Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f83xZnGaIsOHHrfpH3WpnOK0gI8.roa
File: f83xZnGaIsOHHrfpH3WpnOK0gI8.roa (raw, json)
Hash identifier: Ys9JuYrk5JVjuj5q12vwtMJOn2/wc8Zjd8FF9tg4ESY=
Subject key identifier: 7F:CD:F1:66:71:9A:22:C3:87:1E:B7:E9:1F:75:A9:9C:E2:B4:80:8F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018BB32D6373B6B4BEA8477222CF94DB9211
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f83xZnGaIsOHHrfpH3WpnOK0gI8.roa
Signing time: Thu 09 Nov 2023 08:22:57 +0000
ROA not before: Thu 09 Nov 2023 08:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 93.114.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:2d:63:73:b6:b4:be:a8:47:72:22:cf:94:db:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 9 08:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fcdf166719a22c3871eb7e91f75a99ce2b4808f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:6f:a1:7f:3f:92:c2:38:00:d2:d9:be:c5:
3a:77:cc:24:71:97:ac:57:99:c1:e8:53:ff:04:98:
36:a2:3e:42:5c:02:4a:0b:8b:d7:07:43:88:09:ae:
f9:ec:24:e6:0d:4c:17:bc:aa:e2:3e:f9:3c:5a:0d:
35:36:85:ae:ae:0e:50:6a:08:7c:35:bf:1a:91:4a:
69:69:24:78:6c:b8:01:c1:32:88:3a:4a:49:65:b3:
be:53:50:b8:dc:77:fd:cb:77:0d:8c:d2:bc:4c:7f:
83:b0:17:da:cc:18:a7:58:a1:97:cc:c2:2a:d1:65:
fc:8a:6d:c3:81:a5:e2:dc:d4:b0:43:0b:0c:03:2f:
82:ad:5f:29:dd:ab:28:49:71:a5:17:70:ea:98:ef:
f3:42:d0:3b:26:8b:1f:61:8c:1c:1b:40:2e:fe:b8:
1b:ae:9c:8a:b9:8d:b4:fa:97:57:63:90:49:ab:ed:
a0:db:5f:13:5a:03:8a:a2:76:a9:fb:ca:ff:ad:04:
de:82:a1:b1:f2:cb:16:2f:37:6e:d3:c0:4e:ec:a2:
51:ae:40:8e:7e:d7:d7:32:56:78:b1:26:57:79:b8:
03:e7:30:60:1c:9e:0e:a9:d0:65:eb:13:d8:c5:cd:
02:df:c6:75:a0:c1:5f:ad:70:a7:8f:54:2f:aa:44:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:F1:66:71:9A:22:C3:87:1E:B7:E9:1F:75:A9:9C:E2:B4:80:8F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f83xZnGaIsOHHrfpH3WpnOK0gI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:28:38:19:95:a6:f7:aa:e9:79:97:65:d5:71:26:b6:42:43:
68:19:17:0e:1e:2a:5c:17:d0:75:18:b9:45:4d:9f:33:bc:da:
79:0c:ed:02:84:dd:d9:03:39:29:b4:cc:3c:26:77:ff:ec:e8:
6f:8d:1c:38:31:b1:bd:c9:45:e6:fe:69:ee:0c:1e:ea:2d:df:
ea:4a:e7:15:33:bb:fe:df:3d:42:10:26:9b:e2:29:8d:43:b0:
b7:d6:fc:50:ad:9f:f1:49:97:2a:5c:96:85:18:98:1d:b6:f9:
75:d2:b9:5a:cb:2d:55:fd:da:a6:58:2a:4f:94:7a:3e:df:33:
c4:1f:e4:51:0f:98:cc:0e:89:dc:9d:07:2f:45:db:aa:d8:4d:
5c:c6:59:b2:9a:bf:77:fb:89:2e:54:4e:50:61:63:ec:7c:eb:
ab:18:60:77:b6:57:38:e9:57:08:da:36:ca:39:b7:6b:22:9b:
71:fa:bf:38:26:4c:91:20:86:34:61:7a:42:20:e0:6c:85:37:
00:9d:02:89:73:83:95:3b:59:33:26:11:de:9a:26:aa:fb:cb:
0b:d1:b3:72:62:ca:bb:1e:7b:58:99:52:e6:93:1c:56:21:02:
c8:be:63:80:82:30:8a:fd:64:74:7f:29:de:b9:4b:c3:50:1d:
35:12:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:18 2024 by rpki-client on console-ams.rpki-client.org