Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/W8s7TuZFAR5YNWJs1bio5WEe40E.roa
File: W8s7TuZFAR5YNWJs1bio5WEe40E.roa (raw, json)
Hash identifier: UyK556oWDUgF89OKMEjM7vcw4x7qscD6v9NUdtyGSm8=
Subject key identifier: 5B:CB:3B:4E:E6:45:01:1E:58:35:62:6C:D5:B8:A8:E5:61:1E:E3:41
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D9DEFE7DA5BB37502B3CCD7F8D108F7A2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/W8s7TuZFAR5YNWJs1bio5WEe40E.roa
Signing time: Mon 12 Feb 2024 15:29:21 +0000
ROA not before: Mon 12 Feb 2024 15:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 93.90.74.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:ef:e7:da:5b:b3:75:02:b3:cc:d7:f8:d1:08:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 12 15:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bcb3b4ee645011e5835626cd5b8a8e5611ee341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:ce:65:1e:a1:31:96:c7:8e:0d:5d:5f:55:
a6:7c:77:e0:6e:75:35:5a:82:57:aa:c8:c3:0e:d7:
00:6a:52:ed:f8:55:38:fd:2b:ae:4d:12:a2:aa:c3:
0c:f4:8f:85:b8:f6:f0:76:74:3e:08:36:36:93:10:
59:87:88:9d:54:65:cd:a6:33:b3:ca:6d:5b:58:4d:
98:bf:66:3f:16:26:ee:97:ad:88:cf:41:92:ba:1f:
ac:92:a6:0d:0a:a3:1d:5e:5f:a9:24:fc:98:a0:b3:
4d:69:bb:fd:63:ab:40:d7:67:1c:f3:3f:b0:c5:13:
da:cd:f1:51:47:8d:b0:a1:8a:31:6d:67:ec:9d:40:
70:cc:40:bb:cc:36:88:13:02:86:80:53:63:35:31:
70:be:33:80:00:cd:b8:26:6f:24:46:c3:5a:b0:3f:
4e:bf:1f:99:01:45:b5:07:44:0d:fc:ac:16:f8:c2:
b9:dc:0f:94:8a:5b:88:6e:8b:5b:c6:78:4f:5b:91:
3a:d3:4a:e2:c9:f4:21:d1:1d:8e:b9:3a:41:fc:51:
1c:8e:3f:c2:61:ba:a3:45:cf:95:61:49:7d:4f:ad:
2c:34:8c:89:c9:77:bb:36:71:ca:50:eb:85:2e:94:
b6:81:97:b2:71:13:b6:56:1a:26:0a:2e:5f:77:fa:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:3B:4E:E6:45:01:1E:58:35:62:6C:D5:B8:A8:E5:61:1E:E3:41
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/W8s7TuZFAR5YNWJs1bio5WEe40E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e9:7b:32:de:be:bd:ad:05:87:31:2f:94:36:f1:51:9a:d2:
f3:68:6a:0f:cf:1f:a5:8c:16:92:02:0e:8a:c1:c4:76:05:28:
2a:03:88:25:a5:d0:ad:6e:8f:10:30:44:b8:14:f6:24:00:a3:
0b:a5:9a:96:54:9f:60:4a:41:4b:94:07:2c:55:47:78:0c:a6:
84:df:dc:49:fa:57:b9:55:ed:4c:7d:65:6c:ee:db:0f:c0:35:
c7:06:44:c9:a7:cd:00:b0:68:df:69:20:2f:16:e0:ef:41:f7:
b1:dd:db:f5:7c:43:b4:e2:e1:5b:36:3d:4e:29:81:b1:d9:6d:
2c:00:e5:31:8b:f5:dd:e8:aa:56:6c:d0:05:7a:13:6c:92:55:
cc:86:fc:f3:7f:63:d1:4f:c9:a4:e8:1c:0c:66:77:19:ae:6a:
3f:65:00:89:9e:19:12:52:5e:07:a6:58:d4:f3:f8:de:93:98:
0a:a2:81:d9:a0:0c:10:18:18:32:36:80:76:18:75:33:a8:cc:
a8:9d:cc:0e:7c:1e:98:67:60:c3:5e:f3:61:e6:3d:bd:71:b1:
17:9e:4e:4f:73:e6:00:fe:58:d7:49:96:43:1a:f1:8c:c5:f8:
55:e9:1e:3a:25:56:b2:e9:67:12:89:0b:4e:64:47:9f:05:d2:
50:c4:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org