Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TgNOStl5ELMtw0wWrLeN2bcMxu0.roa
File: TgNOStl5ELMtw0wWrLeN2bcMxu0.roa (raw, json)
Hash identifier: QdKlAWiWUmijwDaOb6zJfRnDgeNx9EfC4DupDXW9CFQ=
Subject key identifier: 4E:03:4E:4A:D9:79:10:B3:2D:C3:4C:16:AC:B7:8D:D9:B7:0C:C6:ED
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018A4FC28CD3F4AC06B316C2A5584417270C
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TgNOStl5ELMtw0wWrLeN2bcMxu0.roa
Signing time: Fri 01 Sep 2023 08:01:04 +0000
ROA not before: Fri 01 Sep 2023 08:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 93.152.208.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:c2:8c:d3:f4:ac:06:b3:16:c2:a5:58:44:17:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 1 08:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e034e4ad97910b32dc34c16acb78dd9b70cc6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:59:54:f8:a6:4b:03:83:de:67:99:8b:57:
75:fe:1b:02:6d:50:1f:70:3e:a2:e5:e9:a3:4b:84:
f5:b9:77:c0:4f:dd:11:68:b8:7d:af:92:64:f2:86:
9a:6b:ee:47:84:ff:2c:cc:8b:a8:02:06:f9:a3:fe:
ab:0f:e4:79:85:94:51:ab:08:24:5f:6e:2f:7b:9b:
37:4d:60:03:f6:51:28:17:cf:62:ae:50:fd:0d:73:
7a:ea:73:a2:13:c1:bd:7c:47:9c:28:80:e4:a1:37:
ca:4d:b0:49:8b:c2:98:34:f5:8e:62:78:09:a7:60:
48:4a:21:3e:24:5e:f2:90:81:b3:fc:c4:8f:1e:74:
51:74:67:05:ba:7e:b7:8f:9a:8b:ac:fb:79:0b:1c:
a0:a9:39:a7:9a:1f:3b:ba:89:61:57:16:3f:1d:1f:
c2:15:51:0c:72:af:e8:ae:0d:7a:c6:47:1a:55:0d:
b7:a2:71:b4:a1:d0:16:ad:cf:a2:05:39:27:9f:75:
59:ee:b8:bf:57:a8:d1:5f:f2:01:c7:12:9d:ce:7e:
38:36:f5:17:a3:8c:0f:a2:51:40:d3:d8:e1:95:19:
93:5b:88:69:25:a0:0b:af:91:76:1f:e4:62:79:79:
99:dc:ec:b3:8d:a7:4f:24:c8:e6:d8:96:9b:99:d3:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:03:4E:4A:D9:79:10:B3:2D:C3:4C:16:AC:B7:8D:D9:B7:0C:C6:ED
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TgNOStl5ELMtw0wWrLeN2bcMxu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.208.0/24
93.152.211.0/24
93.152.216.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ce:55:d8:f2:15:db:a2:06:6d:1e:3f:f9:27:3f:0a:9f:8d:
16:ef:c5:1c:ce:9f:fe:50:b2:7b:98:fd:62:51:89:74:98:a6:
55:fe:10:74:17:8e:c3:72:a6:80:16:46:23:14:2c:57:8c:95:
a0:05:d2:95:1c:22:1b:e2:e2:fe:b5:8f:1a:a9:5e:41:9b:ad:
da:88:1a:a6:ee:d3:07:4d:88:e9:2c:3d:77:dc:9e:c7:3a:2b:
7f:67:78:91:25:53:71:75:a4:7b:90:44:ef:8e:64:1b:d4:c4:
a5:14:41:42:03:ca:e3:98:f6:b9:31:68:aa:71:36:c4:77:a7:
67:37:d9:d1:b0:8e:9f:99:c1:d3:b6:47:40:1e:e1:c9:69:cb:
b8:8b:65:57:fd:09:41:10:35:3e:28:db:f3:2c:39:f1:4e:60:
95:63:47:4d:72:c4:99:a7:00:5b:68:62:ec:ed:6d:53:96:9a:
18:59:64:93:3b:c9:73:4c:f5:c2:ec:99:4e:85:68:fa:db:9d:
ea:bc:a8:3b:35:8a:e7:0d:9e:35:96:52:35:06:3f:1e:cd:c3:
fb:11:e7:4b:24:aa:a6:4d:c5:a4:61:1e:41:5b:23:c7:a0:46:
54:76:3e:b4:80:52:03:92:8e:0f:24:17:8f:89:a3:ac:46:b4:
59:eb:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:36 2023 by rpki-client on console-ams.rpki-client.org