Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WrIgOMjfZIJyRokMW8vFvU4IC-s.roa
File: WrIgOMjfZIJyRokMW8vFvU4IC-s.roa (raw, json)
Hash identifier: tKSNKDn7rub3ncPJLfJA76XK8oCMoF/SyS1SGrmh0/k=
Subject key identifier: 5A:B2:20:38:C8:DF:64:82:72:46:89:0C:5B:CB:C5:BD:4E:08:0B:EB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D13B1784F7F73F66C08C23234E9753C23
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WrIgOMjfZIJyRokMW8vFvU4IC-s.roa
Signing time: Tue 16 Jan 2024 19:13:34 +0000
ROA not before: Tue 16 Jan 2024 19:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 93.114.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 17:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:b1:78:4f:7f:73:f6:6c:08:c2:32:34:e9:75:3c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 16 19:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ab22038c8df64827246890c5bcbc5bd4e080beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:be:b3:cb:72:d3:44:63:8f:8d:1b:38:92:
ea:05:da:d2:e7:ff:f2:ac:5d:99:ae:0e:8e:65:de:
de:c2:60:6f:12:ae:96:96:f0:b3:81:67:8f:99:e6:
d1:92:66:1a:85:cb:3d:dd:c8:ea:03:bf:61:52:2e:
28:3d:22:1b:9d:e9:c9:f6:67:ab:ae:06:1b:c0:60:
91:11:a2:41:d8:86:a8:f8:99:2a:de:82:c2:53:1f:
ab:c9:a5:18:85:30:f5:dc:e8:e9:a8:08:9e:e6:e8:
cf:e8:c1:b6:72:bc:dd:28:99:91:be:39:3c:a1:07:
3b:f9:f6:b5:8d:fd:b9:f1:2f:15:55:c7:ee:50:98:
cf:23:d1:c1:38:91:72:23:5a:0e:a1:ba:6c:15:bb:
bb:d4:3d:52:c2:54:d5:eb:58:78:09:6d:dd:d6:b5:
f6:62:38:48:c2:09:30:ad:b9:7c:b4:b0:50:73:b5:
00:7a:71:d4:eb:c6:ea:85:43:49:08:c9:49:4c:fd:
e3:c2:ec:6f:6f:6a:ac:64:9f:a2:e9:03:93:47:9e:
7a:af:fb:6c:ed:78:04:13:a2:d3:f1:ec:35:ef:de:
1a:6f:fd:92:fc:b4:07:bd:a3:b8:d8:cc:fd:b5:cd:
68:4d:73:d3:db:64:d3:45:81:b0:ad:bd:15:33:98:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:20:38:C8:DF:64:82:72:46:89:0C:5B:CB:C5:BD:4E:08:0B:EB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WrIgOMjfZIJyRokMW8vFvU4IC-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.192.0/24
Signature Algorithm: sha256WithRSAEncryption
36:68:16:ff:5b:60:eb:2e:77:75:cf:aa:3d:95:83:16:df:47:
3a:6b:cc:aa:b8:8a:06:3e:66:70:30:f6:17:83:32:d9:ec:0e:
31:a2:aa:26:5a:00:19:68:b5:c5:4f:97:c6:c3:0d:4e:49:18:
bb:92:43:04:8d:39:b1:9d:b8:cf:e1:89:df:27:4f:12:58:2f:
77:d5:b9:b4:26:e2:e1:8f:46:9e:22:67:6d:a2:42:60:49:40:
53:15:a1:f2:6e:d5:1c:46:02:24:c1:3b:74:9d:7d:69:b9:9c:
34:56:7e:1a:fe:38:a6:93:e9:21:3e:1e:58:ed:2e:9a:8d:1d:
75:c0:46:fa:a0:8c:44:ed:14:5e:7a:bf:08:02:6c:fe:0b:27:
a7:b3:ed:c9:0b:b4:aa:15:8f:1e:86:1f:32:88:78:2b:74:27:
7d:4e:ac:3a:00:35:85:d9:f0:9b:0d:43:c8:5d:62:b0:cb:ec:
4c:68:3f:68:ad:b8:b6:c1:ae:d0:cb:e6:c4:4e:37:f9:1b:9a:
5f:49:6d:e9:9d:02:63:dd:4f:e8:e6:72:b4:6b:25:2f:5d:45:
7e:90:3c:35:d4:8f:77:4c:a8:a5:45:f4:a3:56:25:65:28:35:
86:4f:d4:f3:d8:5c:7e:94:eb:6b:28:a8:4d:f6:4b:86:8b:ad:
ed:76:74:e6
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 16 23:09:28 2024 by rpki-client on console-fra.rpki-client.org