Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/TDdOxeBMqQVGiJV3wIB_Z5mgmBQ.roa
File: TDdOxeBMqQVGiJV3wIB_Z5mgmBQ.roa (raw, json)
Hash identifier: zTD4DVt6HEsCGboSnBJm4EkvsYKOOvHZLDddgJIXrKo=
Subject key identifier: 4C:37:4E:C5:E0:4C:A9:05:46:88:95:77:C0:80:7F:67:99:A0:98:14
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0186DF4F2F3E182823FE689DD39661761C9D
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/TDdOxeBMqQVGiJV3wIB_Z5mgmBQ.roa
Signing time: Tue 14 Mar 2023 08:49:13 +0000
ROA not before: Tue 14 Mar 2023 08:49:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 93.177.78.0/23 maxlen: 24
185.245.42.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:4f:2f:3e:18:28:23:fe:68:9d:d3:96:61:76:1c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Mar 14 08:49:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c374ec5e04ca90546889577c0807f6799a09814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:c0:e8:a3:45:db:46:f0:ab:f9:88:c2:8d:
71:00:1d:2a:25:ce:1f:c2:ec:32:6b:0c:99:7d:94:
c0:ac:37:c8:75:9a:d1:7f:a5:b4:24:77:e8:78:a1:
80:3c:a7:21:85:25:6e:bf:58:a0:dd:50:e9:6c:07:
e8:34:13:16:85:d6:11:19:1c:d6:f2:b1:c0:8e:89:
15:61:1f:41:8b:d6:b2:62:d8:f7:c3:45:16:78:01:
3c:29:67:c4:f5:22:8c:ee:d0:57:a6:c6:cd:97:1b:
7a:44:8a:e9:44:bc:83:9d:a1:87:14:9a:78:f0:70:
19:a9:34:18:21:5d:35:94:8b:9a:7d:19:ea:86:a0:
79:bc:5d:96:96:5c:f4:11:57:eb:b4:b2:3a:b1:4f:
87:4f:15:48:e0:23:81:8f:04:26:49:6e:3c:d4:ce:
9a:4b:e5:32:cc:c6:26:bd:2d:cc:be:35:ae:f9:4c:
88:d2:a4:6c:1c:ac:f0:4c:31:59:0c:eb:7b:0e:fb:
1a:79:c7:6b:9e:a0:58:6d:46:74:cc:90:e5:68:33:
f6:8b:4b:d7:54:72:d9:c0:ee:5b:42:62:b1:36:9e:
67:2b:88:1e:15:c8:9f:7a:3d:84:8a:0c:e2:6c:39:
c8:54:0e:d9:ab:6b:c1:f8:1b:0a:a6:9d:11:aa:16:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:4E:C5:E0:4C:A9:05:46:88:95:77:C0:80:7F:67:99:A0:98:14
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/TDdOxeBMqQVGiJV3wIB_Z5mgmBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.78.0/23
185.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:1c:85:37:1f:27:99:74:d1:23:6c:25:c3:76:02:d1:e8:35:
5e:d6:7e:91:99:86:b5:22:5d:8d:8d:80:5a:3f:7b:e5:6e:39:
c6:29:31:e1:72:78:35:60:75:18:05:78:0e:c9:ce:61:fb:36:
b3:c8:aa:57:ea:c4:76:de:6f:e1:a2:c7:d0:d9:60:fb:83:54:
b4:33:50:c9:06:99:f1:33:94:c7:f5:70:04:24:70:47:77:9a:
3e:5e:e7:d2:9d:22:6a:67:0c:28:ce:e8:3c:6b:87:e5:ce:cf:
fd:94:db:57:8b:7a:62:99:bf:a3:80:18:b2:0e:5d:0a:68:21:
56:3c:e1:30:a9:2e:39:1f:72:21:c0:dd:30:a1:62:54:21:6a:
a9:85:8e:dd:e4:9b:9d:08:ff:ae:30:c8:12:7c:6b:7f:af:e5:
78:28:3f:a6:04:5f:99:c8:10:9e:ed:da:38:51:4e:76:5b:a0:
29:93:f5:b6:0c:ac:09:e6:8a:93:85:bb:b7:ef:2c:27:12:9b:
9d:53:f8:32:a9:c7:fd:37:44:a4:4f:a9:54:40:9f:8f:df:66:
58:a9:45:da:65:3d:7a:8c:db:70:f8:a8:6d:05:38:76:cd:74:
71:b1:6b:e8:0b:f1:16:1f:cc:ac:19:8a:de:71:12:65:3a:16:
19:6a:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org