Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/xO60O2O1kSIQ3pXy34-jBmHFM5E.roa
File: xO60O2O1kSIQ3pXy34-jBmHFM5E.roa (raw, json)
Hash identifier: 7Di7s/+CM9e970zvJdliiWgSfnS+MopaGQW9opQHG84=
Subject key identifier: C4:EE:B4:3B:63:B5:91:22:10:DE:95:F2:DF:8F:A3:06:61:C5:33:91
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018901C2E6E4DA857B1057B3BC227EB8CDB1
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/xO60O2O1kSIQ3pXy34-jBmHFM5E.roa
Signing time: Wed 28 Jun 2023 11:28:17 +0000
ROA not before: Wed 28 Jun 2023 11:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 93.152.210.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:c2:e6:e4:da:85:7b:10:57:b3:bc:22:7e:b8:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 28 11:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4eeb43b63b5912210de95f2df8fa30661c53391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:3a:4f:de:47:9e:0f:38:ee:3d:3e:ba:8d:
71:18:12:d0:05:47:f6:55:c0:96:7b:35:e8:9a:91:
2b:12:88:a2:1a:98:f2:c8:a6:41:be:28:d3:b5:60:
5d:82:8d:b9:b6:ad:5c:8d:5c:7d:4c:e3:9a:91:45:
dc:6a:5b:bd:82:0f:83:f9:ce:40:f3:3a:e5:84:52:
bc:5f:0d:90:30:92:2e:c5:c9:cd:60:08:50:20:fc:
b1:48:58:8e:22:ab:5d:33:31:c4:bf:44:d8:27:d9:
e2:dc:6a:61:b9:7c:8c:85:39:d7:2b:1d:5f:d6:20:
ab:77:46:4a:09:ab:55:ac:4d:11:7d:20:6a:08:91:
52:04:16:1e:b6:31:fe:5a:1b:de:e8:ef:6d:f6:f8:
52:0e:13:45:6a:52:78:8f:13:e4:0c:d7:3b:16:2b:
b0:bd:dc:5d:51:5b:b9:c7:45:32:a4:2c:90:0a:ed:
b0:a7:a5:2a:f7:44:1e:af:1f:a4:26:ef:17:b1:83:
e1:d7:af:45:74:ef:6f:bd:2b:e1:b3:f9:d3:6b:c8:
57:47:db:fa:b9:8a:c8:ce:84:f3:4a:c1:af:ae:11:
da:42:ca:5b:24:e7:b6:b2:c0:62:31:ae:5a:81:d1:
35:6a:d1:9f:fd:11:d4:a8:68:17:a7:a9:88:33:31:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:B4:3B:63:B5:91:22:10:DE:95:F2:DF:8F:A3:06:61:C5:33:91
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/xO60O2O1kSIQ3pXy34-jBmHFM5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.210.0/24
93.152.212.0/24
93.152.217.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:06:14:95:4a:a4:88:26:eb:9d:25:a2:f5:65:23:20:f0:
e2:a4:24:6e:dc:0d:03:82:fb:04:dc:46:9c:cc:6a:1b:ae:df:
82:46:66:cb:bb:f7:bf:ba:82:ff:aa:18:86:04:84:37:c1:51:
d8:2f:e6:7a:7c:62:49:d8:ea:37:e0:83:98:07:91:e3:4e:b9:
47:71:b0:2f:26:1c:92:33:df:cf:94:f5:ff:68:b1:d2:fa:c5:
78:4a:2d:28:8d:5b:0c:f2:a6:71:32:8c:45:06:ec:8e:e9:ed:
b8:eb:f4:35:2b:70:62:82:20:30:54:20:e4:92:9b:68:63:bb:
aa:3c:7c:0d:d1:13:b6:06:82:97:e6:88:ea:d8:a0:4d:be:7f:
a1:37:99:8b:22:cc:71:66:c4:74:02:1b:32:ef:e8:e8:00:5a:
4c:2d:0b:56:4e:27:ac:c0:31:d4:bf:54:1f:e4:32:cd:ae:05:
f5:07:e5:be:aa:74:a0:3e:0c:a2:92:d2:96:57:9f:ba:7d:bc:
4c:84:1f:9d:5d:10:44:e4:75:79:64:ea:57:95:36:4e:c0:c4:
02:5c:a7:43:1d:40:c0:64:17:4f:93:d2:5e:30:90:41:8d:89:
e8:aa:60:15:70:8a:77:f5:f6:5f:da:3a:7b:46:9c:85:0b:c4:
34:7a:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:44 2023 by rpki-client on console.sobornost.net