Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/NszXvo9m32d1GK22VWFjv2NvYyM.roa
File: NszXvo9m32d1GK22VWFjv2NvYyM.roa (raw, json)
Hash identifier: WfcxHAFfJisHB2l9vxhkEhPoJ79VGRwdY8zmZ3y7Ag8=
Subject key identifier: 36:CC:D7:BE:8F:66:DF:67:75:18:AD:B6:55:61:63:BF:63:6F:63:23
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 01867DE7ED95B29AE7D865D03BAA7DBEF623
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/NszXvo9m32d1GK22VWFjv2NvYyM.roa
Signing time: Thu 23 Feb 2023 10:53:17 +0000
ROA not before: Thu 23 Feb 2023 10:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47134
IP address blocks: 93.91.64.0/20 maxlen: 20
93.91.65.0/24 maxlen: 24
93.91.67.0/24 maxlen: 24
93.91.73.0/24 maxlen: 24
93.91.76.0/24 maxlen: 24
93.91.75.0/24 maxlen: 24
93.91.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:e7:ed:95:b2:9a:e7:d8:65:d0:3b:aa:7d:be:f6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Feb 23 10:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36ccd7be8f66df677518adb6556163bf636f6323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:6a:35:ed:e8:a5:7d:c6:e0:b0:c7:fe:9c:
38:8f:c3:1a:2a:6a:94:8a:b4:4f:c6:70:22:d6:8d:
f7:3a:76:b2:b4:b2:c7:45:1f:91:0e:5f:87:00:e7:
3e:fd:53:b7:08:c1:c4:6f:9c:32:b1:fe:c4:7a:b7:
f1:98:c6:44:62:2b:a9:03:5e:7f:63:b7:55:23:aa:
74:0d:df:c3:3a:1b:8d:63:6f:26:85:91:c2:01:7f:
b0:62:b0:50:40:44:56:27:01:d8:41:46:8f:2a:88:
22:78:25:97:b1:f9:fe:c8:5d:f3:2c:fa:fd:9b:70:
0b:cd:40:fb:24:bd:92:e1:a1:ec:4c:c9:0a:a5:95:
cd:87:2e:cb:82:54:66:39:70:05:16:60:b5:f2:8a:
20:d9:5a:e0:76:09:b7:45:5b:50:1b:8e:ea:f3:69:
6d:1f:55:57:60:8c:d1:70:18:27:7f:18:9c:13:8f:
84:db:b6:77:d8:c4:29:ab:72:51:89:54:b5:69:31:
1b:3a:4a:21:3c:df:b2:29:db:be:0a:b9:2c:df:bf:
63:5e:5c:d1:8c:54:75:bd:6a:fb:2d:1c:6d:05:4e:
31:b1:a3:e0:6f:62:06:fb:d2:c4:2b:3b:64:25:c2:
73:54:6e:47:be:ac:ff:46:40:d6:74:31:4d:04:43:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:D7:BE:8F:66:DF:67:75:18:AD:B6:55:61:63:BF:63:6F:63:23
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/NszXvo9m32d1GK22VWFjv2NvYyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.64.0/20
Signature Algorithm: sha256WithRSAEncryption
53:d2:7e:a1:30:34:87:fc:a6:e1:c4:72:52:4a:2d:bd:fa:56:
39:ec:1b:bf:ad:0d:8b:89:50:7d:1b:0c:78:06:e7:d5:e4:80:
ca:a1:7d:3d:e9:62:bf:7a:64:22:75:fe:41:81:0e:e5:28:a5:
08:c6:bc:f5:0d:f6:2f:0a:7e:9b:66:bb:f1:69:58:f7:18:38:
80:9e:7e:36:91:4f:b4:01:4c:fe:27:04:51:40:f5:5e:46:1e:
3d:7b:bb:4a:79:b0:0d:56:01:aa:76:0b:b1:8d:a9:cf:63:4b:
b4:bb:6f:79:50:6a:89:db:28:27:fd:f8:50:fe:11:f5:11:d4:
80:b6:d5:16:80:f8:9f:6c:c6:66:fb:16:88:ad:25:3f:61:16:
58:26:3e:6f:cf:43:5e:ca:0e:51:06:30:cc:8c:e8:f0:1c:0e:
20:46:d2:48:f1:dc:45:43:17:5a:bb:b2:90:79:47:25:89:fe:
f7:0a:6b:9b:9e:e0:9d:53:af:b2:f1:28:da:eb:fd:77:89:dc:
b2:a7:f3:f8:61:aa:d6:16:b9:09:7a:ea:69:df:6a:6f:c5:f6:
ae:3a:8a:4a:d1:ed:de:13:ec:92:04:78:77:be:67:e0:1f:d9:
79:db:a0:4e:ff:06:8e:b6:03:e8:72:2a:c6:8d:c1:59:ae:e5:
e3:b7:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:04 2024 by rpki-client on console.sobornost.net