Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/Dwg98-jHGOpCBH1Yb6ZN_WKJ3uM.roa
File: Dwg98-jHGOpCBH1Yb6ZN_WKJ3uM.roa (raw, json)
Hash identifier: tyBVD4O5Li7wNNYmZULPnggeieRdzDW7T29ntRBQMp4=
Subject key identifier: 0F:08:3D:F3:E8:C7:18:EA:42:04:7D:58:6F:A6:4D:FD:62:89:DE:E3
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 018B48D674813789781EB75A6C5FE98B6AC8
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/Dwg98-jHGOpCBH1Yb6ZN_WKJ3uM.roa
Signing time: Thu 19 Oct 2023 16:48:15 +0000
ROA not before: Thu 19 Oct 2023 16:48:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35530
IP address blocks: 93.126.64.0/18 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:d6:74:81:37:89:78:1e:b7:5a:6c:5f:e9:8b:6a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Oct 19 16:48:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f083df3e8c718ea42047d586fa64dfd6289dee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:14:cc:11:1d:2f:f0:23:2c:91:8b:8e:79:
f6:91:01:19:d2:93:23:1c:84:ea:83:65:e3:a9:3e:
9c:4b:f9:2d:1c:ab:29:72:42:3f:20:cf:3d:73:d1:
d7:0d:31:8a:81:b9:e5:9f:37:cc:d0:8e:00:40:c3:
19:ae:59:cc:e9:dc:39:ca:2d:eb:a0:39:29:7e:26:
32:ab:9d:67:9e:01:a6:57:a9:64:47:a4:4c:9e:72:
31:a0:32:97:27:98:a4:f3:28:a2:9e:8a:6f:a8:e2:
cf:72:4d:64:c5:2e:6d:52:0b:5a:1b:12:43:2f:04:
3c:57:31:82:e6:a2:dd:68:bf:18:f4:e9:38:cd:36:
3c:4d:c3:eb:e4:28:4c:05:f7:6e:cb:23:b8:65:f2:
53:41:33:3a:d8:06:ec:63:9e:aa:5f:ab:ce:f1:1e:
84:73:2c:ce:ca:d8:8f:5b:24:2a:20:8f:c0:32:9c:
9d:cb:aa:42:32:0a:fb:78:66:7e:aa:a7:02:d6:80:
21:28:af:6b:d4:bb:21:7e:a8:ea:f7:bb:5d:55:27:
be:7d:cb:12:4b:bb:94:16:b0:0e:b7:51:d8:67:92:
2c:9a:ef:d7:52:0d:4e:17:46:7a:bc:81:42:ec:ab:
e4:bf:48:7d:83:08:2f:39:d8:2b:29:be:db:bc:ae:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:08:3D:F3:E8:C7:18:EA:42:04:7D:58:6F:A6:4D:FD:62:89:DE:E3
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/Dwg98-jHGOpCBH1Yb6ZN_WKJ3uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:19:4e:70:d1:a7:f3:87:77:e2:92:dc:4b:6f:42:0d:8c:70:
3d:91:93:64:92:0e:52:bb:39:a3:59:b3:71:f8:0e:c0:8d:f0:
0a:ac:5e:7e:9c:10:61:8e:d7:46:a9:2d:b1:12:a3:f7:ca:50:
3a:c1:52:4b:22:58:7c:41:28:04:15:9a:1b:c5:f5:eb:e5:47:
71:3c:74:ad:91:c1:ee:58:65:e1:cb:7b:70:2a:df:de:31:09:
41:d2:28:4f:72:7a:49:70:00:08:a7:fc:26:9a:71:d8:01:a0:
f9:e2:a3:7f:b7:81:4d:d4:ec:b9:fb:75:6d:20:f7:17:14:6e:
a9:4e:1f:21:28:d1:e0:f0:69:31:9f:07:3d:f9:ce:9e:ac:65:
94:e8:d3:24:fe:1d:2b:2f:55:7b:ce:55:52:a4:4f:23:4c:03:
ae:d9:12:26:7f:dd:e6:63:b0:d7:95:c4:0b:bf:3f:33:0a:6c:
34:ac:15:18:cc:96:23:03:dc:9c:fc:95:a6:26:95:e3:5e:0c:
d4:ec:79:fe:3f:a5:9c:f8:d2:13:01:5c:f4:81:fc:b5:a8:82:
73:b1:4b:94:c9:b7:9d:33:74:3b:ab:f5:3e:b7:3d:22:7b:05:
d4:fb:8d:10:7a:ce:bc:c4:76:83:2d:7c:eb:31:0b:1b:32:a3:
d3:70:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:25 2024 by rpki-client on console-ams.rpki-client.org