Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/9wg-iDhhTt1t1WMbslcQctaRJSo.roa
File: 9wg-iDhhTt1t1WMbslcQctaRJSo.roa (raw, json)
Hash identifier: vaUeIvc0CFfQpfEUZGmURkg9EsKrZaztgC4ubw3AdUQ=
Subject key identifier: F7:08:3E:88:38:61:4E:DD:6D:D5:63:1B:B2:57:10:72:D6:91:25:2A
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018F2DFEB1580ED0D97F0273CAE0CD527FA3
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/9wg-iDhhTt1t1WMbslcQctaRJSo.roa
Signing time: Tue 30 Apr 2024 07:53:37 +0000
ROA not before: Tue 30 Apr 2024 07:53:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
89.28.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 07:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:fe:b1:58:0e:d0:d9:7f:02:73:ca:e0:cd:52:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Apr 30 07:53:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7083e8838614edd6dd5631bb2571072d691252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:d5:77:b0:e5:00:ba:4c:82:5f:a5:8b:49:
9a:84:eb:94:17:42:38:8b:0e:35:f1:57:6c:34:70:
ed:4d:d1:6c:b9:c9:cf:a8:ad:a4:b8:9c:d5:00:59:
56:51:60:7a:f9:ea:35:28:20:7a:99:55:11:94:1b:
c3:d5:52:79:6e:c9:bb:33:e5:37:cf:dc:58:70:26:
d2:75:8e:2a:62:e7:79:38:60:21:d0:6f:ed:95:93:
42:ce:6e:2b:7a:91:6a:bc:9a:37:3f:7f:32:2a:09:
ed:6a:50:ba:20:01:dc:4e:16:b5:f0:83:a6:79:75:
b6:89:4a:42:a9:4d:30:bf:0f:01:a7:05:13:e3:1e:
4b:a9:07:57:91:4f:ac:fa:50:af:18:aa:75:25:d5:
15:02:83:11:9a:b0:d9:dc:0c:12:b5:3a:bb:3d:89:
ad:c1:43:90:04:f9:e0:5e:32:02:09:5e:bf:e7:02:
59:4e:0b:ff:4c:13:3c:19:04:bb:3e:43:22:ca:44:
4a:1a:18:f1:47:03:83:e4:83:2a:76:45:d2:d4:2a:
b9:d8:d1:5d:08:e0:0b:65:67:ab:19:4f:aa:52:bd:
eb:20:11:dd:c8:8b:81:ca:04:cb:88:fd:29:ef:1b:
83:83:15:a5:67:71:76:74:2a:f6:14:f2:f5:a9:9f:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:3E:88:38:61:4E:DD:6D:D5:63:1B:B2:57:10:72:D6:91:25:2A
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/9wg-iDhhTt1t1WMbslcQctaRJSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
89.28.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:39:65:bf:6b:cb:0c:dc:a7:e2:5f:df:88:a6:e0:40:29:7a:
4c:c9:8c:70:ba:fc:d3:9c:09:94:7b:da:eb:5d:0b:0a:6a:7f:
52:44:60:89:0c:c4:be:7e:a0:40:9e:0b:65:b7:bc:18:b5:8f:
91:42:90:f6:6a:aa:d1:47:92:1b:66:31:69:c8:fb:03:ce:2f:
0a:7a:e1:c4:7c:12:c9:ad:7f:6c:f6:b6:0e:d3:15:ac:7a:f3:
0b:11:98:0b:c9:7f:4d:70:cf:49:6c:dd:e5:98:0c:d7:40:c4:
80:0a:ee:03:5f:5e:39:6d:95:19:17:34:ea:c4:f7:5e:9c:5e:
8b:fe:1f:f0:57:51:b8:46:98:1a:b5:ef:69:61:fa:92:ad:01:
89:3d:d9:2f:2a:18:a3:4e:8c:5c:8b:11:2a:c4:2f:3f:fe:84:
8b:6f:58:db:df:2d:d4:ff:77:cd:92:46:ef:37:66:f3:82:3a:
e9:d5:b0:4c:c3:e2:6a:b8:11:d0:3d:81:04:38:9e:32:36:5c:
ef:b1:d7:23:20:e9:3a:03:2f:bb:7a:3e:cc:a7:b4:bf:f1:f1:
1a:c7:da:97:11:f4:4b:9d:c6:cd:93:b1:8d:91:1e:4b:24:51:
95:08:3e:23:47:8b:4b:69:f1:60:6f:84:6c:ab:21:9b:51:28:
44:3a:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:31:44 2024 by rpki-client on console-ams.rpki-client.org