Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/8XqmfPVkTQfVMteRS2u19bj3Xcc.roa
File: 8XqmfPVkTQfVMteRS2u19bj3Xcc.roa (raw, json)
Hash identifier: 3qMoxmelANjc+bZjloGf1uYu14VJA1x/629oY6sQkdI=
Subject key identifier: F1:7A:A6:7C:F5:64:4D:07:D5:32:D7:91:4B:6B:B5:F5:B8:F7:5D:C7
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 01856D13CCA3929A18C28C1945FB68724193
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/8XqmfPVkTQfVMteRS2u19bj3Xcc.roa
Signing time: Sun 01 Jan 2023 11:24:52 +0000
ROA not before: Sun 01 Jan 2023 11:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 93.157.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:cc:a3:92:9a:18:c2:8c:19:45:fb:68:72:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Jan 1 11:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f17aa67cf5644d07d532d7914b6bb5f5b8f75dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:66:f9:a8:64:09:5b:09:4b:8d:ec:4d:14:
af:c2:99:0e:87:91:4f:68:6d:27:99:b9:ef:e7:0d:
5b:87:58:44:21:eb:fb:e0:92:75:32:80:ce:e3:19:
45:d8:b4:19:7b:6b:86:bd:47:af:de:27:ff:2c:98:
d4:e3:8e:1d:fd:8e:50:ae:bf:ba:36:d9:21:2b:53:
da:da:4a:6a:d2:59:0a:b3:71:51:18:19:40:33:a4:
6d:09:dc:2a:a0:2c:b7:f0:43:d1:7c:8d:e1:d2:35:
55:59:c4:45:5b:e7:4e:a2:df:55:be:e9:12:95:85:
03:22:97:5d:cc:a3:23:13:65:a6:33:d1:e6:6c:61:
26:af:db:6b:d2:39:09:74:a5:f6:81:4b:c4:76:49:
c3:03:de:57:be:f3:00:29:d3:89:eb:a5:66:10:29:
da:09:19:7c:d7:dc:f8:6d:52:a0:7a:2e:86:1c:43:
c2:ea:f0:49:7e:56:5d:a3:00:68:bd:a4:2b:d0:61:
3e:0d:ad:97:ad:cd:03:21:f6:cc:23:8c:d1:a1:28:
04:38:52:12:17:a5:15:8d:e7:32:d4:3e:4d:8b:c7:
71:2e:9f:07:9d:46:c9:da:1f:7f:a1:89:97:92:c0:
70:06:51:12:f7:f0:b3:03:9d:5a:a3:26:e7:34:92:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:A6:7C:F5:64:4D:07:D5:32:D7:91:4B:6B:B5:F5:B8:F7:5D:C7
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/8XqmfPVkTQfVMteRS2u19bj3Xcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f1:25:59:60:f1:3f:ed:d3:e1:7d:eb:21:3c:88:de:0a:73:
cf:e3:57:b9:18:f3:96:42:f7:c1:56:01:c4:5e:aa:9b:7d:9d:
70:a5:e0:e0:21:da:bb:80:fe:ec:96:a3:7a:c2:b5:1a:00:f0:
ec:54:58:7f:9a:dd:7f:68:81:b6:08:1a:e7:11:1a:ce:32:e1:
9e:5b:d4:9e:9a:a0:72:b9:4c:17:34:32:76:01:c3:71:de:c0:
ca:89:d7:be:18:5a:02:39:26:1c:fc:bf:d0:91:bd:49:7d:6a:
73:7a:ad:c0:9c:04:ed:f9:e7:63:dc:8f:9a:5d:0b:5c:f5:2f:
8d:b7:38:96:f8:e8:a3:1c:4a:d6:59:e7:c3:65:cc:d4:4e:1b:
0c:43:bf:03:37:5d:3f:d9:e4:ab:ae:e7:00:b6:9d:a5:df:b8:
2c:76:16:23:50:fa:bb:6a:ed:54:71:41:c2:78:57:04:b6:f0:
df:32:ce:e0:77:fb:91:a8:3c:75:ba:4c:b4:61:3d:d4:97:98:
44:85:86:ad:d5:02:d3:97:51:a0:5d:c1:ad:1d:c4:13:13:96:
93:0f:fb:93:32:2f:6f:a6:91:07:21:13:44:37:5d:59:62:dd:
ca:23:4f:1d:dc:58:2d:a9:43:f8:b1:e3:ed:3b:52:bf:21:92:
3e:a9:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:52 2024 by rpki-client on console-fra.rpki-client.org