Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/utWGSh-DishVEMK6uR0hgD3QPfM.roa
File: utWGSh-DishVEMK6uR0hgD3QPfM.roa (raw, json)
Hash identifier: 7Z+LsU9vrNuQlDoPp1W9Cmfz3npleFX5gZlSLYN5Nqk=
Subject key identifier: BA:D5:86:4A:1F:83:8A:C8:55:10:C2:BA:B9:1D:21:80:3D:D0:3D:F3
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 018EA85F424CBE0BA0746EF182A58EF414B8
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/utWGSh-DishVEMK6uR0hgD3QPfM.roa
Signing time: Thu 04 Apr 2024 09:09:58 +0000
ROA not before: Thu 04 Apr 2024 09:09:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61315
IP address blocks: 93.101.4.0/24 maxlen: 24
93.101.5.0/24 maxlen: 24
93.101.16.0/20 maxlen: 24
93.101.32.0/20 maxlen: 24
93.101.48.0/20 maxlen: 24
93.101.64.0/20 maxlen: 24
93.101.80.0/20 maxlen: 24
93.101.96.0/20 maxlen: 24
93.101.112.0/20 maxlen: 24
93.101.128.0/20 maxlen: 24
93.101.144.0/20 maxlen: 24
93.101.160.0/20 maxlen: 24
93.101.176.0/20 maxlen: 24
93.101.192.0/20 maxlen: 24
93.101.208.0/20 maxlen: 24
93.101.224.0/20 maxlen: 24
93.101.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 08:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:5f:42:4c:be:0b:a0:74:6e:f1:82:a5:8e:f4:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Apr 4 09:09:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bad5864a1f838ac85510c2bab91d21803dd03df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:ea:64:a6:9b:af:aa:c7:2a:be:34:eb:92:
56:9e:76:66:24:99:95:55:a8:cf:39:b6:73:35:22:
9c:0e:a7:0f:13:13:c1:0d:a5:97:a1:a6:15:3a:92:
b8:1a:15:e6:a3:3c:49:8a:1e:da:4c:34:8c:11:61:
96:67:f9:9b:26:94:d1:d8:06:21:30:82:d2:96:28:
4e:ba:bf:62:4a:c1:bc:cf:90:ed:2d:15:53:07:b4:
fa:f0:ef:b7:05:7a:89:c6:b1:48:1a:5a:d0:2c:cb:
63:5c:af:24:d6:58:30:d4:0f:84:a8:9b:1b:fe:d0:
4a:fc:ac:56:e8:26:89:78:a1:fe:52:cb:a8:a9:c2:
00:71:21:73:e8:e9:2d:55:14:78:ac:70:64:e3:b0:
9c:af:84:0c:06:40:55:f3:f6:a0:18:de:98:5b:7b:
67:2e:8c:8c:23:4f:b5:8c:b7:dd:af:b0:d0:2b:fc:
94:cc:cf:15:01:08:4a:5a:07:67:30:bb:e2:60:96:
f4:d1:ff:99:3c:29:1f:f2:98:92:f4:03:33:2e:0c:
ce:c7:ab:02:bc:61:c9:25:9a:8c:cf:7c:f6:56:93:
82:c9:9c:67:af:dc:1a:c3:6c:e4:e0:c7:aa:c2:33:
52:a2:19:d6:7c:b2:f7:85:bd:8b:ca:c9:17:76:d7:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:86:4A:1F:83:8A:C8:55:10:C2:BA:B9:1D:21:80:3D:D0:3D:F3
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/utWGSh-DishVEMK6uR0hgD3QPfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.4.0/23
93.101.16.0-93.101.255.255
Signature Algorithm: sha256WithRSAEncryption
a6:40:30:69:fd:f7:37:ca:b2:15:a0:07:fa:77:93:fe:ff:56:
35:f4:24:d2:99:29:45:c5:67:66:0c:84:83:1a:52:0f:10:3b:
74:31:6c:c2:22:20:1c:08:d7:ae:9b:bd:ce:69:da:ea:f6:fc:
34:8c:6d:a3:5c:f4:1b:ab:cb:6e:dd:11:19:ed:11:0c:b4:4c:
1a:b9:5d:17:cb:3a:f7:86:ec:76:df:10:5f:05:dc:da:fa:a9:
58:93:b0:9d:80:8a:a3:f5:a4:de:d0:bf:64:5a:b2:bf:d7:e5:
f9:a7:be:b8:e2:3a:83:5d:66:be:b6:57:58:14:16:ea:7e:bd:
63:2a:57:d0:af:c3:0f:17:9d:e3:ef:09:b9:38:f4:b7:fe:c4:
32:cf:98:33:fa:f5:23:d8:fb:4c:a0:55:e7:93:4e:53:d0:8b:
02:c3:2d:a5:f6:69:8e:7b:50:38:42:3f:8e:c8:4b:0b:94:79:
3c:73:fd:3b:d9:76:fe:0a:6f:f6:07:ef:a6:b7:50:13:a2:65:
6d:0c:3e:94:3a:91:f5:22:00:7d:2e:8f:ca:2e:96:ff:72:00:
b8:0a:e1:ce:f8:bd:27:97:80:8c:cd:c6:5b:39:a9:5b:c9:3d:
89:ff:fa:2a:09:1a:dd:4e:f4:b8:9c:6b:bc:7b:c1:8b:30:68:
de:fa:67:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:41 2024 by rpki-client on console-fra.rpki-client.org