Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/5I_vR92a0rVw85dEwUrhBvQj5WU.roa
File: 5I_vR92a0rVw85dEwUrhBvQj5WU.roa (raw, json)
Hash identifier: XnJdlZR9riWyqw35j4vWhQchglQue6iMkybKXm8dqF4=
Subject key identifier: E4:8F:EF:47:DD:9A:D2:B5:70:F3:97:44:C1:4A:E1:06:F4:23:E5:65
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 018BCDE4E332559AD7912DC4762AAD60B912
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/5I_vR92a0rVw85dEwUrhBvQj5WU.roa
Signing time: Tue 14 Nov 2023 12:53:31 +0000
ROA not before: Tue 14 Nov 2023 12:53:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43905
IP address blocks: 93.91.96.0/21 maxlen: 21
185.85.130.0/23 maxlen: 23
213.234.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:e4:e3:32:55:9a:d7:91:2d:c4:76:2a:ad:60:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Nov 14 12:53:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e48fef47dd9ad2b570f39744c14ae106f423e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:5c:03:72:1a:c2:e9:ea:11:60:86:5d:9e:
86:1a:b6:bf:3c:e5:4c:77:57:2b:43:09:20:e9:e1:
41:9f:6e:b5:10:01:85:cd:00:7e:1c:b1:29:e7:c5:
df:ad:a7:df:d4:6c:1d:56:e9:99:54:1f:c0:68:33:
d1:d2:96:30:47:a8:f5:91:a4:60:2e:70:a4:50:f8:
24:b9:02:6e:06:45:84:4f:51:a9:c8:6f:06:c3:fc:
59:20:c2:77:7f:96:47:a6:04:85:d5:b4:2d:ba:19:
32:17:23:7f:76:a4:ce:ef:6d:f2:3f:15:ea:c8:bc:
49:10:51:26:2c:34:bc:7a:07:49:e6:74:fb:17:06:
61:7b:4c:d8:e7:d4:f8:95:c5:cd:fb:ea:56:36:ff:
40:a1:f5:db:31:55:99:68:c0:2e:07:e8:c1:7b:ae:
09:b8:5c:bf:a3:e6:d5:39:c0:6a:0d:ea:85:43:62:
31:fe:a4:48:67:00:fe:2e:df:7f:6f:b5:c7:30:ac:
d4:46:3a:2d:ea:7b:52:38:f4:d0:f3:c3:ba:bb:f8:
b1:a2:b7:32:16:67:58:c7:a3:d9:3d:99:75:bf:e0:
c5:4d:e9:c9:7a:67:3e:93:33:d7:c9:88:e7:af:a3:
c3:c5:76:9f:ab:b4:41:3d:35:ca:a9:1c:09:35:fd:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8F:EF:47:DD:9A:D2:B5:70:F3:97:44:C1:4A:E1:06:F4:23:E5:65
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/5I_vR92a0rVw85dEwUrhBvQj5WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.96.0/21
185.85.130.0/23
213.234.64.0/18
Signature Algorithm: sha256WithRSAEncryption
67:48:5a:0f:e8:22:77:05:51:01:74:72:bb:b0:6a:dd:f7:39:
b2:19:66:f6:d8:6d:2d:4d:5d:6b:df:6c:df:52:b8:43:2a:97:
e0:54:e3:01:78:8e:95:8a:01:e7:8c:89:6d:42:f4:9f:07:19:
e1:aa:87:80:0b:86:39:cc:a0:d2:19:fc:5d:65:33:e3:4c:71:
4c:b2:fa:e6:04:f3:f7:ef:49:04:a9:85:15:95:9e:ab:9c:f1:
0e:6b:08:3f:ef:2d:a1:23:60:5d:51:65:b3:8b:5e:2c:bd:5a:
dc:c4:33:e1:a4:d8:c0:21:c1:83:21:f9:0f:d8:6c:cf:8c:88:
e5:60:34:5d:4c:69:6e:25:40:0c:d6:84:c7:46:a0:80:40:d5:
a3:d1:32:89:39:9e:6f:4a:3e:c5:15:f7:8e:08:c1:42:2a:77:
2a:c6:19:2a:49:2e:1f:19:2a:66:da:e4:e1:c2:a2:8b:97:20:
e0:7c:a1:cd:1b:34:29:e4:5a:71:1b:d7:e3:8b:8d:b7:5d:0e:
a4:f2:b1:18:3d:d2:a1:62:3c:42:44:9c:c8:ed:fb:df:60:a8:
c9:2d:00:5c:96:09:a3:96:17:90:4d:2e:98:55:8a:c2:fa:47:
f4:70:86:d5:32:6b:36:71:a7:c2:ee:3b:3e:94:a9:47:50:22:
e6:c6:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:00 2024 by rpki-client on console-ams.rpki-client.org