Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Pv0drPYaKo4HKEyqMe3eK8YckB8.roa
File: Pv0drPYaKo4HKEyqMe3eK8YckB8.roa (raw, json)
Hash identifier: i4fzefPN3C/jJqXpUcn7jlOaLjm0rrSu/kQnK+Hf1S4=
Subject key identifier: 3E:FD:1D:AC:F6:1A:2A:8E:07:28:4C:AA:31:ED:DE:2B:C6:1C:90:1F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01893627E3E30586469C59C51C935015F202
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Pv0drPYaKo4HKEyqMe3eK8YckB8.roa
Signing time: Sat 08 Jul 2023 15:38:51 +0000
ROA not before: Sat 08 Jul 2023 15:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 93.115.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 04:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:27:e3:e3:05:86:46:9c:59:c5:1c:93:50:15:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 8 15:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3efd1dacf61a2a8e07284caa31edde2bc61c901f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:a0:e7:4e:68:fa:71:3f:0b:d0:77:c4:5d:
2a:ea:e8:0e:2e:05:d7:06:b5:82:15:92:90:82:1b:
60:fc:ea:46:a5:b0:3a:67:d5:30:a2:63:89:e0:46:
3c:7f:9d:fe:30:56:1a:79:ab:91:66:28:57:cf:02:
d7:51:56:68:00:05:37:b4:e9:cc:b3:0e:62:d2:13:
ea:ee:67:65:f9:50:af:d2:ca:3f:a3:54:4b:5e:f1:
28:dd:da:df:dc:da:9c:d0:50:c0:52:f3:b2:81:3f:
d0:e2:cf:f0:d0:fa:d1:51:aa:72:f4:23:83:f2:10:
b5:07:66:a0:6d:e8:f8:fd:16:a4:38:69:86:0b:1e:
5f:3f:e8:2e:e2:dc:31:38:64:64:48:86:22:49:68:
d3:5a:f0:8a:3c:f2:1c:59:87:07:95:f9:7f:24:84:
4a:44:8c:2e:0a:db:b3:e4:93:03:c2:a4:b2:d3:5e:
f5:1c:0d:9f:7b:40:d1:8e:1a:30:14:c0:05:9b:eb:
b3:4c:3b:4c:e5:b0:45:fd:68:e0:02:a5:5d:65:44:
7e:5b:c6:c3:b1:23:25:86:80:19:a2:32:6c:92:e5:
f8:9f:2f:78:85:fa:29:2b:1c:95:af:6d:7c:7b:6a:
ac:41:ad:4c:1d:76:16:11:56:09:3a:0c:fe:a4:7a:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:1D:AC:F6:1A:2A:8E:07:28:4C:AA:31:ED:DE:2B:C6:1C:90:1F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Pv0drPYaKo4HKEyqMe3eK8YckB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fd:87:2f:45:54:37:a2:22:04:da:27:2c:98:d9:70:6b:08:
a2:98:3f:79:f5:d5:4a:db:75:ba:d7:2e:8b:5c:bd:c7:69:86:
4a:f6:81:d3:e1:e1:b5:90:37:3c:0f:b8:eb:8b:79:90:c3:4a:
df:6a:7b:62:c6:11:4b:2b:51:94:1a:70:62:8c:22:82:1d:44:
1a:1a:d1:50:b7:98:36:29:ee:18:7e:9b:49:94:aa:93:49:95:
a8:30:7f:f4:29:82:9b:75:03:86:70:bb:44:aa:e5:e2:e2:cb:
a7:03:b1:b6:a1:53:18:ef:8a:2f:56:b1:20:a9:b2:61:2f:7a:
62:fe:5d:45:f1:e9:3a:57:37:70:99:96:93:19:8a:2d:41:06:
1d:99:8f:fd:de:ce:cc:e5:bd:18:67:30:15:c1:be:91:1b:50:
83:6a:b1:9b:3d:68:c3:d4:f9:c8:9c:9e:2e:0b:4b:fb:e4:b1:
51:3e:9d:7c:ec:51:f6:fa:12:9b:d1:a2:78:55:e1:9e:82:5e:
0f:ca:7b:12:06:ac:5e:14:4e:64:af:e8:0d:54:1f:c2:a3:dc:
7d:56:df:68:1c:44:f0:8f:52:74:0a:e3:9b:1b:f1:d6:1d:62:
8f:a4:a5:99:7a:d8:1e:3f:aa:4a:d6:dd:d5:1b:18:03:a4:18:
7e:87:14:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:45 2024 by rpki-client on console-fra.rpki-client.org