Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qjQf93eSLRtJ3AGkwHiFDaIhwmk.roa
File: qjQf93eSLRtJ3AGkwHiFDaIhwmk.roa (raw, json)
Hash identifier: /QtM6Q+pZMtHRZfGATRDi86n6kpxPttaE9vtTtN0xrE=
Subject key identifier: AA:34:1F:F7:77:92:2D:1B:49:DC:01:A4:C0:78:85:0D:A2:21:C2:69
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB7BB54F67E22BF0858B5623D97EDF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qjQf93eSLRtJ3AGkwHiFDaIhwmk.roa
Signing time: Sun 01 Jan 2023 19:25:07 +0000
ROA not before: Sun 01 Jan 2023 19:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51461
IP address blocks: 93.114.79.0/24 maxlen: 24
93.114.88.0/22 maxlen: 22
93.114.72.0/22 maxlen: 22
93.114.76.0/23 maxlen: 23
93.114.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7b:b5:4f:67:e2:2b:f0:85:8b:56:23:d9:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa341ff777922d1b49dc01a4c078850da221c269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:af:fb:a1:30:a7:63:ed:10:1e:35:f8:53:
ab:c3:35:c6:1d:fb:b0:86:de:16:37:05:fe:81:b5:
97:96:d6:12:be:a3:88:84:73:33:62:8c:d5:6b:be:
93:8d:d1:3f:cb:cc:33:c8:83:e1:51:f6:4c:d9:b9:
3d:b0:09:8e:1d:b3:4c:fc:aa:91:9f:3c:bc:7c:ff:
64:5f:9b:54:b5:f1:8e:80:70:bb:e3:b1:0e:61:65:
1d:c7:a6:f8:bb:e4:a7:6b:9a:cd:bd:18:9e:ac:eb:
5c:a0:58:43:78:f7:30:d9:2c:02:b7:9f:5a:e9:f8:
2a:ab:3f:ba:3e:7b:ec:f9:97:dd:42:0e:e5:a4:3b:
55:fd:fb:aa:a4:05:df:f0:de:a7:54:b5:2d:ad:d9:
85:d9:67:89:23:82:38:bf:07:94:22:ae:b7:61:80:
36:39:a4:b6:86:5b:cd:06:fc:1a:90:a9:56:10:78:
72:05:c0:ea:f9:0a:db:57:78:db:04:35:a9:db:b9:
95:72:bd:b7:a3:cf:c1:5b:07:1c:6b:d7:04:76:47:
2e:94:8b:ae:e3:f0:b1:60:17:9e:2f:77:de:b4:9c:
4a:4f:08:56:fe:60:0d:2a:80:10:0a:25:77:3b:77:
64:0f:c3:0e:16:ca:3f:03:4f:bc:d0:27:a5:9d:94:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:1F:F7:77:92:2D:1B:49:DC:01:A4:C0:78:85:0D:A2:21:C2:69
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qjQf93eSLRtJ3AGkwHiFDaIhwmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.72.0/21
93.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
44:9d:97:b4:5a:cf:ac:ec:d6:9c:39:85:95:92:2f:45:c1:de:
81:02:d0:ed:96:1c:e7:9d:78:c9:a2:1c:e0:7d:a5:48:29:91:
4d:3a:df:9d:3d:e8:4f:7d:c0:e9:17:99:ce:4d:ba:87:81:6c:
d3:2e:fc:9c:27:24:b1:0e:41:a6:2d:c8:8d:af:c9:2b:50:ea:
df:1c:b0:74:05:db:83:a1:8a:9e:a0:4e:80:bb:f1:1d:6b:5b:
01:16:b3:a9:89:43:a2:1e:43:18:1a:22:4c:cb:cf:4f:d6:e2:
e0:c3:6a:6a:54:6b:51:5e:56:f8:78:f3:da:b7:76:61:b5:62:
43:14:72:43:80:b6:27:d9:99:29:04:b9:98:ff:b1:78:4b:40:
48:bc:a7:5e:72:d0:04:34:ea:28:bb:8b:dd:c6:7a:f7:3f:a8:
8a:2f:d5:8a:22:38:c2:fd:a1:14:8d:40:6f:f6:6f:fb:09:af:
ac:5c:92:ae:ae:bf:df:99:18:7a:d5:19:8f:4a:c2:08:0f:42:
9d:c9:8d:0d:e9:39:1e:62:6a:9a:3d:bf:1b:ea:b2:1a:05:16:
06:e7:bf:51:e3:c3:e6:4d:e1:ac:2f:48:73:4c:43:52:e5:03:
eb:66:16:89:e9:ce:6b:e2:79:21:0e:87:d6:52:ed:99:35:97:
2e:ed:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org