Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/W_nVAivoksY_uk2ITUdzEL9OjLg.roa
File: W_nVAivoksY_uk2ITUdzEL9OjLg.roa (raw, json)
Hash identifier: G4kNBVY1uNh3WwXYH6vOiN0D3zT07bzDfQ/3rh22xc0=
Subject key identifier: 5B:F9:D5:02:2B:E8:92:C6:3F:BA:4D:88:4D:47:73:10:BF:4E:8C:B8
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0189BF36AA2CEE022322432EADB888F5A116
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/W_nVAivoksY_uk2ITUdzEL9OjLg.roa
Signing time: Fri 04 Aug 2023 06:22:58 +0000
ROA not before: Fri 04 Aug 2023 06:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 193.38.44.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Sep 2023 20:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:36:aa:2c:ee:02:23:22:43:2e:ad:b8:88:f5:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Aug 4 06:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf9d5022be892c63fba4d884d477310bf4e8cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:02:d8:c2:45:52:0a:f0:65:bb:66:4d:06:
cc:bd:68:5b:77:87:76:3a:ce:26:87:d6:41:03:5d:
16:7d:ad:b9:0a:53:86:7c:b3:33:bd:86:04:50:e6:
bf:a8:f9:69:b9:b3:95:46:58:40:c5:8d:bd:9d:ce:
4b:bf:64:f4:5c:c7:b8:2f:d5:25:27:e7:15:5d:54:
8f:00:b7:85:35:28:2a:75:23:c3:39:79:0f:40:b0:
e4:4c:41:c2:45:ee:a3:e0:c5:cd:eb:a0:b2:af:c7:
f1:2f:10:a8:cd:d7:57:56:a7:0e:47:b6:50:29:50:
a9:af:db:da:7f:87:b7:93:4d:ec:14:37:4f:36:ea:
96:e2:88:51:e4:cb:2c:05:eb:eb:77:25:72:76:f8:
ae:fe:3c:41:fe:bb:d1:4e:9a:42:5f:6d:81:06:f3:
bd:1f:57:ca:fa:50:62:5b:95:cc:7c:6d:3a:a6:5c:
c4:62:3b:bd:9a:e9:8a:9f:2d:ba:7f:73:5a:fe:74:
da:0d:57:7b:99:b5:59:0e:c3:de:71:ec:e9:c0:90:
d4:dc:d0:80:ab:86:f9:ff:b8:43:b3:b3:37:a1:f6:
2e:f9:58:8d:82:16:fc:60:4b:09:fd:db:b5:5b:f5:
4d:fe:fa:0f:94:75:91:3d:e2:19:6e:43:b5:72:85:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:D5:02:2B:E8:92:C6:3F:BA:4D:88:4D:47:73:10:BF:4E:8C:B8
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/W_nVAivoksY_uk2ITUdzEL9OjLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.44.0/22
194.93.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:e9:36:c3:ec:16:f6:0f:79:76:ab:2c:72:b1:b2:4a:98:18:
c7:c7:ea:70:58:56:8e:5c:15:de:b6:cc:43:7b:4f:5d:fc:35:
eb:8f:2c:eb:43:70:ce:a0:0e:f8:f8:5b:f9:c1:0f:f0:94:84:
2a:ea:1d:96:2a:19:68:c6:d5:bb:54:57:d1:26:8f:26:47:9c:
9e:a3:c2:d1:c2:74:9a:26:27:6a:e0:1c:15:1c:9d:b6:76:b3:
35:d1:06:ae:89:03:12:f5:2b:8d:6d:81:bd:11:f3:dc:ee:40:
0c:43:21:ac:05:7f:fa:c1:fa:c9:7e:87:65:7a:f4:db:c3:d6:
5d:de:2e:14:ef:da:49:0e:6b:bf:d7:40:59:27:f3:0f:65:19:
b0:86:04:7a:d2:3a:80:17:c3:05:ef:fd:a9:1a:02:a6:e6:84:
89:79:bd:e7:62:6e:92:ce:b6:84:a2:26:e8:ec:39:d9:fe:de:
6f:1c:e6:e1:74:a0:4f:33:7a:cf:4c:60:94:b7:36:26:52:54:
50:b9:11:a9:05:e8:b3:63:85:73:2b:0b:91:07:8d:23:c3:5a:
a3:e8:14:8f:9d:eb:11:dd:a4:a4:35:96:03:40:67:5d:de:c6:
0c:1b:de:c6:f1:15:1f:bb:af:36:3f:78:69:2f:06:44:5e:39:
bd:ff:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org