Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/VorQHyN-4OxaQFEc_Eud3bsocpM.roa
File: VorQHyN-4OxaQFEc_Eud3bsocpM.roa (raw, json)
Hash identifier: joeA/BuKpS7EMEOqtp/YtLcc/b7LoJMn/osiViJ8iXw=
Subject key identifier: 56:8A:D0:1F:23:7E:E0:EC:5A:40:51:1C:FC:4B:9D:DD:BB:28:72:93
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018B901C00DEF6CBA6092224293902EC6515
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/VorQHyN-4OxaQFEc_Eud3bsocpM.roa
Signing time: Thu 02 Nov 2023 12:57:16 +0000
ROA not before: Thu 02 Nov 2023 12:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.92.33.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:1c:00:de:f6:cb:a6:09:22:24:29:39:02:ec:65:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Nov 2 12:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568ad01f237ee0ec5a40511cfc4b9dddbb287293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:b7:3b:91:f0:43:ff:79:b7:13:a8:c8:98:
fb:31:bc:eb:43:4c:34:a1:87:47:ca:00:95:5c:03:
fe:be:5d:8d:c1:85:51:d6:84:b5:00:49:83:54:fd:
6e:dd:49:c5:e5:be:49:c8:a6:85:f8:88:1c:aa:24:
93:43:3a:eb:54:fe:02:a1:00:17:c4:57:d8:e8:b8:
ed:92:59:ad:65:f3:17:c2:ad:76:3b:43:ae:1f:9c:
f8:fd:c0:99:bb:c1:8d:b2:e8:ad:3b:77:1c:5f:8e:
48:40:e3:56:76:e8:a6:5c:04:82:a1:59:15:cc:fd:
71:eb:a5:b1:63:f2:3b:09:79:5c:72:8f:3b:25:43:
e4:10:f5:b7:9f:f3:8a:be:38:48:97:26:39:98:90:
7d:1e:70:73:8e:e8:c9:bb:3f:f2:0d:9e:6e:5b:16:
7e:55:fe:14:36:9e:cf:a7:98:c5:00:5c:ef:b3:a4:
1d:4b:eb:f6:da:54:f3:bc:70:26:91:4f:7a:26:70:
0c:a4:72:11:b4:ac:06:21:24:62:39:8b:db:56:78:
f2:32:68:12:eb:6a:00:94:7f:5e:b5:67:d9:31:0f:
ee:3f:ab:77:02:36:66:18:fb:bf:c4:9d:08:2d:a1:
8d:52:42:95:60:2d:ef:40:2e:9a:5a:0b:65:e6:93:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:D0:1F:23:7E:E0:EC:5A:40:51:1C:FC:4B:9D:DD:BB:28:72:93
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/VorQHyN-4OxaQFEc_Eud3bsocpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.33.0/24
91.92.49.0/24
93.152.206.0/24
93.152.208.0/23
93.152.217.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1c:a5:a9:2c:53:07:42:54:3b:42:2d:a8:ad:aa:60:2a:e3:
a4:78:dc:57:19:b8:4a:0f:24:8b:ed:81:f8:29:e6:2e:31:f3:
48:5e:dc:c5:28:66:73:11:9b:30:d5:8e:31:59:65:70:49:26:
d7:fb:93:86:43:c8:a4:66:d9:be:7c:fb:ea:31:b1:bf:56:4b:
1b:40:34:af:a0:0b:df:8b:fa:24:1f:68:46:9e:69:41:e5:95:
c2:e5:46:87:e1:b1:6d:36:8b:07:1d:b2:46:71:ab:0e:83:0e:
4e:b4:1e:36:11:f4:9d:0e:58:0f:d5:ed:3f:86:27:d9:f7:f9:
9c:14:9f:cb:88:cf:ad:c4:34:a9:80:8d:cb:c1:4e:70:1e:46:
cf:24:65:cb:ca:3d:63:3d:a3:33:82:68:65:1b:2f:36:5f:a7:
f3:18:43:41:37:1b:58:51:34:03:9d:2b:f9:45:b6:2a:56:40:
99:2b:17:17:5c:a9:73:b1:5f:19:df:59:16:e2:b5:90:6e:9b:
18:95:38:19:8b:8c:49:3b:0c:e8:04:e7:ac:44:bb:2b:20:36:
7c:b0:e3:24:4f:14:51:9e:29:95:9e:d7:f0:a4:c5:82:b2:9b:
1d:5a:e0:2d:f8:b9:80:0a:8c:d4:22:94:77:fc:37:b7:2e:4e:
5f:d7:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 11:30:59 2023 by rpki-client on console-fra.rpki-client.org