Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/99Eap5hFiUDj7MIowDHpNHmhyVo.roa
File: 99Eap5hFiUDj7MIowDHpNHmhyVo.roa (raw, json)
Hash identifier: ZjYyfP1wttBg4scNOFVdmu6Zwd40WSf3ulFz5cgK7yg=
Subject key identifier: F7:D1:1A:A7:98:45:89:40:E3:EC:C2:28:C0:31:E9:34:79:A1:C9:5A
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 0186DB4C367EE0CBD3A782F3D6D19B222E91
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/99Eap5hFiUDj7MIowDHpNHmhyVo.roa
Signing time: Mon 13 Mar 2023 14:07:30 +0000
ROA not before: Mon 13 Mar 2023 14:07:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 93.187.110.0/24 maxlen: 24
2a13:1540::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Apr 2023 10:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:4c:36:7e:e0:cb:d3:a7:82:f3:d6:d1:9b:22:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Mar 13 14:07:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7d11aa798458940e3ecc228c031e93479a1c95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:3c:62:f0:ec:e0:05:9b:60:bb:05:a7:43:
db:c2:bd:fa:ac:c5:6c:96:5c:6b:0a:ec:d5:42:8f:
93:26:5d:ec:23:c5:d4:0d:fc:6a:cb:c9:c4:e7:bb:
2d:f8:fd:ae:85:8e:95:d9:7a:63:4f:c9:b3:ff:7b:
5c:d4:65:74:43:e5:99:99:4f:32:44:10:0c:c8:8d:
5e:b5:d0:78:7c:96:29:aa:57:35:51:f0:29:2b:d5:
84:57:a6:00:0c:2d:9b:77:4e:c9:db:85:1c:c8:37:
1f:42:df:11:23:fe:89:81:ff:1a:43:3d:a3:1b:6f:
da:e4:22:77:d1:e1:82:e8:b4:22:30:6b:39:d9:8e:
0c:7a:cd:89:6a:5e:b7:ae:45:86:d2:ba:e1:2e:77:
d8:9d:6e:f8:90:5e:55:0f:88:7f:79:0c:a8:7b:86:
fc:c9:70:e1:86:5c:a6:2b:57:c5:e4:ac:5d:87:1e:
e7:fd:cb:48:7e:d9:0f:45:b8:15:40:d9:52:7e:75:
f8:be:1e:ab:96:91:2e:0f:9c:af:f8:5f:a4:50:ff:
90:12:ca:a8:e7:4c:91:83:dc:93:dc:87:4c:e7:ea:
50:65:78:93:bb:93:fd:e6:c9:35:f1:4a:58:f9:ca:
a4:6d:2c:65:6e:4b:36:21:ec:03:76:0a:6e:fb:98:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D1:1A:A7:98:45:89:40:E3:EC:C2:28:C0:31:E9:34:79:A1:C9:5A
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/99Eap5hFiUDj7MIowDHpNHmhyVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.110.0/24
IPv6:
2a13:1540::/48
Signature Algorithm: sha256WithRSAEncryption
14:0a:cc:d7:ae:3c:e3:72:47:bd:08:b1:91:f6:34:19:d3:a7:
5b:ee:65:97:27:e6:54:c2:f1:30:e8:b5:94:47:d0:5e:d0:d3:
fb:d2:56:7f:56:ec:7b:6b:6a:85:4e:00:4a:92:cc:82:11:4c:
a4:5f:66:dd:34:44:86:e0:3d:06:36:95:68:7e:84:ce:f5:3c:
87:9d:13:3a:b3:aa:2a:0d:86:94:9c:22:9b:bb:9b:86:06:b6:
95:6d:ab:b0:e6:f8:62:cf:3a:dc:4e:28:a4:23:bb:73:e5:26:
94:d6:0c:4e:95:27:f6:8e:1c:8d:0e:3d:3a:b1:24:46:92:33:
99:45:68:9e:d8:b4:b9:33:3f:3a:49:55:62:1d:ad:a6:09:94:
42:be:3c:bf:17:0a:1b:56:ff:ad:2b:a7:6a:01:fc:de:8a:d2:
f2:a8:dd:a7:63:ba:8a:75:0f:6b:38:01:f3:f1:84:6a:b3:33:
cb:66:b1:7f:3e:d9:c3:ed:52:f8:d9:c3:d6:ce:04:84:ed:f9:
fe:d5:bf:fe:cb:68:91:2d:5e:b4:f9:83:47:98:36:af:25:36:
61:f6:d2:a4:f4:97:06:0a:f7:9c:de:c6:84:47:bb:fe:61:b5:
f5:28:49:ad:32:94:ff:d0:d3:39:e0:dd:d6:86:5e:08:14:20:
5d:1c:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:58 2024 by rpki-client on console-fra.rpki-client.org