Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa
File: uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa (raw, json)
Hash identifier: JkMp2V0xW6YbAyYwJg6maWUg23lzsZYWE4HFKA+T/5I=
Subject key identifier: B8:22:24:1E:8F:A8:7B:21:A2:AF:A9:2A:77:2E:AF:8C:5A:69:D4:AC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB82F12830ADAAAA46566C6419FC9A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa
Signing time: Sun 01 Jan 2023 19:25:08 +0000
ROA not before: Sun 01 Jan 2023 19:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210718
IP address blocks: 93.115.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:82:f1:28:30:ad:aa:aa:46:56:6c:64:19:fc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b822241e8fa87b21a2afa92a772eaf8c5a69d4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:57:9f:90:11:da:a4:4d:49:ba:30:8c:1c:
92:d6:f0:7c:45:c8:30:48:e1:d8:bf:70:16:f2:8a:
4f:5a:b6:f6:9c:62:fd:cc:1a:6b:3d:1d:cd:c3:a3:
3c:93:0f:16:f4:79:bf:c3:95:4f:95:e2:85:78:8f:
cb:fe:80:70:78:a1:43:67:31:ce:8d:15:d1:bb:e3:
4a:2a:21:cb:1d:55:59:5c:b3:bf:e1:b7:15:36:f9:
b6:f5:4d:18:44:c6:eb:6f:72:2f:9c:dc:f3:38:fc:
71:17:76:2a:95:69:74:5c:89:6f:a3:be:6c:47:f4:
76:31:2d:ac:e1:53:4f:10:89:20:5c:84:72:7f:16:
50:77:bd:b8:64:51:b4:93:26:47:4a:5b:1c:2f:cc:
f7:4d:fa:6c:ad:db:04:86:2c:cf:da:46:c7:d6:1c:
ee:d6:33:8c:5c:d6:f9:64:3c:c5:17:3b:da:67:a6:
27:79:9e:0c:69:0d:30:ed:96:2c:d0:c2:81:65:de:
e9:77:ad:34:c4:65:93:ab:99:2e:04:3d:a0:99:7e:
15:f3:12:2e:2b:1d:00:85:a9:0c:1a:31:77:5c:06:
27:af:1a:12:91:fe:2b:91:3a:9d:ca:22:e7:8e:78:
70:80:a4:6d:f1:94:88:5d:d5:cf:85:57:49:a3:0f:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:24:1E:8F:A8:7B:21:A2:AF:A9:2A:77:2E:AF:8C:5A:69:D4:AC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.101.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8d:9c:11:28:17:a1:0c:e9:74:da:b2:ec:91:a4:b2:1a:bb:
52:2d:18:cd:13:35:c1:a2:0b:3b:c4:8a:a2:ac:f1:c6:a1:b4:
30:e1:36:2f:97:f6:d1:b3:8d:72:76:94:25:b3:45:f0:b3:f2:
fe:a4:fb:85:6e:f2:d5:dc:aa:5c:17:a4:c7:27:57:3f:0f:bb:
e6:da:23:c1:23:34:15:5f:06:b8:fe:f1:03:61:bf:43:26:84:
00:74:1e:35:0e:79:b5:5c:08:50:4a:cd:89:d9:62:d1:1b:9b:
5b:8d:fc:4f:b1:90:bc:da:bc:76:91:15:bf:77:55:e1:0c:32:
ad:0b:af:80:ba:e4:2c:9f:c5:98:c6:9f:b0:bc:de:17:4e:38:
3e:c9:3c:7f:78:e3:27:9f:bd:24:d3:03:49:fe:25:43:bd:ba:
c9:5b:28:bb:ce:b3:77:30:30:fe:46:9a:49:e6:9e:52:41:90:
d5:99:b8:75:3b:20:db:c8:fd:68:4d:08:8e:15:25:cd:81:24:
df:aa:89:6b:da:b9:66:fe:97:b1:7e:99:16:fa:85:38:1b:ec:
7f:98:fe:4f:c2:7f:7a:a1:31:08:b6:35:44:f4:a0:60:7d:e3:
70:d6:84:97:f7:19:3a:3f:b9:f1:ce:97:64:2c:f2:5a:8c:31:
6e:40:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:36 2024 by rpki-client on console-fra.rpki-client.org