Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G8dhVLqyEPDRjz6sDAXBymVvI5o.roa
File: G8dhVLqyEPDRjz6sDAXBymVvI5o.roa (raw, json)
Hash identifier: xYf8Vxd6nXpfOHvzvUFDV7NQ924O5JF8L/Q33gW7ALY=
Subject key identifier: 1B:C7:61:54:BA:B2:10:F0:D1:8F:3E:AC:0C:05:C1:CA:65:6F:23:9A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D22C5E77F307D8156C5A2B3B3858DFBD5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G8dhVLqyEPDRjz6sDAXBymVvI5o.roa
Signing time: Fri 19 Jan 2024 17:30:11 +0000
ROA not before: Fri 19 Jan 2024 17:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 93.90.74.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 14:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:c5:e7:7f:30:7d:81:56:c5:a2:b3:b3:85:8d:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 19 17:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bc76154bab210f0d18f3eac0c05c1ca656f239a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:4a:4f:fe:c1:fa:22:2d:5f:04:44:ef:61:
b9:93:56:dc:28:48:b2:f9:7e:fc:52:df:78:54:dc:
37:33:43:92:68:01:53:2a:ad:24:fc:34:30:55:cb:
b9:c1:e0:a1:ee:e4:63:41:54:0a:31:24:39:3f:22:
8f:16:11:33:73:69:61:de:42:1c:a0:03:3d:b6:f5:
4d:83:3f:bd:77:0d:75:d6:eb:62:59:1a:19:8e:55:
c5:e3:17:13:f1:24:50:7a:92:2e:02:ce:ab:a5:b1:
ff:02:fd:a8:79:ff:7e:8c:37:ae:e0:2a:6b:b1:a8:
79:c8:33:58:05:7a:f2:1c:ec:5f:6b:fa:cf:aa:12:
d0:ce:a7:2f:c3:e8:60:46:46:de:17:ca:be:79:6e:
8f:95:fd:25:44:51:0b:83:fe:6d:4b:4c:b7:18:58:
3a:59:67:0b:ee:f2:07:42:1a:ae:4f:17:bd:66:6c:
ad:32:39:8e:c2:4c:53:e1:8e:ca:51:f5:dc:0c:0d:
2b:3b:ae:38:80:72:d8:c3:39:e7:3a:79:31:84:37:
21:9a:c9:d6:e9:3c:e0:2f:cd:36:6b:2b:e0:ed:39:
31:14:71:24:d0:3c:1f:52:be:0f:3b:58:e6:79:6b:
7a:2f:33:2b:4d:f3:36:48:9a:dc:b6:7c:9f:4b:a5:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:61:54:BA:B2:10:F0:D1:8F:3E:AC:0C:05:C1:CA:65:6F:23:9A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G8dhVLqyEPDRjz6sDAXBymVvI5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
91:35:75:cd:e9:d2:d0:6e:a6:80:c3:c8:0d:9e:d3:c1:ff:49:
05:1f:76:2b:e8:f4:fe:e9:8e:25:1c:6b:46:b0:17:70:02:76:
55:57:b1:ce:77:5b:1d:30:57:bf:69:24:cc:89:4a:d9:92:2c:
84:d7:6c:a4:c5:44:e3:ee:27:dd:c7:36:6f:13:5d:fa:c5:36:
33:ba:69:12:7e:d9:1b:f5:56:09:fb:a8:b2:00:58:d2:78:b2:
1d:7b:22:49:0a:63:e0:51:6e:10:9c:48:f8:3c:97:c4:ed:da:
9a:33:fc:c6:86:ee:63:d5:5d:45:0e:7c:06:76:70:da:c2:74:
1a:37:1e:22:f1:8d:41:04:b6:9a:b8:52:9f:ab:5a:b7:58:9f:
90:90:ae:f0:03:93:43:f4:c5:b0:38:a8:3f:f6:02:df:a3:58:
14:5d:10:82:65:a0:5a:e8:dd:e4:e9:85:1c:91:29:c9:37:2d:
98:28:03:70:4f:b3:b3:67:c4:e2:f9:95:55:e3:d7:81:39:b9:
85:69:0f:57:9c:e8:b4:c4:a9:50:36:de:f2:aa:c3:b0:be:08:
97:93:41:08:48:cb:ea:c9:66:c9:ae:8b:c2:c5:b3:ef:e4:4f:
74:d6:62:cd:cf:6e:54:5d:19:cf:f1:46:ae:c0:d9:87:b2:e6:
b2:55:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org