Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/VcU7An1pdueU_D-1YuhzHzKuxH0.roa
File: VcU7An1pdueU_D-1YuhzHzKuxH0.roa (raw, json)
Hash identifier: GakoHTSAWzbNZcqsHSWmBBIPhQUWFldHXAo/LquxixM=
Subject key identifier: 55:C5:3B:02:7D:69:76:E7:94:FC:3F:B5:62:E8:73:1F:32:AE:C4:7D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D5A0565E5E55615665B5E5F1A5D5EF632
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/VcU7An1pdueU_D-1YuhzHzKuxH0.roa
Signing time: Tue 30 Jan 2024 10:58:39 +0000
ROA not before: Tue 30 Jan 2024 10:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 93.157.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 17:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:05:65:e5:e5:56:15:66:5b:5e:5f:1a:5d:5e:f6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 30 10:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c53b027d6976e794fc3fb562e8731f32aec47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:9b:a6:5f:04:32:4e:58:30:b6:46:4c:20:
95:1f:e8:17:03:cd:b4:c5:46:71:d7:79:a9:dd:17:
79:3b:1a:b0:fa:c9:4f:34:3c:ea:d4:1c:68:6a:d7:
16:0e:9d:6d:52:26:6c:7a:18:d3:b9:5b:9d:96:c0:
6a:93:fb:cf:0c:2c:bc:82:99:ff:0c:f4:4b:a8:46:
1d:ee:ac:5b:2d:18:66:7d:b9:07:74:50:43:5b:55:
e7:71:0a:a0:b2:83:32:5d:1c:56:cb:85:52:dd:58:
fd:94:e3:ee:93:4c:c8:a2:f2:b3:67:e0:d3:e9:7e:
78:e1:d0:6e:0d:18:2e:71:c7:05:0d:b6:04:37:27:
b4:b7:e0:bb:2a:da:41:66:c2:0c:c4:ec:6e:ab:5b:
8a:d4:5d:3e:3e:15:ea:18:18:14:7f:40:f9:08:a5:
e2:8b:84:32:ea:8c:98:05:3b:50:2f:e0:2d:59:7f:
4a:cc:10:db:2a:52:cd:bf:c1:eb:95:12:66:e1:78:
ef:aa:06:bf:74:e2:dc:ec:0a:dc:cb:cc:e1:f7:ab:
b5:1f:c6:0b:47:cf:a4:79:55:12:d4:d6:8c:40:c7:
cf:a7:7c:d4:ba:de:6e:92:2f:ce:71:0c:c8:dc:ff:
80:0d:2e:57:30:96:7b:61:ca:de:47:14:0d:07:bb:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:3B:02:7D:69:76:E7:94:FC:3F:B5:62:E8:73:1F:32:AE:C4:7D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/VcU7An1pdueU_D-1YuhzHzKuxH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.105.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5f:8e:ca:e8:ab:f2:d6:9e:d5:b6:fa:d9:20:81:b5:72:e1:
f5:02:25:40:ff:de:20:93:9e:a8:e4:f0:8d:7b:b0:5d:c3:20:
b2:71:c6:61:ef:de:d3:20:f3:00:e8:96:46:b9:21:fa:25:e4:
6d:46:f1:57:0e:53:b4:03:9b:64:a2:33:c5:e2:5e:d0:2e:15:
18:46:ee:90:f3:d3:d0:49:cd:11:e4:c9:11:1b:54:ca:69:d2:
da:b1:e5:51:78:9c:3f:99:4e:73:10:a8:76:a0:a8:64:d7:ac:
a9:0e:48:65:1e:1a:24:d8:a6:bf:67:5c:55:69:01:94:30:02:
b2:74:d7:c6:95:9e:53:54:6e:13:73:8b:0f:3e:d3:17:e8:1e:
b4:49:88:1d:48:9d:16:a1:ce:31:9d:41:dc:64:10:cd:40:12:
8a:9c:1a:58:c4:fe:06:39:ac:78:28:52:77:95:cd:85:94:1f:
ca:4e:f2:31:dc:41:a2:bd:0d:41:ba:8e:9f:81:51:ee:41:a4:
ea:d1:d4:ac:1f:e9:87:16:71:ee:e3:b3:7f:08:61:4f:bf:8f:
d7:51:74:db:6a:9d:cf:1e:29:2a:7a:5e:df:54:38:d0:bb:94:
54:70:69:43:1a:10:7f:44:f2:77:9c:da:6d:3d:c3:e2:b8:56:
8b:91:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 20:12:27 2024 by rpki-client on console-fra.rpki-client.org