Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kpwZr-vXm8WWEzhXoKezxAlP-BA.roa
File: kpwZr-vXm8WWEzhXoKezxAlP-BA.roa (raw, json)
Hash identifier: BZBU53577eGVOlupDW0sCLK5mYZClgfFkcx1IPRvd3U=
Subject key identifier: 92:9C:19:AF:EB:D7:9B:C5:96:13:38:57:A0:A7:B3:C4:09:4F:F8:10
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018FB5C031B3B1D614A5A0AC70C1B94EB3FA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kpwZr-vXm8WWEzhXoKezxAlP-BA.roa
Signing time: Sun 26 May 2024 16:33:42 +0000
ROA not before: Sun 26 May 2024 16:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199439
IP address blocks: 93.113.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 11:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:c0:31:b3:b1:d6:14:a5:a0:ac:70:c1:b9:4e:b3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 26 16:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=929c19afebd79bc596133857a0a7b3c4094ff810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:64:c5:0b:1b:82:89:8e:86:70:4a:78:76:
8e:70:ae:a7:6c:e9:1c:12:50:cc:40:f3:31:88:6c:
e5:c4:ed:a4:59:d1:94:3c:67:f4:c6:8c:f0:e1:5a:
54:19:c7:8e:23:08:09:68:36:0e:a9:69:7a:2c:ec:
32:8d:e8:ca:de:54:e8:6d:10:96:30:5e:df:d1:d4:
58:e3:1b:fa:27:48:76:54:73:f5:29:02:44:14:b9:
e8:c2:22:b5:eb:ca:ae:dd:18:56:37:70:a6:87:75:
76:93:30:67:4d:a4:2a:d3:64:2a:5f:52:1a:64:8f:
22:e5:73:8d:24:ae:1d:70:c0:b4:14:67:9c:d3:b0:
69:3a:c8:27:0a:58:08:c9:97:45:d3:31:c0:5b:f5:
b4:f4:cd:7b:15:48:51:9b:c7:56:6e:77:27:48:af:
4e:d6:83:ca:3b:30:01:93:5f:f5:c7:49:7f:1f:c2:
2e:87:a9:db:2f:b7:bd:1e:8e:6e:86:59:e2:a5:b3:
f2:58:01:cf:a0:87:17:30:29:22:d7:56:c0:4a:92:
f5:c5:1f:fe:8a:e8:06:ea:d3:59:6b:27:be:fd:7a:
ce:d5:e2:29:46:ec:47:bf:f0:61:f4:ab:1f:e6:0f:
6c:70:f6:c8:d2:94:5a:91:39:5e:0f:78:7e:c4:19:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:19:AF:EB:D7:9B:C5:96:13:38:57:A0:A7:B3:C4:09:4F:F8:10
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/kpwZr-vXm8WWEzhXoKezxAlP-BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a1:3f:8e:8f:ba:38:48:0f:7a:28:9f:f5:06:96:7c:04:11:
a9:f0:32:e7:02:12:7e:b3:ba:0c:ec:da:f4:8f:3f:59:3d:65:
b1:f8:9e:37:1d:50:39:41:c0:0a:47:ca:f0:8d:cd:33:bd:a8:
30:25:62:19:19:ca:9d:74:2f:89:dc:37:33:6e:17:7f:8f:a7:
01:80:b9:e7:c4:2c:a6:5a:27:4e:cc:57:13:2f:66:83:60:b2:
8a:1f:fb:f4:22:52:a4:ae:84:80:fd:80:ac:b5:3a:95:2b:5b:
4a:42:eb:f9:ef:d5:cf:52:a8:de:d2:76:e5:fc:06:8f:aa:da:
05:1b:35:e8:83:80:4e:dc:12:d4:14:64:90:66:ff:72:b8:71:
82:52:6b:ee:31:63:73:14:94:21:da:7c:b9:c4:c8:35:27:76:
47:ec:b5:5c:2e:cf:0c:20:94:f0:1a:02:03:48:72:72:7a:e7:
de:1c:56:c8:e6:5b:e8:21:99:8b:bb:54:11:af:cd:af:06:f4:
67:fa:39:ee:a3:db:09:c6:85:ee:ad:bf:b7:6b:7a:7e:99:bd:
5f:96:33:a1:2b:37:f7:a2:19:77:d2:cd:24:65:a6:07:68:c8:
33:57:d1:a5:1a:f4:aa:eb:1a:29:17:90:a8:af:23:9e:ee:4f:
f9:d0:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 12:56:30 2024 by rpki-client on console-fra.rpki-client.org