Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/wy5zL8l-mJ1bCAhWWwgljpWBLnU.roa
File: wy5zL8l-mJ1bCAhWWwgljpWBLnU.roa (raw, json)
Hash identifier: JGva6fDzqgPX7qqeDzeJeVf1CicSKoOuz4/LGOdED9s=
Subject key identifier: C3:2E:73:2F:C9:7E:98:9D:5B:08:08:56:5B:08:25:8E:95:81:2E:75
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 01857295C80B7E0E039846DF758A953C0ED5
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/wy5zL8l-mJ1bCAhWWwgljpWBLnU.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25091
IP address blocks: 94.158.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c8:0b:7e:0e:03:98:46:df:75:8a:95:3c:0e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c32e732fc97e989d5b0808565b08258e95812e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:4b:a1:90:3f:3a:6c:09:bf:c8:21:97:aa:
7c:00:7c:a0:74:74:ef:86:2d:47:3b:9b:4b:5e:99:
ff:ff:e4:3f:44:e2:cb:50:44:c5:f6:9f:c2:5f:c8:
da:2b:17:bb:5c:6b:c8:1f:85:6b:fa:d5:7f:c6:91:
58:ac:8b:24:ab:4c:ad:3e:5b:72:65:5e:04:41:f2:
35:5c:ee:2e:27:0e:53:50:fe:85:33:05:32:f4:d5:
20:8c:90:1c:a4:78:1a:f9:cd:f3:42:49:89:b3:4b:
c1:be:c2:c0:89:b4:05:3d:ad:b5:77:81:e0:ba:5e:
92:97:26:b5:6d:4a:da:e6:c0:0f:d9:ca:dc:50:77:
27:60:a3:6f:71:65:a1:b6:3f:60:24:b1:33:cf:c7:
31:34:a7:d2:15:d9:c3:2b:34:39:dc:2b:c8:20:57:
ca:b4:94:57:38:11:12:a8:85:37:84:e2:8c:f6:80:
c0:be:ee:47:cc:a9:61:9f:24:d6:89:50:29:dd:ce:
7c:c2:0d:23:e1:bf:6a:99:f6:90:c4:f0:18:58:c7:
db:eb:b5:17:4d:d7:5c:00:bb:88:7f:f3:0d:bb:10:
69:e1:4e:b5:55:1f:6c:de:d9:d2:60:e4:41:6a:93:
ca:4d:bb:0b:8e:50:fc:05:6e:a8:c1:42:59:fd:6a:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:73:2F:C9:7E:98:9D:5B:08:08:56:5B:08:25:8E:95:81:2E:75
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/wy5zL8l-mJ1bCAhWWwgljpWBLnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.28.0/22
Signature Algorithm: sha256WithRSAEncryption
88:17:f8:81:c4:30:b0:45:e7:82:b1:7c:53:ab:30:7a:35:14:
eb:65:1a:52:48:26:2b:91:0c:ca:ec:3b:58:bc:c4:c1:4e:2c:
e3:d6:ab:8e:37:cc:29:9e:fa:da:0d:21:94:cb:0a:b7:a2:82:
85:44:6c:22:4e:2c:9a:90:ce:53:a5:aa:79:a6:4c:3a:42:04:
69:6e:43:38:15:50:62:39:bc:cb:ad:1b:9f:e5:1a:8b:6f:3c:
19:db:c9:2b:af:bc:8f:3c:ed:7e:78:b2:d3:8e:fb:27:f0:07:
3c:99:f6:27:88:72:a4:ff:ea:45:dd:d5:53:86:5b:d0:cf:76:
ad:0a:dd:b6:78:07:de:21:4a:16:d5:8e:51:03:15:11:25:c0:
70:3b:da:e2:fb:3f:6c:e1:5e:af:12:36:61:8c:41:2c:e9:93:
1d:a8:60:0c:a4:7e:ad:bc:54:e4:d2:5f:41:50:66:af:73:54:
97:9f:22:2a:59:1e:62:49:62:93:1b:dc:82:70:d6:9e:74:4b:
69:a2:4d:cf:56:04:fd:2c:ff:65:e2:81:65:38:d2:97:99:20:
d3:2e:47:dd:0b:57:45:75:cf:2f:55:5f:22:e8:cf:5b:b6:89:
ff:5a:68:0e:e1:7b:b5:ef:59:2a:cf:57:a9:a4:bd:d4:0a:1c:
51:6c:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:37 2024 by rpki-client on console-fra.rpki-client.org