Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dWS98iY6PwieUuqQgh4vcaWgZ5g.roa
File: dWS98iY6PwieUuqQgh4vcaWgZ5g.roa (raw, json)
Hash identifier: vo/qJwvcK8Z43Sf7eJ6WuIAAcayY71MqtqKF1staVuw=
Subject key identifier: 75:64:BD:F2:26:3A:3F:08:9E:52:EA:90:82:1E:2F:71:A5:A0:67:98
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E8CD2F4438FFDEC83A974A7C9D65
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dWS98iY6PwieUuqQgh4vcaWgZ5g.roa
Signing time: Sun 01 Jan 2023 19:35:25 +0000
ROA not before: Sun 01 Jan 2023 19:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
37.29.76.0/22 maxlen: 22
78.41.100.0/22 maxlen: 22
178.176.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Mar 2023 06:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e8:cd:2f:44:38:ff:de:c8:3a:97:4a:7c:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7564bdf2263a3f089e52ea90821e2f71a5a06798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:d3:9f:36:f9:9c:0e:f4:d4:87:f8:db:3f:
61:8e:02:4c:6b:a7:f5:37:d6:67:d1:98:91:ff:cd:
13:43:f2:2e:1f:00:73:b2:2f:6f:37:60:51:6b:ef:
94:fb:a4:72:e5:43:de:bc:5a:cf:97:f1:ee:50:9e:
ac:8c:df:42:cf:e7:51:e0:49:15:e4:82:ee:a7:90:
dd:1b:d7:83:25:53:22:4d:5e:01:45:4d:28:6a:f7:
25:39:21:6d:c1:53:a2:aa:8a:b1:de:3b:17:bf:d4:
f2:5b:bd:04:1a:06:ca:99:41:26:79:b2:ae:3a:e0:
e4:13:1e:fa:4f:ee:a7:8d:5e:df:38:3e:7d:05:3e:
07:e7:3d:4b:71:17:09:5d:47:df:11:0e:e8:d7:1c:
f9:c1:ef:2b:bd:af:26:cd:2b:21:91:35:8c:4c:10:
06:74:25:c0:0b:b2:ac:0e:0c:43:e5:2b:f8:7b:c8:
45:40:36:4b:3e:c7:fd:d7:9c:f2:04:6b:b7:7c:aa:
5b:df:16:1e:20:ad:2d:58:3a:fd:0e:74:a9:1e:a2:
da:db:2f:11:fa:62:ef:bd:83:40:c0:d8:b9:38:53:
62:64:19:fd:63:e2:46:14:cf:78:47:42:18:0d:c6:
30:a6:b9:f2:2e:39:b2:de:36:e1:8f:3b:ae:27:ff:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:BD:F2:26:3A:3F:08:9E:52:EA:90:82:1E:2F:71:A5:A0:67:98
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dWS98iY6PwieUuqQgh4vcaWgZ5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
Signature Algorithm: sha256WithRSAEncryption
84:e5:eb:b6:44:93:31:35:3c:02:86:e7:67:0b:48:2c:39:ca:
18:9a:a4:6c:c5:30:cc:25:53:0c:b3:d1:37:17:30:62:e0:e0:
17:34:56:ce:aa:49:0d:1b:29:48:69:df:6a:19:e6:3c:24:8e:
76:48:eb:ea:b5:4a:41:6a:74:2c:6c:9a:26:55:76:74:40:93:
3c:b1:df:29:02:b5:f2:79:4a:b5:87:9f:b2:18:9f:19:47:ec:
17:81:c4:1f:21:2e:2e:70:c3:4a:8f:6c:0c:da:aa:27:2b:0b:
45:87:7b:c2:5e:20:2d:85:ef:d4:72:38:8b:e1:71:e5:fe:0e:
86:7c:e6:91:72:35:6b:99:54:a0:03:17:3d:a7:45:2c:c7:8c:
5d:53:0a:17:9b:cd:ed:8c:9f:98:a1:30:fe:d7:da:bc:b2:b1:
f8:f4:cc:85:48:32:df:e1:01:fe:e4:82:71:c5:6c:8c:ae:a5:
ab:43:4e:8e:ad:86:dc:cc:6c:15:b8:46:13:76:d3:8c:21:30:
f3:70:eb:5f:95:50:d5:fa:98:12:1b:c6:de:33:d4:1b:45:a8:
2b:fd:01:d0:52:e6:0b:97:46:25:0a:27:27:c9:9b:2c:72:bb:
ce:ac:6a:a2:3d:92:37:9c:01:ee:f5:e4:50:ea:a9:82:cc:b2:
ed:2d:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org