Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ooA7Bot-kqSYtGTyWCzTWS_9-rs.roa
File: ooA7Bot-kqSYtGTyWCzTWS_9-rs.roa (raw, json)
Hash identifier: qUtPnSygiAbjCFpqvvvdWszXI5uoQWwBxNOPSYfVZ3k=
Subject key identifier: A2:80:3B:06:8B:7E:92:A4:98:B4:64:F2:58:2C:D3:59:2F:FD:FA:BB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01876A4F6CC5699F002F598DFDEEC2851BB3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ooA7Bot-kqSYtGTyWCzTWS_9-rs.roa
Signing time: Mon 10 Apr 2023 08:36:42 +0000
ROA not before: Mon 10 Apr 2023 08:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 93.115.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:4f:6c:c5:69:9f:00:2f:59:8d:fd:ee:c2:85:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 10 08:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2803b068b7e92a498b464f2582cd3592ffdfabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:d5:89:c6:3c:1d:98:5d:27:f1:c3:fe:2f:
5e:8e:fc:60:93:5e:74:e5:e4:4f:28:79:fd:f9:57:
78:49:1f:cb:45:37:0e:56:bf:e8:9f:d6:77:60:2d:
87:50:d5:b7:f7:99:81:ce:55:e8:f1:78:a0:18:d4:
ef:bb:de:4a:0e:11:67:ed:d4:83:e6:a9:b5:52:c5:
cd:2b:6b:24:cd:58:4c:ea:93:fa:bc:25:0e:8e:ad:
8a:60:95:36:39:e0:6c:7d:a4:56:5a:10:49:0e:86:
c6:b5:a1:63:53:e9:77:f0:79:01:3c:bb:77:08:fc:
39:66:67:e1:34:51:6f:91:7a:97:de:b3:d9:fc:f0:
0e:ae:c8:1f:46:48:d3:34:35:58:c6:bd:c2:b9:d1:
c0:63:fe:25:15:bc:c0:17:47:0f:c0:bd:3c:3b:36:
3e:cd:94:df:fb:ef:17:36:9b:71:d4:04:5d:9c:15:
61:a8:69:ff:d2:a3:c2:de:15:58:4e:99:41:ec:c9:
79:79:d6:eb:32:d6:8b:00:bb:75:14:96:21:7f:8b:
6e:e0:fc:cb:85:dd:a8:b0:47:da:39:4a:b5:4e:95:
49:90:7b:0b:17:d9:cd:d3:bf:66:6f:15:dc:a2:cb:
50:4d:c8:a6:0b:88:e8:70:0e:83:9a:bb:93:d9:60:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:3B:06:8B:7E:92:A4:98:B4:64:F2:58:2C:D3:59:2F:FD:FA:BB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ooA7Bot-kqSYtGTyWCzTWS_9-rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.254.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2e:a4:8b:2e:fe:85:80:67:fc:5d:75:81:17:56:e6:80:26:
c3:00:e8:93:ee:1e:04:2c:e1:4c:97:0a:12:aa:5e:57:f1:47:
ac:84:87:ae:01:6b:c4:b5:ad:f1:1d:13:58:c7:9f:fe:ed:5d:
07:3b:fb:8f:36:db:99:85:77:cb:43:cf:8d:09:43:87:47:47:
d2:2d:7a:5f:1e:8c:dc:8a:18:79:bd:0c:47:04:6c:01:6a:40:
72:4d:bf:d8:9e:36:11:ff:3c:de:6a:68:f6:3d:76:0b:b0:04:
56:6b:a4:4a:1c:41:ff:78:c7:72:11:dc:98:7e:ea:ce:60:4e:
49:d2:78:ce:a7:11:1a:4e:f3:f3:9b:7b:08:e8:7e:bc:e5:c8:
97:6c:df:d7:ad:55:f3:0b:10:3b:5f:30:dc:68:78:b3:2f:80:
f9:fa:ac:b4:ab:0d:49:03:31:88:77:61:da:08:2d:b2:90:05:
1b:e4:d2:eb:d2:b1:89:69:df:37:f6:14:c8:82:b7:24:19:5d:
94:ed:63:bd:fd:8e:8f:d5:24:90:72:b7:83:d8:82:0a:ac:4d:
52:36:61:13:34:ac:87:a4:88:6f:f2:da:bc:e8:7b:ab:5c:b8:
2e:e7:e8:89:bf:e0:41:b7:66:e0:45:39:ad:e5:69:34:dd:43:
24:df:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org