Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/zX3f6Ap_MWWl5W4Yfv0LOf_N8mU.roa
File: zX3f6Ap_MWWl5W4Yfv0LOf_N8mU.roa (raw, json)
Hash identifier: IM2dyo8ootHQuMnwo9K6fbbJ7vFIr4BDWN96MWU5l1A=
Subject key identifier: CD:7D:DF:E8:0A:7F:31:65:A5:E5:6E:18:7E:FD:0B:39:FF:CD:F2:65
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 018CAFC16DC76E41311EF61AE5335EEBB3EA
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/zX3f6Ap_MWWl5W4Yfv0LOf_N8mU.roa
Signing time: Thu 28 Dec 2023 09:28:58 +0000
ROA not before: Thu 28 Dec 2023 09:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44646
IP address blocks: 93.93.85.0/24 maxlen: 24
93.93.82.0/24 maxlen: 24
93.93.81.0/24 maxlen: 24
93.93.84.0/24 maxlen: 24
93.93.83.0/24 maxlen: 24
93.93.86.0/24 maxlen: 24
93.93.87.0/24 maxlen: 24
185.40.204.0/24 maxlen: 24
185.40.206.0/24 maxlen: 24
185.40.205.0/24 maxlen: 24
185.40.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:c1:6d:c7:6e:41:31:1e:f6:1a:e5:33:5e:eb:b3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Dec 28 09:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd7ddfe80a7f3165a5e56e187efd0b39ffcdf265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:58:d0:48:70:26:db:50:bf:be:7e:4c:24:
f7:3b:ec:da:79:3d:3c:18:ff:18:13:31:59:f5:b0:
99:37:b8:4f:b2:f6:35:5f:b2:8d:7c:fa:d9:f7:ac:
0c:d9:9f:8b:02:b5:9d:51:4c:e8:d9:75:12:11:be:
25:ff:0e:7c:0f:16:92:06:55:ba:d3:8b:c2:cc:6a:
4e:6f:de:a3:01:5d:22:ee:35:57:02:12:10:9f:ea:
d4:0d:19:9a:d1:26:55:bc:e6:94:cd:67:a0:b8:17:
5c:24:0c:70:7a:f1:46:d4:ea:fe:f5:8d:2d:9b:9a:
39:51:93:30:72:ed:83:f8:9b:d2:dd:46:9b:2e:92:
f3:35:85:5d:8f:9a:b8:92:b9:d8:5e:ea:8d:20:eb:
c3:cc:82:29:15:02:66:5f:44:d2:fc:30:62:87:00:
a8:5d:6b:06:1f:d9:53:a6:d8:00:f2:d6:47:77:5d:
f9:76:2d:33:df:07:3a:1a:0d:86:1e:fe:50:fa:d1:
ad:14:28:97:78:e6:44:ef:06:52:f4:64:fe:64:1d:
8d:27:2e:48:0b:20:1e:10:af:01:0c:2f:0b:e7:ed:
77:e5:5d:9b:3d:69:36:fd:06:09:e6:57:eb:02:c4:
ee:9a:72:a7:19:cd:71:ad:61:bd:e9:9d:5a:41:fd:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:DF:E8:0A:7F:31:65:A5:E5:6E:18:7E:FD:0B:39:FF:CD:F2:65
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/zX3f6Ap_MWWl5W4Yfv0LOf_N8mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.81.0-93.93.87.255
185.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
97:56:e9:93:73:54:7a:e1:27:ba:a5:8d:a3:6b:5a:d9:da:4c:
af:e5:1a:ef:86:c8:22:0a:92:97:f5:16:82:3b:c4:05:c5:6f:
0f:11:73:79:fe:54:f1:ee:51:44:5d:4a:5e:40:87:a3:7a:05:
7c:9f:75:c5:64:33:b8:dd:e1:f3:b1:7b:8d:78:d1:21:c4:4a:
7c:8f:2d:26:e2:77:b7:5a:08:b2:42:d3:6a:d1:2d:2d:91:76:
73:f4:99:c6:21:f9:2d:f9:a5:8f:e7:6f:84:75:70:e1:d1:9f:
e1:18:02:17:3e:1c:ab:66:1a:de:a3:62:e2:9f:a4:f3:47:ab:
93:81:97:32:d0:ad:22:5d:c9:bd:cd:ab:fe:5d:16:99:df:9a:
2c:34:f1:7c:f5:6b:2c:ed:7f:6a:0a:14:8c:28:68:b5:ee:e3:
7b:85:25:18:38:e7:82:db:09:8c:7b:1b:ce:f8:77:e5:ae:0e:
7d:cd:a1:f0:2d:18:a7:10:e0:1f:7f:bd:0f:1e:da:95:b7:49:
a2:f6:21:39:a6:bf:f7:d1:8e:06:d2:d9:71:d5:1f:97:0f:f7:
ec:48:14:86:f3:d1:b8:db:08:05:ea:c1:18:75:df:2b:47:9e:
fb:6a:e1:07:a0:ee:96:ff:7b:d3:ac:a2:3b:27:aa:ab:75:60:
cc:ae:97:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org