Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/BDoq1wCYFAsbSySUSpTuWsZVtiU.roa
File: BDoq1wCYFAsbSySUSpTuWsZVtiU.roa (raw, json)
Hash identifier: 97+esA/oEmlB7IGOFfbCfY0MidB6Z8/3wHFlY//TEeQ=
Subject key identifier: 04:3A:2A:D7:00:98:14:0B:1B:4B:24:94:4A:94:EE:5A:C6:55:B6:25
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018DF292451064D60818659FFF01934E100F
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/BDoq1wCYFAsbSySUSpTuWsZVtiU.roa
Signing time: Thu 29 Feb 2024 01:54:48 +0000
ROA not before: Thu 29 Feb 2024 01:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58325
IP address blocks: 93.118.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 19:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:92:45:10:64:d6:08:18:65:9f:ff:01:93:4e:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Feb 29 01:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=043a2ad70098140b1b4b24944a94ee5ac655b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:00:7c:ad:c5:cf:35:ff:69:d4:6f:3e:4c:
cd:fc:6f:b1:9c:35:92:93:bf:b3:7c:9c:83:f1:33:
e4:f5:9c:8f:1e:c0:4a:12:70:f0:19:58:e9:23:f9:
ad:e2:ed:06:ee:ea:42:6f:ef:87:96:4e:ab:33:36:
36:79:25:ce:0f:e8:b0:53:1d:8c:5a:67:b4:fd:5c:
b7:2a:f3:6e:a2:92:c6:a6:ec:95:35:a1:b5:be:b8:
52:f3:b7:cf:36:68:df:fa:1b:21:b0:57:b7:ec:7b:
90:0e:54:ba:91:ad:3f:81:b2:f5:a8:09:9d:5a:19:
0c:72:90:50:31:26:7c:e7:4c:6c:63:9f:33:b2:9d:
48:5c:ec:da:33:b2:39:66:21:fc:5d:a5:9c:46:84:
a4:9c:e2:16:58:07:e2:aa:1e:14:82:90:4c:3e:44:
65:fc:b4:f3:40:6c:4a:73:c7:9b:f2:1d:8c:8d:76:
a3:e6:cf:56:82:bc:d7:0b:ef:e6:fd:e6:f0:08:10:
91:5a:cc:84:1e:4c:c4:4b:96:22:26:5e:bf:ea:35:
88:43:eb:9a:61:34:46:2b:d9:42:a5:49:c6:09:2b:
48:3b:c9:1f:53:6b:fe:08:10:51:61:aa:1b:a7:ec:
4b:8b:42:08:72:d8:10:ae:19:f7:4e:73:33:0c:f5:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:2A:D7:00:98:14:0B:1B:4B:24:94:4A:94:EE:5A:C6:55:B6:25
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/BDoq1wCYFAsbSySUSpTuWsZVtiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.118.40.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:6a:04:9b:f2:8f:34:bc:c0:64:a1:47:fd:2f:c7:8b:07:57:
2d:77:26:5a:2e:0f:8c:24:03:e5:d1:12:73:d4:f0:3f:eb:05:
a5:13:db:e7:90:65:a1:a0:2f:53:28:91:4a:52:fe:f6:b4:0f:
63:7d:e3:47:8e:d1:44:b1:db:d9:f9:80:8a:1f:19:fd:a1:30:
30:43:d9:71:78:9c:e8:33:47:df:88:16:ce:14:96:28:0c:81:
4d:c2:fe:67:20:ba:89:0e:14:e9:c2:51:97:0e:46:7d:9e:1f:
81:49:f5:e3:1b:f1:f3:f0:19:0c:f1:6b:d8:cd:9b:69:a6:97:
46:62:e4:a6:68:cf:90:62:46:03:db:75:ac:bd:9e:60:4f:e7:
66:3b:aa:79:88:48:81:2f:28:3c:22:74:30:94:26:86:9e:da:
58:1c:b2:9e:18:83:76:4f:aa:2f:ee:39:d2:f4:3d:f1:2f:88:
04:26:8c:a3:02:dc:38:f8:44:40:bd:51:99:37:47:02:68:82:
27:c3:cb:cb:75:b9:99:df:7e:0d:d8:1f:7a:31:c8:0e:52:48:
e2:d3:8f:e3:98:e4:d0:63:43:2f:2c:58:71:05:63:91:83:40:
77:b4:19:7c:b6:6c:4c:37:ad:58:ad:70:76:6b:f4:c4:99:f8:
02:8c:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org