Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/XlyDpGoWL2zQpQmD89TDYrF4BeE.roa
File: XlyDpGoWL2zQpQmD89TDYrF4BeE.roa (raw, json)
Hash identifier: Mim+VHF8wX8M7HT8UR0l5gDlWB+TublaVL94qHmx8MM=
Subject key identifier: 5E:5C:83:A4:6A:16:2F:6C:D0:A5:09:83:F3:D4:C3:62:B1:78:05:E1
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018CC86F28AACE3CE7D1071AA3E96AE6D069
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/XlyDpGoWL2zQpQmD89TDYrF4BeE.roa
Signing time: Tue 02 Jan 2024 04:29:37 +0000
ROA not before: Tue 02 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202972
IP address blocks: 93.152.211.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:28:aa:ce:3c:e7:d1:07:1a:a3:e9:6a:e6:d0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5c83a46a162f6cd0a50983f3d4c362b17805e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:7f:0d:89:ef:29:3f:3c:2a:9d:5c:19:74:
9f:7b:1d:3c:ca:a4:b4:80:bd:ca:1e:4b:37:ef:93:
1d:de:40:06:e1:6d:3d:2e:76:ef:b2:1b:f8:c0:cb:
8b:40:1b:a6:fd:7e:a1:8c:ab:f3:8d:ad:3b:1f:b9:
8f:f2:e6:b9:99:9e:4c:92:5c:3b:40:22:ef:16:64:
4c:1a:58:d6:a7:7e:2e:b3:de:c2:ce:18:db:f2:a7:
8a:20:d6:6a:85:27:69:f3:ee:26:5e:77:04:22:15:
a2:8f:00:0d:cf:20:9a:88:99:d9:67:2f:76:f3:eb:
07:97:8a:e2:28:eb:61:13:09:b1:b8:f0:69:6c:8e:
65:fe:38:e9:1a:d4:40:44:64:ee:6f:d0:48:49:1d:
fe:6e:84:e7:a9:cf:85:4c:7f:49:b8:c6:7c:7a:48:
bd:89:26:ea:f6:6e:fd:57:9f:01:0b:66:23:60:06:
a8:e4:63:46:19:76:03:94:ba:bb:50:7c:ba:ff:54:
86:d0:19:fd:f4:8d:fc:f9:a1:92:fc:5a:d2:2c:79:
a8:8f:ea:29:2a:f4:fb:af:0b:9f:30:fd:f2:30:af:
60:26:b9:40:0a:78:e4:79:de:96:41:2c:4d:4f:37:
34:29:50:18:9d:f4:9f:aa:c0:bd:61:44:b0:8e:c3:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:83:A4:6A:16:2F:6C:D0:A5:09:83:F3:D4:C3:62:B1:78:05:E1
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/XlyDpGoWL2zQpQmD89TDYrF4BeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.211.0/24
93.152.216.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f7:49:65:85:ce:8a:7b:98:11:b8:64:f8:7e:c1:47:3c:b2:
d3:56:cf:62:a5:e4:43:0e:71:67:3a:c7:3d:e3:61:d8:3f:93:
6c:a9:78:a6:b4:94:06:ec:f0:8f:e4:94:0b:26:77:67:aa:6b:
ca:b1:3f:aa:bb:30:ab:0c:08:98:e6:52:d0:4b:39:a6:df:ea:
e7:71:5d:ca:83:5c:93:c1:9f:0b:e5:e4:65:ae:55:f7:e4:d9:
ff:45:27:14:c8:28:b9:80:d4:35:1b:92:d1:64:6d:9f:1b:25:
c0:55:54:f3:3f:46:cc:a0:6c:93:c0:79:2d:06:01:f2:81:17:
1b:a6:f2:a6:e0:f4:08:97:54:71:e7:fb:cd:6b:74:aa:e4:39:
75:21:78:f5:76:65:1b:e2:0b:e5:f2:33:00:04:f5:f3:0b:19:
e8:b2:70:fd:9f:ca:eb:2f:80:dd:7a:25:a3:4d:db:a7:02:b8:
46:93:69:f7:25:b4:19:45:c7:f5:5e:d9:f6:54:b4:9e:c5:0b:
06:63:38:74:65:d3:01:9a:3c:b6:b9:6e:22:ea:90:05:ab:32:
71:47:9a:07:3e:3f:fd:dd:67:67:4b:23:95:85:a4:50:3b:c2:
92:cd:26:12:ce:06:6c:11:4c:31:a5:cb:06:8d:17:be:a9:6e:
88:fd:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 20:33:40 2024 by rpki-client on console-fra.rpki-client.org