Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/RwSqkCnqlcdbva9q8wn7JC-geFo.roa
File: RwSqkCnqlcdbva9q8wn7JC-geFo.roa (raw, json)
Hash identifier: u5QHzEwtZ61WxtuOl30p5qkV87fGdKX93sN8zQlBVYk=
Subject key identifier: 47:04:AA:90:29:EA:95:C7:5B:BD:AF:6A:F3:09:FB:24:2F:A0:78:5A
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018CCA293E94727CBD5B86EC8D449F6A48A1
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/RwSqkCnqlcdbva9q8wn7JC-geFo.roa
Signing time: Tue 02 Jan 2024 12:32:29 +0000
ROA not before: Tue 02 Jan 2024 12:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
93.93.22.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 04 Mar 2024 13:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:3e:94:72:7c:bd:5b:86:ec:8d:44:9f:6a:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jan 2 12:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4704aa9029ea95c75bbdaf6af309fb242fa0785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:34:b2:28:d0:81:24:43:e4:2b:3a:be:80:
71:b3:8f:a7:2e:0a:01:77:d5:7e:45:1c:b3:5e:41:
02:a5:32:9e:e9:55:ff:af:e7:71:2b:af:f3:51:63:
4a:02:80:69:67:cf:43:6b:41:12:e9:e1:e1:fd:f6:
c3:36:65:ff:29:84:05:b6:49:2f:9c:dc:7b:61:d7:
e0:7f:88:38:ed:4a:2f:ab:23:67:3f:a4:57:ef:a9:
10:37:5b:07:6e:2c:55:55:e4:e2:f7:a8:13:f5:3d:
1d:15:e6:2c:9d:4f:bd:1e:d0:d3:3a:e4:b0:55:f4:
4a:39:3e:7a:08:75:af:3b:88:48:f9:dd:78:e6:2a:
7a:28:c6:21:95:4c:2a:f0:2c:fe:c4:1c:66:ec:a4:
35:7e:dc:35:19:2b:5c:1e:5c:ce:07:5b:58:a4:65:
14:89:2a:b4:19:fb:57:3f:5d:27:90:e0:ce:60:99:
41:4c:8b:7c:f5:fa:c1:c2:dd:e0:55:ca:7d:3c:9b:
e2:4a:62:27:16:16:15:30:27:d1:eb:f5:51:5a:76:
33:57:ac:eb:f8:1c:2e:7b:dc:96:2a:1f:b2:d3:24:
66:7e:d9:d8:04:e4:cf:c1:ea:c6:0d:23:41:71:4c:
45:55:9d:1b:08:90:c8:3e:cf:f2:02:6a:9d:b6:c9:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:AA:90:29:EA:95:C7:5B:BD:AF:6A:F3:09:FB:24:2F:A0:78:5A
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/RwSqkCnqlcdbva9q8wn7JC-geFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/22
Signature Algorithm: sha256WithRSAEncryption
31:f0:e1:35:37:81:79:6f:90:4e:5d:5f:3f:9d:2f:70:8b:16:
be:7a:8d:f5:ff:a0:2c:d8:ae:5f:17:ef:7e:2e:7d:8e:95:62:
c8:69:96:ee:91:51:4b:5b:05:9c:16:a4:bb:d6:8d:96:ae:11:
a8:cd:4b:3f:9a:32:1a:f1:62:84:e3:88:2a:ef:07:24:22:9a:
2a:b0:73:0c:c2:2e:ec:53:d7:df:2d:cf:f5:e4:73:7b:73:69:
09:7d:c5:59:c0:7a:3b:c0:46:e0:b3:71:a7:29:ad:f8:50:df:
c4:82:88:3a:fe:cb:83:e1:a8:52:77:e5:d1:91:62:36:dd:6a:
85:26:67:bb:d7:ab:f3:e1:be:51:cb:ce:8f:53:8f:a0:37:6a:
9d:88:da:d3:b3:85:9f:e0:1e:19:0e:1d:96:eb:ad:c8:f9:ab:
d8:ac:e0:55:d2:e2:0e:d1:ba:d0:6c:f2:f9:73:c0:0e:ea:96:
7d:a5:09:98:44:48:c3:b3:e0:f2:a3:09:a0:d3:bb:1c:19:a6:
45:b9:80:ed:4d:14:d3:91:c8:97:d2:2a:13:ba:92:54:31:ad:
44:d5:16:45:4a:98:8b:ce:27:91:ad:6b:b5:e2:5a:be:0d:12:
c7:a6:ee:3d:1b:b8:b0:9c:2c:43:55:36:2f:3f:6e:de:59:31:
e0:77:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org