Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/d_UDTAQrgfRuopQrZVxco3J8Pso.roa
File: d_UDTAQrgfRuopQrZVxco3J8Pso.roa (raw, json)
Hash identifier: q5VGr1ZQ23b5FmDNtWFZeRw5pfUQw2cGUKpyT8/aTyU=
Subject key identifier: 77:F5:03:4C:04:2B:81:F4:6E:A2:94:2B:65:5C:5C:A3:72:7C:3E:CA
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018B8604626BA6D7F02B2420732C9882B6D2
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/d_UDTAQrgfRuopQrZVxco3J8Pso.roa
Signing time: Tue 31 Oct 2023 13:55:16 +0000
ROA not before: Tue 31 Oct 2023 13:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202972
IP address blocks: 93.152.211.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:04:62:6b:a6:d7:f0:2b:24:20:73:2c:98:82:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 31 13:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f5034c042b81f46ea2942b655c5ca3727c3eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:29:ed:ea:af:ae:8a:a8:e7:53:b6:ea:36:
91:55:9e:50:e1:da:8d:38:46:82:d1:89:ef:59:50:
f1:85:04:c3:f5:6a:f8:22:23:e6:96:83:1d:86:67:
8a:9e:58:af:b8:9f:ff:08:60:a2:d3:03:8b:a5:55:
09:15:24:c1:48:92:5a:a1:27:1c:78:57:b0:97:4e:
fb:c2:70:b9:3f:76:b4:9c:ec:bc:27:78:cc:70:bc:
64:db:5e:9b:89:d7:2a:74:db:a7:4b:99:e5:97:13:
a2:62:ae:36:e4:e0:91:b3:39:33:0b:32:55:d3:4b:
54:ea:c3:71:be:ea:6e:b2:bb:ef:87:d7:81:15:e6:
23:55:aa:0e:4a:b6:31:ff:d6:57:be:2c:47:c9:46:
f9:e9:2d:fb:27:3f:de:39:a0:0a:10:70:a7:29:03:
b9:08:ca:94:92:22:81:93:e3:ee:d9:c9:d6:41:68:
38:8e:0a:cf:a7:d4:4a:63:00:52:6c:ed:88:4c:8c:
73:3b:d4:80:b6:fb:7f:6f:91:54:4d:53:2e:29:35:
20:04:4d:a6:cb:1c:ae:93:11:4a:3f:a9:d4:8d:75:
e0:c6:ae:c6:20:09:08:f9:95:18:c3:9f:21:67:18:
bd:94:79:42:47:83:4c:00:44:d0:9d:fd:88:6b:8d:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:03:4C:04:2B:81:F4:6E:A2:94:2B:65:5C:5C:A3:72:7C:3E:CA
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/d_UDTAQrgfRuopQrZVxco3J8Pso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.211.0/24
93.152.216.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
99:74:56:b4:1e:5c:b1:95:f8:98:89:ab:aa:65:7b:c5:84:12:
c1:12:27:f6:97:55:c6:a7:ab:91:48:77:dc:4e:3c:36:e6:ff:
41:0b:81:96:91:37:bb:4f:b6:ff:cb:87:38:1e:55:54:47:fb:
5a:ce:16:fc:1f:b3:ed:db:4a:dd:1d:44:61:85:7b:3f:d0:be:
47:dd:22:3d:cc:b6:ac:32:5e:e1:62:99:56:4f:8a:af:b7:5e:
bb:8b:26:84:74:3e:81:4f:db:8c:ad:78:45:ac:8e:e5:39:fc:
30:df:22:d2:00:d6:39:67:7d:77:d6:23:3b:a7:07:4b:b7:93:
1b:67:d4:f0:cd:98:f8:49:af:87:f7:59:8d:ef:de:8e:61:40:
ab:32:1a:82:72:e7:20:79:07:6e:ac:38:7a:af:c3:1a:05:16:
46:8d:5c:2d:e1:4c:bb:56:68:4e:d6:bb:b2:c5:49:ba:d1:91:
d3:e0:c0:13:2f:e1:6b:50:6c:33:72:ce:f3:b1:bb:e5:bc:30:
fa:d3:b9:a4:21:5e:79:01:5b:89:dc:b0:bc:57:8b:ee:fb:ad:
e1:9c:52:07:bd:4a:40:b2:02:cd:9f:a2:9a:60:96:8e:8f:9a:
b5:a5:15:4c:82:74:a8:e9:f8:ff:66:e8:b8:b2:72:be:76:2c:
46:c9:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:59 2024 by rpki-client on console-fra.rpki-client.org