Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/WMvTZ_kYnINMZu1AHSNdBVV1G40.roa
File: WMvTZ_kYnINMZu1AHSNdBVV1G40.roa (raw, json)
Hash identifier: UJQDZwB5lYOUdMoc4T67zZAUmdzYoQJkqybpHW0fMW4=
Subject key identifier: 58:CB:D3:67:F9:18:9C:83:4C:66:ED:40:1D:23:5D:05:55:75:1B:8D
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 01856F3937E6AC4CF700A00CCBF5C75A81AF
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/WMvTZ_kYnINMZu1AHSNdBVV1G40.roa
Signing time: Sun 01 Jan 2023 21:24:58 +0000
ROA not before: Sun 01 Jan 2023 21:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12773
IP address blocks: 93.157.12.0/24 maxlen: 24
93.157.15.0/24 maxlen: 24
93.157.14.0/24 maxlen: 24
193.254.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 10 Jan 2023 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:37:e6:ac:4c:f7:00:a0:0c:cb:f5:c7:5a:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jan 1 21:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58cbd367f9189c834c66ed401d235d0555751b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:c5:fc:9b:fc:dc:e3:0f:d6:a6:12:60:9e:
70:b2:c1:8f:3e:21:27:0b:f3:33:05:b3:94:01:8b:
96:9a:23:57:d9:f7:30:45:24:a5:dd:6a:0b:9e:49:
17:be:7a:c2:eb:fd:fd:ed:e3:7e:18:f4:7f:4f:56:
44:4c:42:f3:72:22:51:ee:a1:48:8a:2e:4d:41:a4:
42:a0:62:19:24:e9:49:63:18:16:8e:c8:d1:f0:03:
d1:0c:22:8f:19:25:2f:1a:c2:58:60:91:44:c7:fe:
04:56:56:f5:c3:e3:49:ca:0b:9e:20:65:1a:9d:6c:
5b:3a:55:e2:97:bb:1a:a6:70:f0:98:cf:f6:d6:e9:
08:87:38:85:a8:6c:f1:55:4b:56:23:e5:f3:98:59:
f2:b4:88:0c:d6:5f:99:d0:a6:63:26:a7:92:7c:8d:
72:07:dc:b3:7c:d7:4e:16:51:ad:88:66:1f:1d:2a:
b0:19:4d:45:b6:43:16:63:68:8a:f2:3e:9b:b5:7a:
7e:4e:03:6c:62:b4:21:5f:4a:d3:f0:6a:38:2c:81:
50:7a:e5:03:bd:59:10:69:ff:9e:dd:04:fe:26:44:
97:e1:a6:ac:3f:f8:91:ae:39:01:65:6d:0a:a8:b2:
b2:c5:0a:94:5f:49:f2:7b:f2:f4:cd:60:b1:fe:a2:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:D3:67:F9:18:9C:83:4C:66:ED:40:1D:23:5D:05:55:75:1B:8D
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/WMvTZ_kYnINMZu1AHSNdBVV1G40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.12.0/24
93.157.14.0/23
193.254.232.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:be:08:87:2a:78:71:f1:02:be:e4:40:03:4d:35:63:66:4a:
5f:db:ae:05:85:ae:cb:c2:b5:ff:da:75:fc:c6:f2:a8:75:09:
72:1f:67:ee:6b:cc:c4:3a:5b:d5:10:13:fd:0c:9d:0d:d8:36:
50:16:55:66:7e:87:ac:91:4b:47:89:25:1a:38:7a:1a:27:0c:
7a:ae:55:b7:35:c1:3e:a2:30:ba:b9:a7:52:c4:6f:da:65:a8:
80:ec:7e:bf:01:35:06:03:34:68:04:23:c5:48:7e:f2:be:34:
c8:ae:76:60:04:fa:a9:f0:b5:ec:13:e2:cf:ce:c6:a1:ac:48:
b1:a1:98:63:ae:8f:03:3f:70:44:a8:9c:66:dc:04:a1:d3:a2:
4b:16:47:85:f6:4d:22:70:fd:c6:c2:cb:be:b4:76:36:97:aa:
30:dc:47:cc:90:b2:8c:99:25:e1:bb:e1:e1:15:aa:6d:14:48:
d9:fb:1b:91:cc:9a:17:09:13:5a:95:ab:19:bd:7b:99:b1:d5:
72:17:ee:72:10:d7:af:2d:a2:5d:f0:c1:d1:fe:33:02:51:e4:
1b:5a:b5:0f:23:91:aa:b6:5b:1b:69:e1:e0:d5:df:96:5f:7c:
4f:d0:a1:11:10:64:22:25:0f:c4:48:34:eb:d0:e7:41:71:4b:
21:b2:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:19 2024 by rpki-client on console-fra.rpki-client.org