Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/D8mmNP2W_by26LOKK57G2LHAnLc.roa
File: D8mmNP2W_by26LOKK57G2LHAnLc.roa (raw, json)
Hash identifier: 1BUUoCQ2jbSI3q6gDL14pEDi7zsab038rlcr3MP37NQ=
Subject key identifier: 0F:C9:A6:34:FD:96:FD:BC:B6:E8:B3:8A:2B:9E:C6:D8:B1:C0:9C:B7
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 01856FDDCD9EB933F88DC07380087822D544
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/D8mmNP2W_by26LOKK57G2LHAnLc.roa
Signing time: Mon 02 Jan 2023 00:24:45 +0000
ROA not before: Mon 02 Jan 2023 00:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39599
IP address blocks: 193.93.104.0/23 maxlen: 23
193.93.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:cd:9e:b9:33:f8:8d:c0:73:80:08:78:22:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jan 2 00:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fc9a634fd96fdbcb6e8b38a2b9ec6d8b1c09cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:ed:f8:be:05:3a:8f:02:b3:6a:09:c0:00:
d4:29:30:e3:f9:b5:0d:ce:a8:8e:63:a9:ba:57:b4:
f0:4e:49:3c:0a:41:53:5f:17:63:0d:32:09:01:49:
1f:b3:f9:f0:60:00:88:25:66:d4:2f:74:bb:b3:03:
2f:3f:e6:fd:c8:67:07:9f:c3:0d:36:cd:63:0e:12:
95:c3:da:ed:41:01:7b:ad:08:eb:67:a0:fa:c0:e0:
c3:32:0b:34:12:54:3c:76:26:3c:3f:fd:5d:b8:3f:
82:d7:5d:03:f5:6b:66:18:6c:91:29:9b:e4:14:23:
38:de:3d:2d:03:f5:8f:5d:11:bf:da:83:19:98:33:
e7:3b:34:b7:73:98:76:9c:86:1c:01:95:05:7f:bc:
2c:0f:a3:43:ae:64:29:88:33:0c:7b:61:18:45:75:
cf:a8:e2:b2:3a:20:b2:b6:23:af:58:db:57:06:4f:
5b:75:63:a9:97:5f:55:d6:f5:5b:ed:75:1f:41:5d:
c4:c1:f9:f3:64:b5:27:8f:0a:d2:cb:48:b1:4d:14:
8e:c2:77:92:1e:ca:dc:0a:01:04:d7:09:05:86:30:
e7:95:dd:e1:d3:b9:31:01:e3:44:b7:b2:56:04:bc:
68:3d:6e:bf:3d:93:af:24:cd:d4:54:d2:02:bf:88:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:A6:34:FD:96:FD:BC:B6:E8:B3:8A:2B:9E:C6:D8:B1:C0:9C:B7
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/D8mmNP2W_by26LOKK57G2LHAnLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.104.0/22
Signature Algorithm: sha256WithRSAEncryption
74:76:7f:8d:d1:2d:66:af:d5:c2:38:db:1a:9c:6b:39:5c:17:
a5:47:73:04:cb:6d:5e:15:95:1d:ca:fe:e0:3d:ff:d2:1a:c3:
ca:2e:3b:ab:82:6e:cf:c4:a5:8b:d3:59:0d:f4:f9:a5:eb:45:
c3:8e:3e:2d:e4:c8:46:22:e0:da:9a:c5:3c:04:f5:e6:cb:02:
72:c1:4f:f7:9c:32:b1:70:0c:2e:68:a7:28:6b:28:4b:b9:c9:
ea:e1:19:2d:5c:14:91:d4:cd:a9:79:de:a1:d5:4d:47:9f:bd:
f3:b5:9c:63:a2:11:12:cf:74:ec:2a:7a:0d:61:67:da:96:3b:
87:8a:f8:3a:5f:00:e4:ed:3e:e0:6c:b3:01:f7:9f:01:31:cd:
14:9d:7c:ba:9b:7f:bd:b7:1c:72:69:c8:fa:46:59:7f:0c:1a:
e1:72:dc:0e:42:ce:44:65:e8:e9:b2:55:a6:e9:5c:94:1f:e9:
3c:c2:76:76:c0:bf:43:af:89:a5:ca:13:36:62:08:ce:1c:54:
68:6f:0c:ba:03:32:0a:8c:ce:44:d1:1e:2d:67:73:73:7f:78:
c3:de:1b:9d:94:4d:7f:ba:c4:c2:2e:0c:9d:ac:6a:6e:19:fd:
57:1a:ab:92:33:a0:54:fd:2e:99:3b:aa:ba:ba:3e:75:40:98:
1b:85:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:00 2024 by rpki-client on console-ams.rpki-client.org