Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/7pRO8_M0ueMnbBVEw230Uoio3kQ.roa
File: 7pRO8_M0ueMnbBVEw230Uoio3kQ.roa (raw, json)
Hash identifier: HjkIWiqsLw+CyQD5JGrJpUgvou6pj2jFGMn7TZ0CnRs=
Subject key identifier: EE:94:4E:F3:F3:34:B9:E3:27:6C:15:44:C3:6D:F4:52:88:A8:DE:44
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F02282632B1C6A8FA94FE13CEEFC081
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/7pRO8_M0ueMnbBVEw230Uoio3kQ.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 93.114.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:28:26:32:b1:c6:a8:fa:94:fe:13:ce:ef:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee944ef3f334b9e3276c1544c36df45288a8de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:bf:b2:ac:9e:83:be:6f:b3:9c:77:fa:30:
8b:f4:82:47:d2:13:61:6c:3b:8e:25:34:ed:65:36:
32:4f:9e:45:6b:e9:bd:10:5b:67:77:d3:0e:22:0d:
62:ff:9f:6a:52:80:43:fc:c3:b6:92:ba:aa:f1:43:
fc:c9:1f:d7:09:88:2a:d6:88:6d:19:8c:87:cd:f5:
d0:ce:a7:43:c9:f4:0f:90:86:5d:60:73:e5:98:f4:
e4:9c:ea:fb:19:4e:ad:69:bb:b9:e5:a0:dc:9f:fd:
d4:d0:6e:2f:97:c0:a6:07:3d:f2:02:5b:4b:2b:a7:
ee:de:52:cf:b7:c4:b3:35:58:46:cd:0f:69:f9:22:
5d:59:08:ee:b9:a6:ee:66:7f:c1:c2:d9:c2:7b:b8:
81:3e:9b:cd:5e:e8:5b:82:ab:22:08:ce:60:1d:d5:
dc:74:ab:db:29:3f:a3:07:f0:42:80:e9:fd:8f:06:
1b:1a:fc:62:22:a9:b3:8f:0c:33:45:58:ae:c6:67:
eb:47:56:3f:b3:76:65:ee:34:cc:1a:b1:b6:bd:f7:
8b:42:74:e7:fe:04:cd:bf:23:a6:ba:ce:eb:d0:bd:
d4:f0:91:7d:85:20:61:63:48:3b:8f:43:2e:8e:fa:
fb:88:a6:68:fe:3d:f3:8d:cc:53:27:01:10:d0:6a:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:4E:F3:F3:34:B9:E3:27:6C:15:44:C3:6D:F4:52:88:A8:DE:44
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/7pRO8_M0ueMnbBVEw230Uoio3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.169.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4b:2d:2e:9e:15:29:c7:d2:cd:43:b5:ab:88:ca:61:07:68:
87:d2:d7:db:5e:cd:75:75:90:d9:7f:78:41:89:da:0c:ff:8a:
80:56:9d:bb:1f:75:26:df:94:af:5c:2a:2c:10:5a:37:f8:6b:
55:a4:1c:44:d0:58:28:03:0d:57:de:6f:26:9d:5b:2a:d1:02:
99:11:d8:c8:ef:53:52:32:32:e3:4f:c8:e9:be:50:25:2e:c2:
24:27:07:89:ab:6f:63:85:7d:16:bd:67:b0:c9:e2:0e:4f:c6:
4d:26:f9:25:10:29:1c:26:56:3d:92:7d:64:de:82:30:ce:58:
f0:11:db:a9:7e:19:8e:2d:40:58:bf:04:c0:ce:c9:9e:d3:a9:
cc:66:62:9a:30:83:b8:03:57:98:78:64:35:28:b9:cb:39:c2:
c8:b4:b8:26:5e:0a:3a:d4:bb:74:ff:9d:7f:2c:35:f5:74:91:
a2:4b:75:bf:a0:36:9e:2f:d5:c1:c7:b0:51:57:8d:56:1d:d5:
0b:3f:d7:36:af:25:c9:32:e1:34:e8:f3:5e:51:60:be:c3:91:
27:2d:c4:1e:54:fe:74:8c:ea:e4:39:d2:17:7c:39:50:f7:5a:
56:85:0f:5b:0a:44:e2:eb:58:0b:46:cf:3b:4f:1b:3f:67:ab:
e3:15:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org