Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1BC42Z-e3ZR5eg1zeFWSogT0Azo.roa
File: 1BC42Z-e3ZR5eg1zeFWSogT0Azo.roa (raw, json)
Hash identifier: EDnAgYYt/jz4rIwj72asgNqeI7xSXdwBqyjj0+iaHE0=
Subject key identifier: D4:10:B8:D9:9F:9E:DD:94:79:7A:0D:73:78:55:92:A2:04:F4:03:3A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018AF1F8D79FE079F64750C2F6FFE78BC94B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1BC42Z-e3ZR5eg1zeFWSogT0Azo.roa
Signing time: Mon 02 Oct 2023 19:58:51 +0000
ROA not before: Mon 02 Oct 2023 19:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50464
IP address blocks: 93.92.113.92/32 maxlen: 32
93.92.113.199/32 maxlen: 32
93.92.113.96/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:f8:d7:9f:e0:79:f6:47:50:c2:f6:ff:e7:8b:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 2 19:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d410b8d99f9edd94797a0d73785592a204f4033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:1f:b7:de:82:c7:b2:4e:59:41:15:8b:42:
fe:37:8c:c5:00:25:90:5e:87:9a:2a:48:51:f6:f2:
7b:cb:fb:e7:44:98:90:17:3f:e1:cd:96:16:59:b4:
69:b8:86:ec:b0:9f:79:4a:af:25:94:71:e8:7b:ef:
85:c4:06:34:b3:0b:62:c1:56:db:77:d0:69:09:a6:
37:62:71:73:a1:0a:0f:de:7f:6c:05:9a:83:77:47:
f0:f9:8b:e8:26:50:d8:d9:d2:ef:df:17:68:c2:c2:
8e:a6:9c:47:8d:13:57:61:1c:0f:72:36:ab:67:fc:
03:61:9d:6c:00:4b:90:1a:9c:f4:31:61:09:29:7e:
9e:29:91:97:cf:68:82:20:c6:30:9d:3b:c5:e8:52:
d0:1d:5f:de:11:bc:06:ba:18:52:37:50:92:26:11:
a1:0e:31:3c:88:a3:f7:df:4c:77:3d:2e:9d:3f:d3:
68:d0:a9:f1:11:f7:16:c9:72:f1:01:a6:e9:af:a2:
7b:73:d3:92:bd:41:ff:19:dd:b0:6c:4f:79:45:ad:
5a:47:c6:3b:89:8f:99:05:cf:b7:37:a6:93:58:a9:
3d:ab:f6:a1:7c:91:dc:42:6d:4c:5b:0d:3d:ac:6c:
44:ae:53:db:99:0c:12:25:64:db:f1:6f:bb:ae:98:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:B8:D9:9F:9E:DD:94:79:7A:0D:73:78:55:92:A2:04:F4:03:3A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1BC42Z-e3ZR5eg1zeFWSogT0Azo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.113.92/32
93.92.113.96/32
93.92.113.199/32
Signature Algorithm: sha256WithRSAEncryption
84:cb:3c:c5:0c:72:35:e8:d5:4f:12:14:c8:18:3c:3a:ef:1b:
d4:7f:c6:82:36:94:f6:18:4b:ea:27:63:e3:3b:fd:38:f4:74:
cf:1f:b2:5b:9e:35:7f:0c:d6:50:88:e2:96:c9:e5:8a:6a:7a:
89:4d:69:77:85:3f:29:fe:09:0d:dc:c2:ef:ea:08:e9:67:08:
46:b5:fe:9f:8c:ca:b0:89:08:4e:8c:54:07:07:5e:79:09:6b:
62:b0:27:fe:4c:f3:32:a6:d7:4e:9f:7a:fa:81:e7:b2:f7:98:
c5:e2:37:8a:61:6d:1e:79:d7:12:68:80:d6:50:ff:3c:33:84:
48:74:b9:73:6b:0f:6c:51:af:8c:a5:3c:75:ab:64:a6:61:2f:
c2:ff:05:21:22:92:bd:02:9e:95:29:f1:60:0e:f3:3c:d6:55:
b0:dd:78:87:fa:12:22:f8:8c:cf:44:b4:16:9c:be:89:e5:55:
00:b8:30:d8:3c:c3:63:ab:e4:76:c8:0d:45:1e:97:e2:bb:78:
7b:06:da:db:54:6f:30:dc:83:8c:ad:df:a3:93:ea:89:8d:d9:
a5:bf:3b:92:3d:02:99:9c:c8:4c:56:75:8e:23:a6:8f:05:14:
31:58:08:1d:3e:8c:e5:7a:4e:5c:05:de:cd:9e:92:a9:b5:85:
05:c5:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org