Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/94Vlo6xCu_ya9wuhJwDNM1-XKy4.roa
File: 94Vlo6xCu_ya9wuhJwDNM1-XKy4.roa (raw, json)
Hash identifier: DGGnZsZV1d0smzGvZPsTPAYc/3UXLpaIhW4h/lyHSJM=
Subject key identifier: F7:85:65:A3:AC:42:BB:FC:9A:F7:0B:A1:27:00:CD:33:5F:97:2B:2E
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 01856EB8F72178A36676E56583511BFD17C3
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/94Vlo6xCu_ya9wuhJwDNM1-XKy4.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48422
IP address blocks: 185.93.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f7:21:78:a3:66:76:e5:65:83:51:1b:fd:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78565a3ac42bbfc9af70ba12700cd335f972b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:84:d3:10:77:dc:4f:97:88:c1:92:94:01:
82:98:fd:24:58:f7:3e:75:49:1d:23:13:4a:cb:d2:
3d:dc:d4:aa:99:d0:24:0b:57:d5:55:4a:07:17:41:
8f:3f:a2:02:21:c1:6a:82:dd:27:b8:6f:b9:3b:81:
4f:73:eb:48:96:13:55:b0:19:11:66:28:95:43:af:
df:f1:bd:5b:66:0c:ee:b2:97:06:ac:9e:82:51:0e:
fb:3a:23:4b:9d:65:e6:a7:42:37:86:3c:15:20:fe:
a2:4f:0e:fd:66:77:4c:72:1f:2e:89:1d:a9:98:01:
e4:45:d4:1f:42:f7:a0:13:db:11:69:38:64:cb:7f:
96:71:ed:bb:d4:ec:08:24:2e:44:c7:3d:f9:10:1b:
f5:8b:fc:e0:86:84:7b:20:c8:98:89:ce:00:ca:16:
99:d9:e8:2b:92:4e:91:f2:ee:9f:8e:49:bd:f6:27:
ce:00:87:48:e9:6e:04:d3:4d:94:36:51:08:d6:39:
48:48:17:f5:ab:f2:17:57:fc:cc:fe:da:ce:d1:dc:
b4:23:16:90:20:ad:f9:8e:e3:08:ae:10:5c:a7:ed:
7c:86:ad:20:39:bf:b1:3d:1d:a2:f0:e9:ad:10:d3:
99:5d:68:27:6a:cb:98:bc:d1:63:0f:36:90:71:01:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:65:A3:AC:42:BB:FC:9A:F7:0B:A1:27:00:CD:33:5F:97:2B:2E
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/94Vlo6xCu_ya9wuhJwDNM1-XKy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:26:88:bb:c1:e4:2d:ce:b4:92:ec:de:37:4b:a3:fe:81:b8:
f0:2a:27:c4:87:71:b4:2f:00:84:a1:42:d0:a7:a4:c2:70:f7:
66:4e:ff:a7:4f:e3:22:6d:f2:b6:40:d2:80:bb:b7:d6:b5:4a:
ce:15:b7:0b:9e:d0:8f:43:ff:75:ad:c9:88:8e:38:5d:78:d5:
a8:e7:23:3f:bc:b1:63:e5:4d:07:0f:82:55:30:fe:99:7a:a7:
28:a5:ca:58:cf:13:81:ff:80:1a:c4:12:12:4c:0d:51:52:4a:
b9:33:c2:95:30:62:53:77:fc:94:b5:b0:e8:cc:04:7b:66:e8:
23:21:04:7d:0d:ed:e7:ea:cc:cd:29:5f:75:01:2e:b9:61:15:
72:ae:24:51:f2:ab:67:7a:2d:45:11:3b:6c:50:7c:0a:a3:07:
2c:11:dc:2a:53:1b:bf:15:6f:3d:62:a9:a1:19:4e:1e:db:41:
e5:4a:5b:99:28:28:b7:c8:61:81:0e:48:4a:9e:d1:e5:ac:6c:
f8:72:aa:f6:c9:40:9f:ea:cf:c2:d1:ff:e4:e1:73:ad:61:87:
67:e4:af:7d:6f:61:c1:fb:3d:d7:96:e5:bb:56:09:43:e8:72:
b6:af:52:e5:1d:e7:ff:71:2a:f4:d1:28:49:95:29:85:3b:b8:
11:33:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:31 2024 by rpki-client on console-fra.rpki-client.org