Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/w-aEFMeruuQrH-dnHhVwt9KFErk.roa
File: w-aEFMeruuQrH-dnHhVwt9KFErk.roa (raw, json)
Hash identifier: A4Xd2cF0ppymWg3I0QWxYKWK2PgMivVjMgFbKcCow8Y=
Subject key identifier: C3:E6:84:14:C7:AB:BA:E4:2B:1F:E7:67:1E:15:70:B7:D2:85:12:B9
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA26FEA3C6C20605F45C7012E12AA1A9
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/w-aEFMeruuQrH-dnHhVwt9KFErk.roa
Signing time: Fri 10 Nov 2023 16:53:19 +0000
ROA not before: Fri 10 Nov 2023 16:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:26:fe:a3:c6:c2:06:05:f4:5c:70:12:e1:2a:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e68414c7abbae42b1fe7671e1570b7d28512b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:8d:01:0e:9c:4f:e7:5b:80:66:2e:c2:86:
78:b5:1c:f3:57:f3:0a:7d:6a:74:24:95:6a:7a:12:
35:52:a7:50:e7:40:2e:a1:f3:67:48:4b:0a:82:83:
54:5e:9a:db:f4:5f:03:7c:d9:bc:e9:5a:d1:3d:82:
1b:25:9c:15:b1:d8:a6:9c:67:75:f3:b7:30:54:ff:
2e:b5:66:3f:4c:8b:f3:5d:28:e0:d4:29:98:68:9b:
77:c4:a3:a8:f6:ed:5d:c9:f4:4c:48:ce:d6:dd:40:
80:6b:42:2f:d3:e1:fc:45:bc:95:55:e4:17:5d:95:
66:d9:24:73:20:67:f2:40:37:76:dd:8a:a9:d4:89:
b8:d9:dd:19:10:e0:2f:4d:37:ca:83:47:7d:21:f0:
43:55:33:60:4c:89:91:9a:a9:58:4b:6d:da:6f:8a:
26:02:98:45:3a:34:a3:d9:e7:c1:33:c8:ba:a7:f3:
5c:fc:35:2f:f5:d9:8a:80:66:8b:16:47:80:06:c0:
a5:0d:1f:22:c2:9e:08:ab:e2:d6:4b:3b:de:e9:04:
37:a9:70:74:e6:e0:4a:34:bb:ae:42:41:80:41:13:
8c:60:83:10:ef:bc:f0:7b:6c:fa:af:3a:f7:4e:2b:
45:9d:28:62:11:bf:e0:d0:2d:ae:ef:fd:51:c2:41:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:84:14:C7:AB:BA:E4:2B:1F:E7:67:1E:15:70:B7:D2:85:12:B9
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/w-aEFMeruuQrH-dnHhVwt9KFErk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0f:79:c9:aa:5c:27:8a:42:f5:4f:ba:73:4c:b9:16:32:c2:
eb:7a:7a:f2:4e:bd:c7:e0:3c:ef:31:12:bc:55:fe:17:ed:57:
5d:95:c2:b4:8c:44:1e:de:a4:f3:c7:75:cc:9d:d2:87:9c:1e:
4e:e2:5d:42:03:f1:5c:fd:71:de:06:96:15:e5:d0:a1:78:b8:
5e:0f:f5:a6:73:25:19:f1:34:1a:26:3d:0d:9f:0a:00:a0:1a:
25:66:ac:b7:83:3b:df:ff:b9:44:77:60:24:5c:c4:cc:64:88:
de:65:ad:f3:49:7a:1d:d9:17:f4:b6:bd:94:8c:78:2c:25:e0:
14:7f:eb:77:8a:0f:bb:cc:3b:94:ea:06:51:8e:51:67:78:2e:
5f:1b:a0:3a:24:70:0f:d9:08:cd:4e:22:00:77:49:9a:19:f1:
e6:75:a7:cc:55:95:9f:a5:41:92:7f:18:c0:23:a8:57:8b:a6:
8c:ee:bd:33:34:04:b0:f6:e6:b1:2b:7b:a0:b3:2f:18:27:27:
e4:b1:3f:49:cb:ef:1d:a2:c5:18:92:8e:b9:8a:47:12:dd:2e:
9c:5d:35:2f:21:ba:f1:9b:0d:89:79:cb:d8:8c:f4:a4:e7:da:
6e:9a:a9:3c:f8:64:70:59:ef:b7:cd:74:0f:dc:ac:21:0d:ca:
a7:30:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org