Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e42p-pxWOnQGt8gqaVTABAQqXwA.roa
File: e42p-pxWOnQGt8gqaVTABAQqXwA.roa (raw, json)
Hash identifier: H/yboL7l3LU6JnDAaqWNjwQzaKHHIjw869i16e8EiRA=
Subject key identifier: 7B:8D:A9:FA:9C:56:3A:74:06:B7:C8:2A:69:54:C0:04:04:2A:5F:00
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A6958E584A0AFC241EEB8EE7CDB0B04DB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e42p-pxWOnQGt8gqaVTABAQqXwA.roa
Signing time: Wed 06 Sep 2023 07:15:48 +0000
ROA not before: Wed 06 Sep 2023 07:15:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 93.115.254.0/24 maxlen: 24
93.114.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:58:e5:84:a0:af:c2:41:ee:b8:ee:7c:db:0b:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 6 07:15:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8da9fa9c563a7406b7c82a6954c004042a5f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:76:e9:14:54:b9:2e:da:f7:5f:f1:64:80:
64:0e:30:0a:10:6c:22:40:39:8d:89:65:38:8f:b3:
23:7a:17:4b:4f:5f:9e:e7:e5:75:f9:77:a7:e1:b1:
21:cc:92:d3:f8:4f:3f:5d:35:ec:83:7f:cd:b2:61:
61:e5:de:0e:3b:45:d9:c1:b0:77:e6:04:40:bb:27:
6b:dd:17:e6:ec:e6:d7:33:32:63:95:10:e5:a4:56:
6a:82:a1:26:52:85:6c:fb:2c:24:ca:48:10:67:97:
9c:2e:21:2f:f1:d3:75:96:09:b9:b5:ae:a2:5b:71:
a6:4a:c3:2e:24:24:e2:b4:d6:ea:7c:14:0d:55:14:
0d:31:1e:f5:b6:e0:e1:d2:4a:de:ea:52:56:2c:70:
2f:db:d5:7f:93:df:78:b3:31:d1:ed:8e:19:a1:5d:
24:af:b9:25:a4:2a:e4:3c:ee:c1:ba:90:1a:a6:7f:
20:bf:5e:5c:e2:9a:cb:61:88:ef:58:01:a9:22:c4:
ee:fc:a8:f6:75:e5:58:71:5e:1d:d1:d9:13:d2:e0:
ba:c8:c3:b8:c3:aa:c0:75:5b:b9:82:7b:bc:00:ad:
30:61:ac:4b:2e:3f:0d:6d:e2:1d:ab:05:a0:e7:e6:
87:6a:52:bd:d1:be:8d:f0:df:b8:68:5a:72:c6:51:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:A9:FA:9C:56:3A:74:06:B7:C8:2A:69:54:C0:04:04:2A:5F:00
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e42p-pxWOnQGt8gqaVTABAQqXwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
93.115.254.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9d:bf:3d:fb:35:e5:fe:85:f3:d8:4c:c8:70:32:0f:d8:42:
67:83:5b:7a:05:97:ca:df:ca:78:94:42:60:55:be:50:53:94:
99:a0:f0:2c:b1:b2:d3:e1:cb:6e:d2:1c:86:8f:d1:79:e1:93:
9f:45:e3:11:3e:ba:d2:f0:62:6a:3d:9c:34:41:5b:ed:09:e1:
7f:2d:47:2c:3a:70:62:10:a5:2b:74:cb:be:da:25:03:78:b7:
3c:00:5a:7a:97:03:a4:97:1b:0d:c5:a3:f7:80:33:ce:e2:14:
87:67:55:41:db:eb:9b:0e:e1:4d:db:8a:0a:e5:09:94:6a:ff:
34:a6:e8:2f:e0:0b:bc:d2:95:e3:3f:cb:b7:5d:66:11:f0:39:
5b:a2:12:a0:96:22:56:90:e9:da:9c:c9:84:74:ec:b4:08:3a:
b7:cf:ed:ec:80:cd:39:b4:60:1b:86:1c:10:e1:f8:f3:b5:80:
ba:ff:58:cb:ab:f7:46:04:0c:a2:b4:5a:5e:39:a2:a9:71:3c:
fe:0e:e8:69:59:24:91:97:64:0a:f0:42:f2:76:4d:da:f6:35:
5d:fe:2d:54:d4:77:e4:6b:ac:66:66:33:ce:f8:15:06:8f:53:
65:33:b0:e3:3a:52:51:3b:13:88:bc:5a:1a:d3:09:82:e5:d2:
85:2e:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org