Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/7aMi2jQ7nFmg49cwg-CORRIgaVQ.roa
File: 7aMi2jQ7nFmg49cwg-CORRIgaVQ.roa (raw, json)
Hash identifier: meZmpKZhfqYCk6uf7e6EzEuFdJnWSkudRJUMBTLc/Bc=
Subject key identifier: ED:A3:22:DA:34:3B:9C:59:A0:E3:D7:30:83:E0:8E:45:12:20:69:54
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 01857725C3458A3D38B42837FAAC09BC0DC2
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/7aMi2jQ7nFmg49cwg-CORRIgaVQ.roa
Signing time: Tue 03 Jan 2023 10:20:41 +0000
ROA not before: Tue 03 Jan 2023 10:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47549
IP address blocks: 93.159.202.0/24 maxlen: 24
93.159.206.0/24 maxlen: 24
93.159.201.0/24 maxlen: 24
93.159.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:25:c3:45:8a:3d:38:b4:28:37:fa:ac:09:bc:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Jan 3 10:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda322da343b9c59a0e3d73083e08e4512206954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:26:18:0f:52:57:15:5e:e9:b5:ab:4e:08:
8d:fd:6b:25:9a:21:3c:af:ec:69:40:70:d6:08:25:
27:08:aa:ca:be:65:9a:b4:59:b4:8f:45:c6:b7:3c:
ce:cc:f6:44:94:d0:73:2f:e7:ff:5b:c2:79:cb:16:
c6:9a:35:f2:48:45:5e:88:c8:14:a8:52:5e:c9:31:
d8:61:70:bf:98:43:86:25:f0:87:13:1f:cc:30:a2:
77:59:ae:47:71:e0:0c:06:84:a7:0b:80:5d:43:13:
69:cb:db:45:cf:6e:a4:ae:91:1b:86:d5:ae:6d:15:
14:d3:5a:b9:86:8c:29:aa:49:36:e5:bc:f2:38:37:
0f:7b:6c:f3:b7:d6:4b:46:11:26:a8:ee:61:2a:b1:
53:5c:db:a2:85:3e:7f:91:c0:35:e3:e2:25:90:a8:
39:59:5f:64:13:67:d3:d2:32:33:4e:82:40:9c:08:
a3:63:ca:78:f6:d9:8b:7d:9f:b4:62:6f:ec:2d:93:
36:26:5d:b5:6e:06:85:cd:2d:25:2e:ad:db:00:9a:
21:85:da:9e:73:fb:64:03:a0:1b:71:93:03:97:7c:
23:b1:7e:2e:f7:4a:2c:c4:b6:f6:db:9d:ac:d9:5f:
1c:75:eb:e1:be:a2:7b:71:00:56:88:a3:38:52:a5:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:22:DA:34:3B:9C:59:A0:E3:D7:30:83:E0:8E:45:12:20:69:54
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/7aMi2jQ7nFmg49cwg-CORRIgaVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.200.0-93.159.202.255
93.159.206.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2a:a9:81:3d:da:95:07:02:60:da:f3:e8:02:fb:8c:45:8a:
ba:a4:f5:98:7b:eb:6b:9a:a9:9a:8a:be:ee:4e:68:3a:b2:ec:
19:8c:3f:36:1f:63:79:13:73:bc:64:bf:35:59:91:af:43:c7:
ef:bd:b1:85:0a:15:69:c9:cc:a8:8a:57:df:62:77:5b:71:20:
f3:10:91:66:ff:f6:12:4a:5b:c5:46:20:68:db:fa:fe:0f:ae:
98:6d:6a:a6:92:c1:d0:0e:65:b0:68:51:be:22:ed:ee:ac:4b:
59:4f:27:6c:0f:59:e7:3d:7a:7c:1a:dd:40:f3:2d:3f:81:d4:
02:1e:65:1a:5e:75:87:12:ed:a9:14:e0:79:b9:4c:ec:8d:0d:
99:bc:ac:d2:85:bf:25:be:96:1a:6f:ec:94:88:b8:0a:b0:cb:
4d:17:55:46:16:d5:8f:1e:d6:94:57:b7:b2:5e:30:03:6c:17:
a2:12:1d:4e:a6:7b:d7:fa:71:56:d2:2b:f0:41:c1:06:e8:cb:
c5:28:b4:e3:95:85:34:f4:41:a0:44:75:72:d0:bd:21:5f:35:
bd:43:0d:dc:71:e9:3c:0e:27:7f:ce:54:70:35:c3:1b:3c:a6:
6f:02:e9:2f:65:bf:be:18:85:65:db:23:36:88:56:21:e7:45:
e9:aa:fd:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:48 2024 by rpki-client on console-fra.rpki-client.org