Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/xsVq_AtTUgIJ107b4x-jFauBn_U.roa
File: xsVq_AtTUgIJ107b4x-jFauBn_U.roa (raw, json)
Hash identifier: rYfz166xH3btQI8d2RgxnnQN6BRxigOOouwP5JAYIGo=
Subject key identifier: C6:C5:6A:FC:0B:53:52:02:09:D7:4E:DB:E3:1F:A3:15:AB:81:9F:F5
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 0185720C4F11764411F9AA640581BF5C9D3D
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/xsVq_AtTUgIJ107b4x-jFauBn_U.roa
Signing time: Mon 02 Jan 2023 10:34:47 +0000
ROA not before: Mon 02 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 93.191.217.0/24 maxlen: 24
93.191.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:4f:11:76:44:11:f9:aa:64:05:81:bf:5c:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Jan 2 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c56afc0b53520209d74edbe31fa315ab819ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:04:74:a8:8e:08:d5:d1:c8:ba:d2:99:53:
4a:b0:51:cc:f6:be:da:79:d2:1b:08:c5:d8:84:5d:
b0:b5:e0:ea:21:64:7b:ed:f9:51:e2:68:f2:b5:55:
9e:9a:e9:ea:8a:6c:42:3e:91:15:25:06:87:24:58:
81:58:d2:13:d4:7c:9c:b9:5d:4e:e0:70:11:96:88:
9c:62:b7:7a:17:d3:e4:cb:79:e5:d3:57:83:a8:dd:
00:16:3c:22:96:93:34:54:d9:c8:6b:e4:eb:eb:36:
25:e8:b2:5b:ea:4e:7a:0d:2a:5c:cb:74:cf:b0:aa:
c0:d1:4c:be:af:59:7b:df:ed:e9:87:d0:ad:dd:25:
41:fc:a5:45:f5:90:36:71:20:5f:1d:cd:0b:54:fe:
14:f0:b1:2c:a1:60:45:d0:d3:11:56:62:a9:6c:8f:
f0:ff:82:9b:ee:03:83:5d:df:a4:d5:8a:3f:69:76:
3e:6c:b0:fd:21:78:c5:26:98:70:6c:f7:96:07:d2:
26:ce:43:c6:74:8e:a1:cc:98:1e:a1:4b:65:10:07:
ea:40:54:75:a5:cf:0a:13:0f:5d:45:9e:bd:60:25:
37:df:09:3a:52:d8:7c:0f:a9:39:8a:84:48:01:ae:
0c:e8:27:21:8f:94:26:d8:7b:40:1c:18:b9:34:37:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C5:6A:FC:0B:53:52:02:09:D7:4E:DB:E3:1F:A3:15:AB:81:9F:F5
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/xsVq_AtTUgIJ107b4x-jFauBn_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.217.0/24
93.191.219.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7e:0d:68:bd:48:35:f4:da:c1:be:de:a9:2d:d4:2c:e1:c9:
c1:46:cc:4e:57:0b:f3:72:16:36:e8:68:25:7e:3e:20:ed:31:
1d:9f:04:b6:35:74:ef:43:b9:5c:2a:09:e1:99:5d:90:73:c2:
82:3c:c8:7d:ee:9a:e3:dd:47:40:42:00:39:2f:4b:2e:9a:86:
fa:03:53:f5:78:b6:d6:34:58:f8:94:c2:bb:c7:cc:26:fe:51:
38:91:c7:b9:1e:38:bb:44:e8:54:65:98:78:52:9c:8d:ba:fb:
ec:59:c8:b3:4c:91:74:e6:24:29:2c:a6:1b:6a:8e:12:84:53:
73:ca:cd:70:b7:e6:5a:ff:9b:62:ef:e5:0b:2c:da:3a:c1:11:
5a:e6:36:0c:8e:8f:2c:40:ab:07:fe:5f:de:75:31:c3:b0:30:
06:87:62:f3:d2:4d:d9:76:c8:b5:ed:55:43:89:2d:2e:24:be:
cc:3d:ff:f3:0f:39:b4:0e:82:ca:e3:9a:76:f7:f0:14:5d:6b:
9b:93:b5:17:48:25:1d:28:fb:cf:49:ce:0e:e4:a1:97:04:ce:
3d:90:d4:4b:5e:b9:51:85:82:2a:bf:58:ba:36:d6:5d:cb:dd:
23:2a:88:85:3b:eb:35:63:2a:07:0a:d3:a7:06:24:a5:0d:c0:
7c:2c:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org