Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/CJyg7Kkd7RLENdUg35kFGx5c5nQ.roa
File: CJyg7Kkd7RLENdUg35kFGx5c5nQ.roa (raw, json)
Hash identifier: jXOLek0dG3FPyeDbkrLAdIQcZZm9EJMB8zgPV7uA17o=
Subject key identifier: 08:9C:A0:EC:A9:1D:ED:12:C4:35:D5:20:DF:99:05:1B:1E:5C:E6:74
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018C4B8ED364ED6D7FB38A8F277DBFB978E8
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/CJyg7Kkd7RLENdUg35kFGx5c5nQ.roa
Signing time: Fri 08 Dec 2023 22:31:40 +0000
ROA not before: Fri 08 Dec 2023 22:31:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 93.127.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:8e:d3:64:ed:6d:7f:b3:8a:8f:27:7d:bf:b9:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 8 22:31:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=089ca0eca91ded12c435d520df99051b1e5ce674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:1d:b0:4b:11:52:64:53:d9:8d:e9:d8:78:
c7:f1:42:dc:a6:3f:83:53:7b:5f:89:6e:5e:c3:a8:
36:fd:d6:0f:95:d5:00:cf:7f:a7:ce:73:f2:58:1a:
39:4a:4b:be:cd:5b:e3:3c:b5:ca:e8:e6:ee:38:64:
18:c1:2d:de:39:88:59:a2:8e:cc:76:67:4d:f5:d0:
9f:39:ef:1d:54:70:30:a8:83:90:75:be:37:0c:9a:
d2:1e:fa:7f:04:9a:a2:dc:e7:94:6d:20:84:9e:03:
83:e8:01:a8:98:bc:7d:00:60:68:e0:b5:d1:95:7c:
4d:9e:c5:a3:c3:8b:c9:62:bd:16:d7:0f:b5:c5:ca:
f3:d1:be:df:44:05:ae:b4:e4:18:1a:8b:43:60:98:
20:74:fd:7a:2d:71:74:d7:e4:a5:3b:4a:85:2d:cc:
ca:92:44:76:d8:0a:bc:e9:c5:d6:89:5a:f0:0b:3a:
8c:73:8d:5a:31:0e:b8:0e:1e:79:b5:01:96:8e:0c:
9f:4f:0d:00:8c:05:ca:00:6f:1e:9f:0d:ae:d3:36:
82:ff:b5:54:94:4f:25:b8:42:5d:9c:a0:18:73:fa:
e7:f8:49:4b:78:9c:0a:b3:47:46:a3:20:6e:8c:84:
b6:b8:db:46:53:3b:9f:42:fd:cc:26:65:8a:cd:be:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9C:A0:EC:A9:1D:ED:12:C4:35:D5:20:DF:99:05:1B:1E:5C:E6:74
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/CJyg7Kkd7RLENdUg35kFGx5c5nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.170.0/23
Signature Algorithm: sha256WithRSAEncryption
40:7d:7e:5c:a3:b0:81:8f:59:8a:58:0e:d2:18:fb:a0:c5:e1:
37:07:b3:fb:94:19:41:62:1f:28:1a:0a:3a:b6:e0:7a:f9:7b:
84:d7:21:d1:cb:e1:ff:fb:a4:f2:d7:21:39:4a:b5:31:aa:66:
c5:36:3d:2f:36:b9:10:d6:08:f5:ac:93:04:d4:1c:47:9b:04:
80:fd:8a:68:c6:5c:06:1e:47:00:81:69:3e:8b:d8:25:bf:e7:
d4:77:14:4d:26:16:a6:ee:34:f3:5a:73:01:ad:66:18:19:ce:
84:8b:2e:68:3e:41:ac:ff:6a:5f:08:70:7d:98:e8:7d:f5:95:
85:57:38:37:5a:68:bf:f9:cc:87:1c:83:0c:01:1d:4f:ce:90:
f7:9c:95:70:dd:f1:dc:9a:f5:ba:1c:8e:9e:ee:f1:84:3d:c0:
4d:d0:bb:0c:5b:e4:04:72:6a:84:57:de:51:45:05:5f:24:3d:
c5:b0:6e:5a:7d:28:d9:9f:3e:a4:b8:0c:e0:06:3f:46:99:4a:
99:84:83:41:15:a6:0b:ad:9f:90:14:ba:2f:70:e1:2c:7e:1f:
2a:37:a5:3a:28:85:cc:91:55:ad:78:5f:d4:b8:47:29:5a:f1:
6b:0a:67:02:69:76:85:f7:2a:01:9b:7b:fa:03:f0:f9:e3:18:
32:e3:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org