Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/w1VVddd7IFOqDPZleE-Af1jAk9I.roa
File: w1VVddd7IFOqDPZleE-Af1jAk9I.roa (raw, json)
Hash identifier: TXqXhTYuN3vWDXXKp3Vb+chyfjWauKsqGFhgmxA8FCI=
Subject key identifier: C3:55:55:75:D7:7B:20:53:AA:0C:F6:65:78:4F:80:7F:58:C0:93:D2
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0186EB163E5B4DE274D186057A272C9A3728
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/w1VVddd7IFOqDPZleE-Af1jAk9I.roa
Signing time: Thu 16 Mar 2023 15:42:28 +0000
ROA not before: Thu 16 Mar 2023 15:42:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 139.28.226.0/24 maxlen: 24
194.93.32.0/24 maxlen: 24
194.93.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:16:3e:5b:4d:e2:74:d1:86:05:7a:27:2c:9a:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Mar 16 15:42:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3555575d77b2053aa0cf665784f807f58c093d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:e1:b9:ed:f1:2d:08:36:25:67:90:82:88:
42:2c:81:25:e7:9d:61:a7:df:82:5b:6f:29:8c:2b:
4b:15:96:58:0a:ae:b6:12:29:03:0b:4f:89:5a:26:
99:a6:2b:2a:e5:c6:88:d3:b9:f3:58:18:c8:ba:52:
35:cd:51:8c:4f:f1:9b:29:f4:3e:9d:f7:1f:a1:76:
a5:c9:62:36:d4:9b:08:65:5b:9f:0c:ef:66:8a:b5:
7f:1f:c4:6e:9d:76:5e:0c:d4:e5:49:70:c4:d0:74:
25:91:a3:8e:c8:fd:d1:d7:e0:13:6a:78:c8:9a:35:
a2:29:f9:47:19:c9:14:3d:e2:c7:36:a8:46:77:9d:
82:c7:b9:08:85:00:3e:b3:de:1a:5f:b5:44:66:fb:
46:c1:0e:02:aa:74:e0:f6:ad:f6:f9:c7:b4:59:0c:
c7:24:6f:4d:11:05:43:8b:1e:d9:43:f2:10:87:f8:
2c:4a:cd:7b:30:05:46:b8:25:7c:83:9d:8c:c3:b1:
f6:e9:c1:2f:77:f3:15:d4:d8:a4:d5:e1:1b:8d:38:
a9:86:58:5e:14:54:b0:45:cb:b2:e2:94:50:39:ae:
2a:ea:87:a9:7c:c9:6e:f1:4d:d5:ae:e9:1d:f5:b5:
ba:47:89:cd:34:55:0f:cb:57:43:ae:94:3b:73:15:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:55:75:D7:7B:20:53:AA:0C:F6:65:78:4F:80:7F:58:C0:93:D2
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/w1VVddd7IFOqDPZleE-Af1jAk9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.226.0/24
194.93.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:45:36:bf:83:93:2b:b0:a7:94:0a:09:99:4e:96:20:2f:10:
1b:d0:ef:89:8e:d4:4c:10:27:a7:49:3e:2f:b1:42:29:42:ce:
e7:9f:ca:bf:13:63:b8:e6:ca:bc:29:1e:31:1f:e9:fb:e2:e6:
33:a2:59:6d:08:44:98:a8:d4:3f:47:00:f3:dd:fd:96:31:75:
07:67:34:81:80:41:09:31:62:3a:e8:2a:41:e5:e7:55:d3:66:
39:dd:24:0a:f2:40:ce:25:25:a9:62:73:14:f8:f6:cb:85:9c:
b6:c2:a1:c2:fd:cd:d2:6c:9d:17:f4:61:2f:a7:fb:7b:15:d1:
77:e8:61:dc:bb:c5:03:fd:d4:dc:bb:57:e3:42:ca:8e:fa:32:
ab:8b:9e:a5:ba:76:fc:a4:b5:09:69:5e:57:6b:97:c6:72:10:
49:6f:5c:6a:d0:35:eb:82:9f:9f:46:04:59:5b:b8:b1:18:b0:
a3:de:e6:60:db:be:ea:2d:f6:21:e2:9e:bd:b4:52:d7:71:40:
3a:74:dc:11:60:9f:4e:79:de:3a:0d:75:d3:db:3c:83:2d:f5:
b5:c5:fa:c3:cf:7b:54:76:14:9d:ae:5e:fa:63:07:2d:5e:34:
45:f1:bd:21:bc:3b:2d:ec:ed:f0:e3:dc:fe:21:78:f6:50:43:
aa:d8:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org