Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/xWIkFkGXVe4pJR-WnOj6kD4JfWs.roa
File: xWIkFkGXVe4pJR-WnOj6kD4JfWs.roa (raw, json)
Hash identifier: uKH/kh6Oaa6/3qEWbkxBEGoPA/Jorn5o+ueYquJXTio=
Subject key identifier: C5:62:24:16:41:97:55:EE:29:25:1F:96:9C:E8:FA:90:3E:09:7D:6B
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 018C6CE21B1E8BC185D1C1B48CCA7F4BA06B
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/xWIkFkGXVe4pJR-WnOj6kD4JfWs.roa
Signing time: Fri 15 Dec 2023 09:50:06 +0000
ROA not before: Fri 15 Dec 2023 09:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30962
IP address blocks: 93.89.4.0/24 maxlen: 24
93.89.5.0/24 maxlen: 24
93.89.6.0/24 maxlen: 24
93.89.7.0/24 maxlen: 24
2a0b:2300::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:e2:1b:1e:8b:c1:85:d1:c1:b4:8c:ca:7f:4b:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Dec 15 09:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5622416419755ee29251f969ce8fa903e097d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:fd:9b:c3:c1:10:de:5a:c1:ef:e7:a2:a0:
82:3d:c2:fd:af:c4:5f:6b:b0:c5:d2:31:ae:8a:a4:
17:74:2c:73:81:45:4a:43:aa:21:14:27:d4:9f:49:
5b:f0:e7:12:f5:7d:e1:03:5c:f1:3a:45:17:a6:78:
2d:ce:c1:54:dc:05:39:e1:70:a5:69:d1:d0:2c:4f:
51:92:b9:3b:5b:e5:a0:61:1f:ff:a1:64:11:86:50:
0a:da:d1:7d:4f:ed:c6:f4:b2:ca:05:7a:1e:4e:15:
f8:78:e0:f0:0d:5d:4c:b5:7a:e6:bd:a5:72:e7:f9:
82:60:20:cf:1a:6c:9d:b9:6b:dd:c6:a3:8d:4d:39:
40:6d:96:fe:2b:b0:ce:bb:3c:7d:1f:0b:6b:36:b6:
a1:10:af:3e:54:9e:46:59:b1:ec:48:de:80:00:65:
df:1d:82:0b:5c:f0:46:c0:e0:d9:80:4c:9d:46:bd:
a7:e6:f3:61:75:db:c5:e8:66:a9:d8:54:3e:42:89:
5c:94:77:9f:ee:2b:97:f9:97:40:69:97:f0:b6:21:
d2:ec:f3:55:c1:e6:00:42:af:d1:0e:9e:aa:e7:23:
3b:e8:02:00:69:70:3e:31:0d:68:00:14:32:5e:bf:
5e:21:2b:31:be:1b:03:8c:20:10:90:8d:6d:a7:fd:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:24:16:41:97:55:EE:29:25:1F:96:9C:E8:FA:90:3E:09:7D:6B
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/xWIkFkGXVe4pJR-WnOj6kD4JfWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.4.0/22
IPv6:
2a0b:2300::/32
Signature Algorithm: sha256WithRSAEncryption
3f:27:87:04:f8:13:ac:ac:1b:f3:a0:49:df:fd:d9:ac:f3:df:
11:08:bf:45:99:1b:15:8a:36:96:88:f5:4f:ba:c7:09:2c:7a:
21:3e:ac:45:51:67:fb:83:95:2c:c4:45:fc:57:06:a0:f0:02:
7f:d6:2d:b9:1a:55:6d:eb:6e:ce:c6:68:75:a2:45:92:0d:30:
31:fb:c5:37:53:81:9a:f4:f9:fe:25:ca:e0:53:ba:0e:08:3e:
42:a5:a7:ee:5b:4e:1e:3b:cb:82:32:f2:b6:3b:51:c0:18:f4:
3d:e5:fc:4f:62:c4:0a:8a:44:5f:19:47:da:63:74:db:b9:53:
55:4e:40:10:98:4b:3a:21:3e:68:23:c0:64:08:14:9a:7f:0d:
26:9d:57:82:39:24:33:4a:b1:5a:0a:56:51:88:a2:a6:66:df:
23:43:5f:35:5b:f7:bd:97:ae:c6:c2:82:7d:2e:bb:46:52:86:
d4:db:28:ea:d9:dc:ed:69:5f:2d:8f:56:3f:45:ce:a1:34:0a:
bf:53:bb:b9:78:94:5e:82:5c:43:d0:bb:54:f0:6a:2b:2c:15:
11:3e:2d:96:d3:3a:9d:48:9f:37:ac:19:cb:23:2c:4a:37:e8:
48:db:d7:89:33:6c:c4:4c:25:fa:63:e6:14:96:d1:5f:6b:5a:
de:43:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:33 2024 by rpki-client on console-ams.rpki-client.org