Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/k-T1PvmaYmhW8C0Z4ABGwJB60II.roa
File: k-T1PvmaYmhW8C0Z4ABGwJB60II.roa (raw, json)
Hash identifier: TGt2BWdgGHEp2V8a97eTJq4SW9GyY5aArqPmKEq0LGo=
Subject key identifier: 93:E4:F5:3E:F9:9A:62:68:56:F0:2D:19:E0:00:46:C0:90:7A:D0:82
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50106884468BFAB3F7F07C1FCF7AF7E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/k-T1PvmaYmhW8C0Z4ABGwJB60II.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 93.114.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 05:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:06:88:44:68:bf:ab:3f:7f:07:c1:fc:f7:af:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e4f53ef99a626856f02d19e00046c0907ad082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:25:03:7e:eb:24:56:16:dc:77:77:54:20:
1b:c3:53:1c:82:01:fc:6a:66:11:45:8c:0a:61:d4:
18:36:34:52:07:02:ed:43:6d:d3:b6:b9:81:6a:8d:
4f:27:d9:1c:6b:6e:ad:f6:d7:f9:7c:5e:9f:9f:34:
4d:97:a1:51:5b:32:67:10:cd:98:31:e4:0e:24:92:
39:3b:c1:9b:5f:9d:3f:ff:32:91:1c:a7:4e:0c:4c:
7d:7e:7d:32:56:ed:32:7d:45:8b:53:21:16:22:83:
66:c2:b9:0b:46:e1:09:d1:60:a0:6b:f4:42:50:9b:
44:85:d4:04:22:1c:40:19:a9:f8:6f:1f:35:74:3c:
a2:93:6a:ce:3a:61:a7:20:28:25:35:46:6a:9e:6e:
b4:ee:b8:d1:80:cb:6c:44:26:dd:fc:c6:e9:cb:36:
12:ab:2b:a2:f1:34:88:cb:16:99:2b:f5:6e:43:a5:
a3:7f:23:0d:ea:a3:81:67:47:34:4f:85:89:39:ee:
5b:a5:4d:07:f8:53:2f:63:be:ee:a6:30:94:d5:a4:
8c:ba:61:8f:35:dc:d7:0c:73:4c:37:73:72:1a:7b:
72:ee:b0:a9:42:bf:01:33:cc:37:be:70:eb:4e:9c:
cd:a1:5c:60:5d:b0:a5:b2:8b:c8:cb:09:76:c9:c6:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:F5:3E:F9:9A:62:68:56:F0:2D:19:E0:00:46:C0:90:7A:D0:82
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/k-T1PvmaYmhW8C0Z4ABGwJB60II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e7:00:1e:07:02:82:84:60:38:8d:ee:ec:33:2d:7d:4b:63:
86:b8:e2:6a:0e:83:67:44:41:22:85:92:3a:e5:c1:9e:ce:04:
76:8d:28:70:53:85:c5:34:c0:18:6f:e1:f8:77:e1:5f:0e:0c:
3e:4d:0c:3c:be:16:ab:54:ef:27:72:33:4e:6f:38:0e:7a:1a:
5d:3f:98:45:98:ba:c8:ec:fd:98:e7:70:e4:6f:73:3f:5f:fa:
fc:73:06:e0:72:9d:d1:a3:36:18:37:b6:a2:ca:be:78:3e:a7:
72:ee:2d:2d:a0:cc:a3:8f:48:be:e4:4d:42:ed:b7:11:08:64:
56:2b:8c:36:f4:56:d0:cd:c3:59:7e:38:61:cd:20:f2:fc:83:
30:de:c8:65:50:c8:24:89:26:2d:5e:cc:f2:82:f6:9f:96:43:
41:0b:5a:23:df:d9:25:46:8a:13:57:23:1b:a8:75:87:52:69:
7b:4a:51:42:79:cf:c4:1c:d3:45:6c:12:be:c5:bc:88:ac:c2:
15:e0:da:d3:66:3c:15:a4:b3:ba:58:44:a1:09:41:6a:25:b9:
79:2a:ff:cc:3d:73:73:03:75:54:f1:76:fd:eb:1d:cf:99:ed:
ee:bb:7f:09:60:5d:7b:25:fd:c6:1c:fb:a9:05:7c:36:e5:1d:
77:24:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 06:57:33 2024 by rpki-client on console-ams.rpki-client.org