Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/t878Ym7YXKvvN2Lf9qiGuWbDE34.roa
File: t878Ym7YXKvvN2Lf9qiGuWbDE34.roa (raw, json)
Hash identifier: QUia9oU2jW/Uxstrnzn7RpZrLaRAxVUvBVuRuWI+apc=
Subject key identifier: B7:CE:FC:62:6E:D8:5C:AB:EF:37:62:DF:F6:A8:86:B9:66:C3:13:7E
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 01856C0119D94675A60425D4185AF8254935
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/t878Ym7YXKvvN2Lf9qiGuWbDE34.roa
Signing time: Sun 01 Jan 2023 06:24:49 +0000
ROA not before: Sun 01 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31463
IP address blocks: 93.177.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:19:d9:46:75:a6:04:25:d4:18:5a:f8:25:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jan 1 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7cefc626ed85cabef3762dff6a886b966c3137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:34:c9:aa:98:2c:12:49:e9:5f:bd:a9:3f:
c0:c0:38:d9:a3:c6:a9:9c:c9:45:7e:41:ad:08:51:
7b:dc:18:1a:71:a7:4f:de:86:d2:f6:42:61:db:b6:
6c:87:e4:2c:60:92:d6:9e:6a:1e:04:7b:f2:32:1b:
7e:f6:5e:e0:1a:cc:c2:60:2a:fa:6b:40:85:f5:42:
02:11:6e:7a:5e:5c:8b:2e:df:3c:05:0a:74:cc:5e:
3e:5c:3c:72:7f:76:05:95:c1:3a:fc:8e:e1:b7:f0:
88:8b:fb:d0:1f:bf:19:b2:48:3f:cc:f7:13:1e:1e:
af:88:26:4a:4c:d4:24:a8:06:fd:93:4c:07:e4:80:
d2:c8:c0:72:5d:4b:4d:ed:02:29:5b:b3:d8:ff:bc:
ee:d6:aa:53:a7:47:83:27:c6:8d:ec:d7:95:4e:5a:
ae:2b:77:72:bb:19:e5:d0:dd:6c:f7:86:f7:c4:b1:
d8:0c:d1:0b:76:5c:b5:44:5b:9d:15:e2:e9:59:72:
c9:49:ac:a5:2a:e1:4a:51:10:98:8b:b9:3b:b4:46:
ae:76:86:8b:e9:53:1e:74:4d:72:65:dc:7d:9c:95:
72:70:3f:97:19:60:4f:7e:88:ef:05:08:bf:99:63:
9a:bd:e2:e9:4f:80:62:32:55:2b:4c:f7:31:cc:8e:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CE:FC:62:6E:D8:5C:AB:EF:37:62:DF:F6:A8:86:B9:66:C3:13:7E
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/t878Ym7YXKvvN2Lf9qiGuWbDE34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.127.0/24
Signature Algorithm: sha256WithRSAEncryption
34:97:67:d7:48:2b:f6:b9:6d:93:79:bb:d4:38:2b:b7:94:0a:
ff:07:9c:bb:6a:68:ae:2d:b9:a6:3c:4f:9c:87:ad:a8:73:df:
df:5d:68:fa:90:49:bf:11:7d:7e:b1:a3:f6:a9:f1:5e:f9:9c:
66:92:b3:fd:45:57:4c:da:06:d9:85:d3:c3:31:0b:bd:c9:c9:
cf:1c:ba:57:74:4b:27:a7:5e:67:fa:ff:85:ce:98:49:d9:99:
52:ac:83:00:c8:3c:d6:04:94:20:f6:d3:5e:10:81:09:d9:b2:
33:85:2e:78:d9:7d:f2:bd:23:c5:07:bb:1e:f6:6b:5f:34:1e:
64:c6:94:a1:86:f6:a6:ef:d4:8a:9b:a2:db:df:09:68:79:f0:
46:d5:3e:d7:a9:f0:eb:0b:db:de:bf:95:19:28:e9:ab:7d:d6:
40:4b:c3:f4:6c:6e:b3:dc:e0:f1:c2:8c:d2:54:23:70:26:61:
0e:6f:af:1c:8c:dc:a6:32:d8:39:ac:cd:a7:5a:8b:b9:c5:9c:
62:4d:f7:bf:17:23:bd:74:3c:98:f2:50:5f:f9:bc:6e:87:49:
99:6d:c4:4b:16:07:9d:31:d3:2b:42:dc:45:7d:13:2d:ad:46:
19:73:66:3e:35:85:38:56:c3:f3:e9:43:ba:c4:e3:59:3e:c8:
64:03:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:01 2024 by rpki-client on console-ams.rpki-client.org