Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8WS8fxx4b1mxS7d-v_ZxpfA_x3A.roa
File: 8WS8fxx4b1mxS7d-v_ZxpfA_x3A.roa (raw, json)
Hash identifier: WKL7E7RkvpNjDsaL8H+2iVFIGlsnqWTu4mGvM1FmG7U=
Subject key identifier: F1:64:BC:7F:1C:78:6F:59:B1:4B:B7:7E:BF:F6:71:A5:F0:3F:C7:70
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 01856BEEB92C19088AD2FCC69A30B0B88AAB
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8WS8fxx4b1mxS7d-v_ZxpfA_x3A.roa
Signing time: Sun 01 Jan 2023 06:04:44 +0000
ROA not before: Sun 01 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47441
IP address blocks: 93.174.72.0/24 maxlen: 24
93.174.73.0/24 maxlen: 24
93.174.74.0/24 maxlen: 24
93.174.75.0/24 maxlen: 24
93.174.76.0/24 maxlen: 24
93.174.77.0/24 maxlen: 24
93.174.78.0/24 maxlen: 24
93.174.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b9:2c:19:08:8a:d2:fc:c6:9a:30:b0:b8:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f164bc7f1c786f59b14bb77ebff671a5f03fc770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:c9:2e:2e:4f:5b:9a:9f:f5:42:7c:0d:b5:
a6:29:34:f2:eb:b3:24:9a:63:f0:e7:e2:2f:15:b7:
a3:05:d8:6b:f8:e9:27:1e:76:be:f1:76:63:6f:45:
52:c3:c2:e0:c6:6e:bd:e0:f3:c8:d8:f3:84:84:f9:
7b:4f:da:6d:99:03:a5:2a:97:6b:1d:e0:d6:68:34:
00:9d:f7:3d:43:b7:20:1d:26:bd:06:84:11:85:17:
3d:0f:d9:b1:52:9d:a2:46:3a:7e:9b:ea:97:47:6f:
41:69:ed:2a:c4:f2:fe:a9:86:ee:0c:99:2b:cf:8b:
a9:d9:7f:66:e4:65:8a:5a:ec:38:db:4a:e5:b8:20:
45:d8:1b:1d:7b:2f:49:ae:4e:b4:aa:0e:56:3e:3e:
72:8e:5e:c0:11:2f:f6:a5:b1:8f:e6:56:73:35:3c:
1f:44:f3:62:14:50:d2:b6:df:88:32:d1:69:ca:66:
b4:b6:ef:5b:bd:a1:fe:04:c5:74:21:4e:53:87:44:
7b:6c:1e:ef:02:61:b7:89:76:37:f3:a9:a2:c5:57:
42:42:e4:3a:17:4b:14:2d:ac:d2:4b:f9:bb:6d:79:
10:20:cb:b3:bc:a3:f2:de:28:26:0d:bf:eb:c1:29:
30:f9:05:1b:c9:7a:02:d6:66:60:83:33:73:06:44:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:BC:7F:1C:78:6F:59:B1:4B:B7:7E:BF:F6:71:A5:F0:3F:C7:70
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8WS8fxx4b1mxS7d-v_ZxpfA_x3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.72.0/21
Signature Algorithm: sha256WithRSAEncryption
90:1c:c5:bf:bf:f7:4b:ca:59:58:a4:72:15:a9:a7:86:7e:4b:
17:b9:09:60:ae:17:f5:48:ac:a4:25:ba:02:38:6f:18:14:f1:
e5:a6:11:a0:bb:6d:cf:9f:3f:f7:d3:51:96:14:e0:35:b4:9c:
0b:68:32:5f:d5:35:80:2a:7e:7b:b8:04:8c:60:7d:20:c0:71:
60:9a:89:68:ec:a5:e7:52:79:a1:61:b2:b0:ac:39:9d:5d:9d:
b1:03:26:10:f7:d0:15:d1:1b:d2:d6:3a:e9:8b:6b:7a:fc:0c:
86:36:29:fa:0f:15:18:b5:47:51:15:19:e2:1e:9e:e3:b3:c0:
68:54:bf:c4:86:ff:6a:12:31:b2:3c:8e:d7:98:82:eb:b6:d2:
bb:a9:60:63:91:35:50:0a:95:ae:a6:9e:cb:f0:b8:df:bd:d5:
93:5e:14:75:1a:6a:d4:7a:c4:e3:aa:9f:65:8d:76:73:c4:f0:
31:73:15:6d:1e:aa:54:4f:97:a0:08:9b:d7:70:6b:c4:e2:49:
35:cd:a3:be:76:36:5f:ba:8d:a0:8d:75:a5:87:08:1d:bd:e2:
ef:d6:59:31:ce:b5:51:01:78:77:45:5e:15:6a:4c:96:a5:04:
c4:bd:1d:db:ff:5d:a5:43:86:04:ea:46:a2:f6:59:21:a6:60:
30:51:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:33 2024 by rpki-client on console-ams.rpki-client.org