Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/wzYPBfKQ-gzGOrTMDoGiqRcXBYI.roa
File: wzYPBfKQ-gzGOrTMDoGiqRcXBYI.roa (raw, json)
Hash identifier: GzurG7blyvZrYQ5zs5slnCESykRfhYVJmfTLmGawnWw=
Subject key identifier: C3:36:0F:05:F2:90:FA:0C:C6:3A:B4:CC:0E:81:A2:A9:17:17:05:82
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 01856D78946DA96018251349B6AFE24394AA
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/wzYPBfKQ-gzGOrTMDoGiqRcXBYI.roa
Signing time: Sun 01 Jan 2023 13:14:56 +0000
ROA not before: Sun 01 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 93.95.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:94:6d:a9:60:18:25:13:49:b6:af:e2:43:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3360f05f290fa0cc63ab4cc0e81a2a917170582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:c3:74:08:fa:7b:d5:e6:0a:9f:88:40:26:
bd:37:a1:f4:af:0b:d4:e1:fd:27:27:b1:4f:ff:a7:
ab:81:31:04:4a:1e:32:46:34:64:a3:89:48:30:90:
01:59:4a:dd:c3:c5:3c:11:9d:2a:66:b1:e8:0f:a8:
23:4f:d0:d0:b4:f4:ae:ed:3f:c2:06:8b:02:37:47:
e1:6f:c9:e8:de:f8:d8:db:40:85:50:6e:0d:be:45:
12:a6:f0:4a:b0:d9:1c:c9:ee:33:a4:71:2b:29:4a:
c7:c4:7c:ed:15:2b:67:3b:ed:f3:2c:3a:f2:26:dd:
11:fa:fe:31:21:fe:fa:f2:0e:99:5f:bf:fe:e2:ca:
fb:95:5f:cd:09:e2:7c:f1:22:b3:07:ed:ea:6b:73:
85:61:1e:ed:11:9c:fc:eb:c0:65:22:94:20:38:e7:
88:5b:32:c9:b7:15:91:b3:b5:04:0c:91:06:a4:00:
b8:69:9f:f6:6a:36:c5:43:df:98:04:1d:0a:cf:93:
06:b9:a9:8c:9c:c0:cd:68:4b:68:73:50:2a:f7:e8:
2f:af:7e:06:ed:ea:6e:a7:d4:10:52:89:56:7b:da:
73:8e:e7:29:f6:b4:bf:50:eb:dc:c8:08:ef:86:92:
7a:73:ee:eb:cb:5f:74:1b:bf:87:e5:10:ea:df:79:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:0F:05:F2:90:FA:0C:C6:3A:B4:CC:0E:81:A2:A9:17:17:05:82
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/wzYPBfKQ-gzGOrTMDoGiqRcXBYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.48.0/21
Signature Algorithm: sha256WithRSAEncryption
60:a1:40:f2:45:36:55:c7:82:a3:6e:df:07:52:2d:59:21:16:
3b:bc:c7:be:4d:c1:9b:16:86:08:95:97:61:f2:fc:2a:48:18:
f4:56:38:48:69:7b:87:c5:e6:a5:4c:08:44:22:64:b1:83:68:
e4:35:7a:d3:ff:47:d4:0d:9c:e4:7c:75:d4:ff:a8:c6:40:56:
7a:90:b2:46:26:8e:19:8f:f3:b7:9f:d2:f4:c7:5e:ab:ba:f6:
18:e2:48:88:13:4a:2d:d4:0d:2e:f5:7d:88:4e:f4:04:f7:24:
0b:c4:3a:47:5e:ec:2a:67:c8:90:8e:0d:9c:a8:ae:44:c0:ef:
e7:39:cf:4c:7a:f1:19:32:ad:fc:54:db:42:1e:39:28:7b:4e:
84:f1:67:0b:ed:87:21:5b:7c:45:cd:39:1a:fa:46:f2:b2:e7:
29:5b:8c:7f:cc:64:49:ac:bc:df:b8:a7:e8:08:51:b5:cc:08:
30:d6:63:ee:05:e9:cb:74:79:6c:81:a4:c7:a6:20:f8:f8:2d:
84:e5:c2:39:da:0a:de:2b:46:76:46:c9:d5:a1:77:a7:80:6e:
4b:d1:5e:ec:e5:77:fe:d2:41:e6:a1:5c:7d:0d:92:fa:ba:b2:
1b:01:c8:d1:33:bf:45:f4:6d:65:57:7c:88:4b:30:81:52:dd:
cd:d2:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:52 2024 by rpki-client on console-fra.rpki-client.org