Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/weAT34PbRLbmu12PwrAJplN0JEI.roa
File: weAT34PbRLbmu12PwrAJplN0JEI.roa (raw, json)
Hash identifier: HgaKDqGUgpdkNO0B8n08+IPwXF6h4f6CgGv5BsJ49CE=
Subject key identifier: C1:E0:13:DF:83:DB:44:B6:E6:BB:5D:8F:C2:B0:09:A6:53:74:24:42
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BA90A2BC242713528B7E0A95D817F59A6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/weAT34PbRLbmu12PwrAJplN0JEI.roa
Signing time: Tue 07 Nov 2023 09:08:17 +0000
ROA not before: Tue 07 Nov 2023 09:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 94.177.150.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 09:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:0a:2b:c2:42:71:35:28:b7:e0:a9:5d:81:7f:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 7 09:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1e013df83db44b6e6bb5d8fc2b009a653742442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:a1:fe:ef:aa:ef:4d:02:85:eb:63:8f:59:
f5:1b:ad:c4:63:0d:ff:ce:0e:b5:02:a8:98:fa:4e:
05:c8:3d:3b:02:d9:7f:5a:e3:7f:5c:bf:01:0f:92:
d9:5e:60:7d:84:c3:83:00:8e:29:e0:d1:e1:74:f7:
0f:8d:ed:56:77:08:df:47:7d:ca:78:5c:d6:e7:67:
25:50:f0:92:0c:cf:7f:25:00:56:b3:2f:c5:a0:8d:
a6:2a:d2:75:66:68:2e:52:40:a1:73:37:00:3b:95:
52:e9:6b:b3:bb:0f:1a:e4:00:92:ca:51:53:51:74:
66:a1:7f:91:d6:8c:f5:92:08:26:c5:a9:88:13:0b:
35:91:78:a8:cb:3b:ae:0b:26:af:32:22:c0:b4:1e:
e0:cd:c3:bd:b1:75:c8:9a:e1:c4:f4:23:3c:be:ce:
d2:57:8d:b0:34:e7:09:b9:14:b9:2c:73:04:42:36:
a3:69:d7:65:72:27:59:bf:08:3e:01:83:51:b7:01:
2e:7a:c8:80:20:33:63:56:22:3f:50:b0:42:27:de:
f8:6e:1f:ea:1f:83:ab:62:12:e2:7e:2e:3b:da:24:
f4:f9:d5:f0:37:23:b0:f9:a6:8f:57:63:c8:a0:8e:
22:0f:51:a2:cd:fe:4b:53:1e:ff:c5:78:9c:82:70:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:13:DF:83:DB:44:B6:E6:BB:5D:8F:C2:B0:09:A6:53:74:24:42
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/weAT34PbRLbmu12PwrAJplN0JEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
94.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
63:81:9c:62:c2:c7:0b:b3:f8:c3:1e:c1:0e:bb:87:31:93:db:
86:60:ec:61:ea:50:71:3f:ea:3f:5f:c8:ff:da:8b:58:8a:d4:
4e:b3:8c:b5:05:f9:44:e2:ee:5a:6e:5e:4b:15:49:f0:e2:ff:
80:61:de:83:10:8b:34:3a:5a:2b:b5:31:da:29:ce:7d:05:2e:
88:07:66:81:f8:00:44:4e:3a:d9:7a:7d:9b:34:6b:b3:16:36:
e1:16:8f:be:65:15:e5:17:76:3d:68:40:cf:06:3d:52:5f:e3:
d6:30:d5:fa:ee:2b:b1:db:8d:a7:94:ca:09:b7:f1:43:95:61:
dd:44:e8:bf:6f:b2:ff:ee:55:e8:e8:34:79:d8:be:93:61:6b:
68:7c:d7:d1:c7:01:05:af:f3:ef:7b:9c:97:eb:95:2a:d8:b8:
98:d5:7b:b1:cd:8d:6d:46:01:f4:5d:8a:59:ef:95:77:c8:86:
13:5a:27:09:e9:68:61:58:9d:15:d9:da:c3:a0:a8:0a:26:df:
46:9b:ea:88:31:68:82:44:04:5c:a9:b4:2e:a9:49:39:cc:44:
ad:41:3a:61:7a:9c:8c:f7:95:b4:35:7f:08:db:49:56:02:2c:
95:84:89:d3:49:53:d9:2f:9d:6d:49:1d:a3:2e:f3:ee:49:b9:
52:17:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org