Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rWfMvZVDscys1oe8QjWNnZNw9gU.roa
File: rWfMvZVDscys1oe8QjWNnZNw9gU.roa (raw, json)
Hash identifier: 0oOs+SrM3RpqRR0duPsAvfs+kFSWqj9UZ6KsPY2uheo=
Subject key identifier: AD:67:CC:BD:95:43:B1:CC:AC:D6:87:BC:42:35:8D:9D:93:70:F6:05
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CD8C333F28296D288F25A5CAF0885
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rWfMvZVDscys1oe8QjWNnZNw9gU.roa
Signing time: Mon 02 Jan 2023 03:35:56 +0000
ROA not before: Mon 02 Jan 2023 03:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21479
IP address blocks: 93.178.96.0/22 maxlen: 22
93.178.104.0/22 maxlen: 22
93.178.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d8:c3:33:f2:82:96:d2:88:f2:5a:5c:af:08:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad67ccbd9543b1ccacd687bc42358d9d9370f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:64:15:e8:b4:64:c9:9d:8d:1e:43:2d:d5:
af:15:48:cd:73:d1:07:75:fe:e0:ca:34:91:9d:db:
1d:ae:43:9f:87:94:8d:7d:a4:96:6d:cf:a3:e1:8a:
53:c6:a9:6f:b6:d6:ee:95:c6:b9:0a:57:9c:4f:c3:
ee:40:e2:18:54:0b:94:94:72:0e:4f:73:25:8f:f4:
eb:2c:f5:c5:82:81:5f:7a:21:ba:dc:9e:bd:a4:9d:
da:49:20:37:92:4a:d1:81:4a:99:34:9e:cf:49:25:
4c:af:3b:47:a3:59:0b:3f:83:ec:49:7e:38:b9:39:
46:ed:ba:5a:ce:6d:17:4d:22:73:da:53:18:b3:08:
67:74:c1:66:f4:ef:3c:b4:f7:f7:a6:2f:a7:67:51:
ec:eb:bb:fb:25:ef:1f:76:90:58:12:af:2c:45:32:
bb:a2:01:d6:95:af:6a:aa:fc:ea:c9:06:3e:35:8d:
27:be:1b:22:0f:89:bc:52:8a:96:ab:be:2b:e0:8e:
e1:66:da:11:39:0e:f7:7f:4f:24:7e:18:73:c8:d9:
0a:1b:e4:4f:26:10:77:8c:c0:33:ce:ee:d7:22:97:
12:7b:2a:17:32:c3:83:63:7f:3f:04:16:8d:8f:57:
78:06:e9:f8:c1:cb:77:11:0b:2f:ee:2c:d0:25:97:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:67:CC:BD:95:43:B1:CC:AC:D6:87:BC:42:35:8D:9D:93:70:F6:05
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rWfMvZVDscys1oe8QjWNnZNw9gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.178.96.0/22
93.178.104.0/22
93.178.126.0/23
Signature Algorithm: sha256WithRSAEncryption
56:10:96:02:cc:1d:26:77:bf:ce:c1:f2:f9:4b:32:62:69:40:
2f:b6:56:cd:b9:2b:71:71:0e:69:e3:bf:5a:fb:a4:47:d4:25:
0d:f9:2c:e0:84:e9:b4:cc:36:6b:6c:ba:fb:de:d8:bf:ed:bc:
28:0d:b1:3d:c0:a8:e5:9c:2c:be:ad:4c:b5:31:e0:03:f3:54:
7f:30:b7:f2:f4:a9:f2:9b:db:a6:5c:a6:91:5f:90:1b:01:58:
64:e1:0a:7c:48:26:95:d2:8a:17:a5:c8:d0:75:60:c4:22:ba:
17:dc:98:a4:d9:39:d2:91:d6:79:eb:b6:0b:60:c7:9d:9c:f3:
ab:73:66:6f:43:44:8e:12:4f:8a:f1:cb:08:50:cf:e9:00:ba:
d5:f3:67:01:7b:21:1f:65:1a:d2:3a:6f:44:d8:c2:a1:05:83:
88:77:44:b2:93:90:5c:07:bc:68:ee:9f:24:52:b4:d1:9d:6e:
6e:03:5c:ff:02:13:91:4d:ca:80:be:0f:8c:01:05:25:1d:85:
77:38:d8:6f:bb:67:6e:27:56:ca:ca:fa:44:cc:60:df:33:c3:
c2:85:e1:07:29:1c:d1:3f:2a:72:f7:7f:03:44:d3:c9:10:1d:
3e:66:55:b9:76:57:4f:93:b0:75:62:f2:0b:a0:f9:08:22:db:
2d:48:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org