Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/wUDidKbUHVK2nBHbohnCgaz_f6w.roa
File: wUDidKbUHVK2nBHbohnCgaz_f6w.roa (raw, json)
Hash identifier: 15tpuKShirus5IlR9jWL9NWf/Hna3hN09GPKMqQd3H8=
Subject key identifier: C1:40:E2:74:A6:D4:1D:52:B6:9C:11:DB:A2:19:C2:81:AC:FF:7F:AC
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 0188C58A568861ACF83E045874DD32508E9C
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/wUDidKbUHVK2nBHbohnCgaz_f6w.roa
Signing time: Fri 16 Jun 2023 18:49:17 +0000
ROA not before: Fri 16 Jun 2023 18:49:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21276
IP address blocks: 93.187.111.0/24 maxlen: 32
185.110.92.0/24 maxlen: 32
185.110.95.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Oct 2023 15:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:8a:56:88:61:ac:f8:3e:04:58:74:dd:32:50:8e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jun 16 18:49:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c140e274a6d41d52b69c11dba219c281acff7fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:47:49:92:94:05:f5:89:6a:26:d0:cc:39:
22:c3:b7:33:84:d9:eb:04:53:27:ea:4e:2f:bb:63:
ab:6b:60:7a:16:6e:5b:08:0d:45:bb:4f:f5:2f:be:
e2:a1:78:c6:b0:9c:66:17:62:93:0e:00:86:c0:41:
65:a7:55:b0:ab:79:96:a7:2c:6c:d3:40:c7:72:15:
e6:35:6e:39:b3:81:74:79:aa:2c:4c:e3:c6:f0:a6:
46:a1:09:7d:1e:e8:b9:21:28:7f:cb:ff:cf:64:5b:
71:5a:51:aa:9d:65:55:1c:76:28:78:e6:10:a7:ba:
f0:51:79:40:fa:c5:d7:2b:7c:b4:77:c0:4c:3a:7e:
0f:5f:eb:1d:46:74:48:90:3b:fc:7e:36:2c:0a:72:
4c:7e:53:91:1a:ba:6a:46:11:ed:68:3a:6c:48:9f:
48:b6:f8:3f:86:3e:58:f8:77:86:5a:31:00:d0:88:
8a:48:00:b6:02:f0:43:11:7d:4c:f0:ab:ef:99:bf:
fc:90:6e:66:fd:20:bd:20:9d:cb:5c:00:0e:94:1f:
6b:c8:bd:77:69:5d:ec:ff:a8:c3:4e:2f:88:43:7c:
70:a1:bc:3b:97:e1:6e:4e:9d:72:51:59:b8:46:25:
eb:2d:75:eb:9d:6e:25:85:96:96:a5:9b:b6:41:4d:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:E2:74:A6:D4:1D:52:B6:9C:11:DB:A2:19:C2:81:AC:FF:7F:AC
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/wUDidKbUHVK2nBHbohnCgaz_f6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.111.0/24
185.110.92.0/24
185.110.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c2:ee:39:fc:66:ca:21:dc:bc:8b:9c:fb:f3:a2:54:58:c2:
61:f4:37:0e:63:7d:b9:ed:3c:c7:cb:7d:c9:b1:6f:88:d2:20:
43:43:68:a1:83:fe:df:4e:47:73:a9:f5:03:4d:03:d4:c3:44:
a6:ba:f5:93:d7:2f:7d:68:63:ff:69:2e:d4:d3:97:5d:41:59:
9a:ff:e6:7b:c0:58:45:3c:72:4a:8e:68:43:81:3f:4f:e4:44:
e1:ed:d9:4c:62:8a:ac:05:08:63:f3:6e:03:a9:56:6e:35:5f:
51:74:2b:49:82:94:85:f4:b9:f3:46:e5:0f:10:90:97:87:b3:
fa:30:a3:9f:b8:53:b5:f5:93:59:88:34:e9:ab:0d:79:c2:d8:
1e:24:bf:91:af:a6:f9:2c:47:01:f8:89:76:b9:80:94:9a:5e:
e7:fe:15:e9:01:e7:b7:69:10:68:03:ef:06:d4:a1:be:fc:33:
b3:98:0f:9e:73:97:14:25:2b:49:9b:de:89:2c:c9:af:ec:6b:
8b:a8:9c:d7:b1:97:dc:f1:f5:da:a5:0b:44:1c:3f:c2:96:5d:
50:72:d2:dc:42:42:28:f5:d4:97:e0:e0:04:8e:86:0b:fd:c3:
3e:a8:c0:a5:48:e0:c7:71:21:ec:57:fa:68:5c:a9:d9:6a:c1:
0f:88:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:56 2024 by rpki-client on console-ams.rpki-client.org