Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wYg0IeiKmXdwTcEMMNNMUCZlmJA.roa
File: wYg0IeiKmXdwTcEMMNNMUCZlmJA.roa (raw, json)
Hash identifier: jE5LMakivMIAhOzvFIEo4br+TNBJBbU9M/hw/PsM3LU=
Subject key identifier: C1:88:34:21:E8:8A:99:77:70:4D:C1:0C:30:D3:4C:50:26:65:98:90
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01881EFD3065E2C3D9257CD6258F594EB2FF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wYg0IeiKmXdwTcEMMNNMUCZlmJA.roa
Signing time: Mon 15 May 2023 10:38:09 +0000
ROA not before: Mon 15 May 2023 10:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 92.114.32.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 13:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:fd:30:65:e2:c3:d9:25:7c:d6:25:8f:59:4e:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 15 10:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1883421e88a9977704dc10c30d34c5026659890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:e8:91:a3:c9:14:55:b2:0a:d4:84:9c:96:
3b:19:0b:9b:c8:1b:c9:00:f4:0d:04:a4:51:12:12:
6f:8f:0b:5b:e6:0e:f8:1c:65:7c:12:a1:30:93:b0:
d1:26:8d:d2:8f:45:b5:54:d8:ed:40:bc:b8:c9:c5:
b7:d3:02:f4:5a:dd:08:b3:a7:43:94:5c:4b:bc:8d:
31:2d:bc:7b:74:93:0d:de:bd:e2:b8:1c:c7:e5:b4:
18:3a:f0:56:75:35:e9:c2:07:01:6a:87:a1:59:e5:
92:eb:5b:90:12:e1:fb:f2:0b:66:f1:59:88:b1:35:
25:73:7a:19:ca:f6:ae:a2:84:aa:14:a9:59:8d:c6:
90:c7:16:cb:3d:1b:6f:7f:e3:75:11:66:71:70:96:
9f:e3:8b:91:f7:58:6a:0d:97:fe:db:ec:20:d5:b0:
17:5d:2a:81:59:b3:6a:9f:3e:f8:8e:dc:02:42:18:
e9:aa:34:59:25:9d:06:e9:59:6b:3c:f4:52:b8:3a:
04:51:0f:a1:2e:18:78:f3:27:15:75:f0:d5:c7:3f:
85:aa:0e:b4:8d:d2:8e:85:ea:50:29:81:20:b5:80:
61:9b:99:ec:ef:00:4d:09:ed:fe:5c:e9:f3:c1:6e:
18:d2:cd:6f:5f:79:8d:a9:2a:89:b8:97:c0:2f:48:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:34:21:E8:8A:99:77:70:4D:C1:0C:30:D3:4C:50:26:65:98:90
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wYg0IeiKmXdwTcEMMNNMUCZlmJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e7:69:a3:1e:1c:c7:92:41:e2:9d:60:66:8a:61:6c:79:8a:
74:b7:c1:3c:63:a8:6b:87:a0:3b:f7:41:22:18:c5:99:7c:37:
5a:e9:e0:91:83:2d:7e:0b:9b:46:fd:71:9a:41:72:14:ba:0c:
45:0c:13:40:2a:9a:b5:f1:1b:68:b1:38:f5:0a:69:95:8e:89:
66:e9:07:25:58:4a:27:5f:46:3c:e5:80:a7:23:3a:fd:dc:15:
da:0a:67:20:34:f7:10:f6:4e:86:da:3d:89:f7:b7:f5:32:d2:
a1:c1:84:84:b2:d0:56:be:21:ed:2f:fb:84:09:74:72:28:a9:
a3:de:dc:6f:54:f1:11:f6:39:4f:a1:18:bb:a7:8f:f4:e9:0f:
89:94:5c:a0:67:a6:cb:10:91:e2:19:37:19:32:10:54:8f:9c:
07:83:ff:0e:ff:e6:59:33:e5:fd:35:dc:28:f4:ba:99:a9:80:
c0:d3:b8:59:2e:b2:d4:a5:af:13:f8:76:82:88:bc:f7:6f:ab:
98:ea:70:d7:55:b5:1a:b1:64:e8:9b:55:ac:fd:91:42:84:ff:
87:14:45:b2:84:43:ba:d8:e6:9d:2c:30:10:70:16:34:7b:b1:
c5:42:29:fd:40:44:d4:bd:65:8e:88:52:d3:41:b9:95:cf:65:
5d:ee:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org