Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/k07hsRpIdjv9YtSkO-SweNMLDQg.roa
File: k07hsRpIdjv9YtSkO-SweNMLDQg.roa (raw, json)
Hash identifier: FSdwourzG0M0mFdI51fw0acSf2wgm2gXeADLLb5b3RQ=
Subject key identifier: 93:4E:E1:B1:1A:48:76:3B:FD:62:D4:A4:3B:E4:B0:78:D3:0B:0D:08
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B42DF93D99D5C81EBD2E341B229E1B007
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/k07hsRpIdjv9YtSkO-SweNMLDQg.roa
Signing time: Wed 18 Oct 2023 13:00:30 +0000
ROA not before: Wed 18 Oct 2023 13:00:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:df:93:d9:9d:5c:81:eb:d2:e3:41:b2:29:e1:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 18 13:00:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934ee1b11a48763bfd62d4a43be4b078d30b0d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:86:32:5a:9b:71:b8:9d:db:bb:fd:53:bd:
bd:97:f6:7c:e8:2f:8b:a8:7b:03:00:b0:58:c7:ff:
27:0d:68:c6:09:ae:3b:15:84:37:22:a9:04:43:30:
c4:7c:b0:e1:95:de:ff:c0:98:5d:73:d2:7b:ab:59:
13:71:13:fb:ab:f6:c5:48:70:f3:24:cc:61:a3:b0:
48:14:ed:ad:61:13:5f:a3:1c:ef:98:87:25:79:9d:
95:b6:65:8c:38:ce:78:1e:bd:24:78:75:dd:d1:53:
68:33:06:10:4a:a4:61:52:ed:b2:9b:6a:b1:3d:45:
31:a1:e4:d2:7e:d9:43:be:66:3e:d4:65:f8:67:4b:
97:77:2c:f2:14:0a:6d:06:82:b7:80:5d:2d:12:f9:
f1:46:65:ad:f0:75:70:f2:7a:a8:5c:76:61:be:e3:
cc:89:02:1d:26:e4:4b:10:f3:c5:cc:57:5d:71:bb:
e3:b5:15:7b:03:62:1b:51:8b:7f:67:ea:88:bd:7d:
5e:e2:55:3d:45:96:c8:f7:11:ad:31:81:17:8f:93:
7d:4f:27:f3:e4:e6:92:3a:3c:02:9f:4f:71:d5:ad:
70:0f:87:e4:89:dd:d9:11:7b:d0:b0:c2:39:18:e2:
8f:b7:0b:d2:dd:8e:48:4f:51:69:1a:6e:36:0d:f8:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:E1:B1:1A:48:76:3B:FD:62:D4:A4:3B:E4:B0:78:D3:0B:0D:08
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/k07hsRpIdjv9YtSkO-SweNMLDQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d0:3d:a7:5f:28:82:fd:ac:7b:6c:f6:cd:55:c6:6a:36:a7:
c3:e3:90:0e:53:89:24:74:a7:53:54:14:58:75:cf:e1:1c:9d:
80:64:00:7e:fb:26:e5:2d:37:c8:1b:98:90:c3:92:73:20:bc:
ec:e8:a1:d0:66:64:a4:60:20:ff:bf:1c:66:82:68:ee:16:fd:
a3:e6:8f:e4:e3:16:19:37:44:90:31:05:75:4e:62:c6:39:b4:
cb:6d:83:24:56:f7:02:67:65:5d:5c:77:70:27:31:66:a5:78:
7b:d9:74:69:6b:19:eb:c4:c0:10:e6:09:f7:8e:2b:70:8e:a9:
a5:d1:1c:85:41:0b:0c:5d:e8:6b:20:17:77:36:28:39:76:ad:
bb:57:31:c3:76:30:e3:ba:5b:52:e3:27:b5:34:e4:46:f6:0d:
26:28:21:8a:5d:46:93:e2:4c:6a:19:4f:6c:f3:a9:09:c5:fd:
db:62:4a:ce:19:23:63:01:8d:0d:97:47:fb:5d:59:cc:15:06:
1d:e1:5e:c7:8c:33:98:78:2a:bf:cb:1f:f8:ac:46:91:a5:c0:
63:8f:eb:e4:8a:a8:19:59:0d:d6:1c:eb:16:1f:06:13:85:23:
61:b4:26:b0:77:39:f8:f5:9c:6f:4c:c3:e3:51:b8:b0:d0:51:
49:a4:db:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org