Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wZpYvNlqMyzyAmiYidB6Zq1oKmE.roa
File: wZpYvNlqMyzyAmiYidB6Zq1oKmE.roa (raw, json)
Hash identifier: moTMj4F4k6xsFXz1t/++PPZBzrsTlPjqUUqiTs1K//M=
Subject key identifier: C1:9A:58:BC:D9:6A:33:2C:F2:02:68:98:89:D0:7A:66:AD:68:2A:61
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FA3FB5AE9E3AE824F4079C157860194CA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wZpYvNlqMyzyAmiYidB6Zq1oKmE.roa
Signing time: Thu 23 May 2024 05:45:10 +0000
ROA not before: Thu 23 May 2024 05:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
188.208.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 04:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a3:fb:5a:e9:e3:ae:82:4f:40:79:c1:57:86:01:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 23 05:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c19a58bcd96a332cf202689889d07a66ad682a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:c7:7f:df:19:d1:cf:da:a0:ff:2d:3d:b8:
af:35:56:07:6c:b6:3b:2c:f1:74:c4:74:89:ab:6f:
2c:a2:d8:73:1c:25:28:5c:ac:72:ce:ec:09:80:40:
24:a4:31:2d:b4:e4:61:07:16:2f:da:73:c2:70:50:
3b:81:f2:07:8c:16:92:54:65:45:52:00:8c:f3:65:
cc:d5:7c:39:ee:68:e0:8e:1b:87:66:13:b8:eb:1a:
21:2d:b2:20:7d:e8:e5:bf:01:86:b3:07:be:6f:e1:
2c:87:2f:58:49:9a:6c:cc:a2:49:a5:1d:75:a2:f3:
35:3c:2a:c0:91:7d:b2:d7:68:fb:19:42:84:12:3b:
c5:c0:48:eb:6b:a9:d7:3a:bc:be:61:69:a6:95:5f:
3c:39:56:6d:db:40:15:8f:55:81:cb:9b:9d:8a:56:
7f:1c:fb:39:07:f5:8a:01:dd:7b:95:7c:bb:98:8a:
e7:ad:b2:a0:67:19:cd:44:67:a2:80:34:05:bd:29:
62:4b:ed:60:ca:6c:01:50:c6:92:88:31:63:cc:8c:
58:4d:b7:89:60:23:2d:b6:42:ec:81:63:3e:d4:0a:
85:82:5f:9e:74:ac:4c:fc:a9:d6:8c:67:b3:f8:66:
33:03:52:97:62:4c:31:6c:f2:60:4b:83:e6:5c:6d:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:58:BC:D9:6A:33:2C:F2:02:68:98:89:D0:7A:66:AD:68:2A:61
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wZpYvNlqMyzyAmiYidB6Zq1oKmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.54.0/24
93.113.171.0/24
188.208.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:54:f5:db:a4:03:87:f6:38:ad:f4:a0:3d:e5:66:78:e1:88:
a7:03:5b:1f:92:0f:91:0b:62:0a:a7:ae:29:15:8e:20:1a:85:
7c:41:3f:b1:5c:25:07:19:2f:65:a9:57:67:ab:eb:1f:9c:f6:
45:01:3e:b8:d0:17:b2:25:f1:8c:60:e2:e3:a6:14:f7:a2:84:
a3:d0:63:e9:e7:a4:4d:55:15:50:15:41:d0:08:97:60:66:29:
ae:24:92:b2:d7:98:97:a3:b0:3b:33:d0:a7:fb:be:3f:74:1d:
5b:16:db:f0:b5:94:fa:f8:49:b7:7d:f2:43:a1:fa:e6:d4:d1:
d9:1d:22:89:ed:cf:66:46:9f:a6:32:f5:b1:9d:9a:4c:85:39:
a0:22:7e:10:f4:67:95:45:16:7b:09:e1:c6:73:5b:4a:63:2d:
b7:39:63:4a:61:c7:36:f1:7e:bc:da:0d:aa:18:f3:0d:ba:61:
8a:31:f6:9d:cf:24:ac:f4:a9:2d:78:01:a3:d1:24:f6:1b:c1:
37:f0:e7:36:2d:59:03:fc:e0:12:fe:dc:8a:64:de:8c:68:68:
6f:26:31:7a:1c:00:7b:1d:57:0b:d4:ab:37:07:93:fd:2c:96:
98:15:4b:16:fa:fc:8c:b4:49:67:13:a2:6b:e4:9d:c4:d1:3c:
c1:bb:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:43:52 2024 by rpki-client on console-ams.rpki-client.org