5b:22:29:2a:ce:
c7:2f:5c:96:76:46:82:28:53:7d:e3:03:87:14:78:0f:1b:a5:
68:e8:1b:0a:59:52:c5:20:f1:de:1f:04:68:28:34:12:e0:cc:
83:e6:e4:9b:3e:a7:d8:79:59:d2:7b:16:7d:92:86:82:bc:53:
25:ea:7a:57:09:a8:d9:22:87:e6:22:38:95:77:de:34:01:7b:
c7:aa:86:e9:c3:6d:c4:fe:2f:1c:f2:08:b8:fc:a8:33:f0:74:
27:4e:d5:27:25:4f:b4:9a:61:41:a9:8f:0a:17:f7:95:ca:30:
be:d0:dd:10:67:33:f7:de:98:c0:70:e0:7b:f1:30:a8:8b:03:
77:8f:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org