Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cz4HKxmaBZzsSc0SsNXzAi45EjE.roa
File: Cz4HKxmaBZzsSc0SsNXzAi45EjE.roa (raw, json)
Hash identifier: VL2D0ATFRb71P+mf5jEEvVng3wf8Iw1Hf6zPg31Qb3I=
Subject key identifier: 0B:3E:07:2B:19:9A:05:9C:EC:49:CD:12:B0:D5:F3:02:2E:39:12:31
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B71EB1EA236FF1A3B4E8F2FF4F791B20B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cz4HKxmaBZzsSc0SsNXzAi45EjE.roa
Signing time: Fri 27 Oct 2023 16:15:16 +0000
ROA not before: Fri 27 Oct 2023 16:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 94.198.171.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 13:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:eb:1e:a2:36:ff:1a:3b:4e:8f:2f:f4:f7:91:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 27 16:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3e072b199a059cec49cd12b0d5f3022e391231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:3a:2a:0a:22:74:b1:ef:10:4a:16:cf:be:
47:f8:30:92:27:3f:7a:ba:cb:3d:d6:41:8e:f2:0b:
85:5b:25:0f:5b:0b:4b:5a:2b:8d:ef:fd:8c:51:20:
89:c0:d6:41:2a:b5:55:ab:a1:68:da:27:4b:4c:55:
ca:4f:a0:a6:54:58:e6:45:73:27:48:3d:41:93:07:
3e:15:01:4d:d7:1c:d8:12:43:6f:01:e7:f1:91:ff:
0d:8f:63:93:95:75:94:aa:48:ff:d9:7b:97:e9:72:
d1:a5:ec:82:f3:7f:b2:28:99:c4:40:5d:51:29:2c:
91:32:97:33:d2:ad:ec:ab:0e:3a:f2:71:32:e2:fe:
d4:ed:fa:c5:39:14:48:13:62:18:a9:13:40:96:10:
f2:ad:8c:10:df:47:c9:04:a5:d9:16:30:25:a1:76:
bf:30:09:06:70:4b:c3:cd:41:6b:f4:2a:fc:76:35:
44:ad:c9:32:a4:fe:23:41:5e:9e:1f:b1:9a:dc:7c:
a3:e8:2f:cf:b4:d9:a0:29:ba:80:25:24:a9:34:62:
e7:e9:1b:c9:ae:b4:84:95:cd:3a:eb:d1:33:9e:bb:
e2:5b:7e:ef:67:67:34:30:24:0d:4f:a0:c4:fe:69:
58:8f:f0:ad:a8:a2:6f:75:07:79:94:cf:64:8f:71:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:07:2B:19:9A:05:9C:EC:49:CD:12:B0:D5:F3:02:2E:39:12:31
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cz4HKxmaBZzsSc0SsNXzAi45EjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
94.198.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8b:30:55:66:2f:c7:a2:41:88:31:58:43:fd:53:cc:98:a6:
52:d4:8a:97:b0:b8:3d:c0:d1:b6:4b:22:80:7e:f4:87:a3:c3:
ed:17:0e:20:5b:e9:be:9d:41:5b:df:dc:36:9a:79:21:f3:de:
c3:62:4d:78:98:ee:f5:76:b5:9f:29:39:88:e7:ba:1a:07:d0:
39:c5:bc:19:ea:23:e7:af:62:83:54:f3:79:83:69:85:3a:fc:
04:0d:09:9f:cf:93:f2:ad:8b:c6:32:a6:b1:21:94:f0:53:67:
1f:b3:a8:27:d8:7e:52:3a:d8:ee:fa:fa:d8:0f:f2:e6:34:0c:
47:f3:5b:ac:94:cc:ac:69:48:30:e4:fd:04:86:9b:77:1c:a2:
2d:88:34:47:ad:b7:ae:15:ea:bf:ae:7c:96:f9:4a:d6:25:13:
7c:db:f2:ca:5c:63:32:8c:7d:fc:57:18:aa:e7:3f:a8:7d:b6:
23:11:c7:fe:a0:df:72:6d:d5:f7:82:ab:71:1a:cb:5a:33:61:
40:9b:0d:8b:ad:12:f7:d4:e1:0c:f1:94:bf:26:43:68:61:08:
cf:b4:a2:1e:f2:6c:aa:35:95:52:f4:e3:02:3a:bf:f2:f7:6e:
a6:a1:8b:c6:27:db:f2:56:f5:25:d2:c2:e4:1b:4c:f9:80:f2:
37:ee:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org