Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fxW1diQhuCekK7IunlWVlkemowA.roa
File: fxW1diQhuCekK7IunlWVlkemowA.roa (raw, json)
Hash identifier: cSpwe7OtGWNeLSwKaJdUl8LkbvjPmgJtUg28CH/5su0=
Subject key identifier: 7F:15:B5:76:24:21:B8:27:A4:2B:B2:2E:9E:55:95:96:47:A6:A3:00
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189104536E619E28A574B643AE70DF31ED0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fxW1diQhuCekK7IunlWVlkemowA.roa
Signing time: Sat 01 Jul 2023 07:05:18 +0000
ROA not before: Sat 01 Jul 2023 07:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 93.114.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:10:45:36:e6:19:e2:8a:57:4b:64:3a:e7:0d:f3:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 1 07:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f15b5762421b827a42bb22e9e55959647a6a300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:48:2f:53:99:ea:26:d4:f3:23:7c:5b:de:
4e:f9:d1:fb:29:8f:fd:1a:ee:3e:37:db:61:87:cd:
44:fa:8e:93:b0:ad:77:52:e8:b0:8d:bd:d1:0a:e7:
84:03:37:17:80:95:84:40:54:06:34:dc:9a:e0:c7:
38:31:3e:20:dd:c5:27:ef:93:d4:30:73:6c:3a:00:
08:83:5f:82:d1:34:b6:de:33:94:8d:0f:6c:33:17:
53:c6:94:77:52:55:23:be:8f:5c:30:fb:fd:93:a9:
1e:0d:1f:36:00:51:ef:30:ea:84:97:6d:4d:0f:5a:
c7:5b:79:b0:82:a1:5f:0d:3e:fe:15:9f:8e:ef:88:
33:89:4b:c0:29:65:b1:8a:08:b4:38:21:42:dd:b1:
89:04:4c:cd:20:2c:11:b1:79:a4:ec:a2:23:71:89:
fd:4d:d9:03:2b:8a:5e:80:79:38:eb:0f:b4:ee:69:
95:68:f1:0f:b1:3d:f5:74:5d:4d:df:88:15:26:bb:
c9:00:bc:4d:ba:3b:69:6f:16:32:26:95:9a:89:20:
b1:9d:01:5a:96:77:26:08:f5:bd:0a:23:43:77:0e:
4a:97:b9:08:9b:27:e8:d3:0f:d6:2b:b0:e5:af:ce:
2a:e2:a8:e5:8c:15:36:01:c7:40:0e:cb:a8:73:ec:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:B5:76:24:21:B8:27:A4:2B:B2:2E:9E:55:95:96:47:A6:A3:00
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fxW1diQhuCekK7IunlWVlkemowA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.193.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d2:3a:2b:12:cf:a1:06:36:8e:6f:e9:30:98:53:f8:36:63:
ab:3a:13:25:25:5a:be:dd:02:d3:73:5d:db:f6:c1:c3:a3:9e:
e2:97:7f:33:eb:1c:ff:61:94:9d:4c:ff:de:79:e7:9d:07:c7:
17:a4:f6:13:5c:a3:db:66:af:bc:e4:f4:95:64:08:51:06:51:
7e:61:ff:b3:d5:de:c0:da:8e:4d:dc:31:b0:14:7c:60:1c:34:
ad:c7:68:f3:66:a0:f9:de:b0:3a:7b:d5:29:2d:ab:1b:27:ff:
0a:50:5e:b1:43:71:39:3e:10:52:34:78:f7:45:50:82:35:3e:
f8:f2:79:c2:ea:e9:0e:91:d9:21:9b:09:de:7c:1c:a8:4a:5d:
8b:bf:16:4e:e4:04:f4:62:65:81:31:ff:90:0e:86:e1:37:57:
a3:fa:f5:37:c8:dc:e1:fd:2b:93:92:34:eb:f3:1e:2d:56:af:
d5:00:8e:df:2f:df:3b:9a:ad:7c:c1:ec:64:7e:a4:83:9c:d9:
13:31:60:e0:9f:e8:36:9b:d2:94:56:1f:82:9a:26:5c:d8:85:
96:fd:94:b1:ed:22:20:a7:61:63:bc:b4:0d:87:36:d5:81:99:
c6:d8:13:ce:cb:a1:e8:de:e8:ce:39:7c:e6:10:8a:f7:c5:99:
6e:33:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 11:52:25 2023 by rpki-client on console-ams.rpki-client.org