Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/WjsHECM43t9qW3n6_GQ_PX9wVow.roa
File: WjsHECM43t9qW3n6_GQ_PX9wVow.roa (raw, json)
Hash identifier: 66o0MZRF4IBSn3QM+4Tw+l4taq+iY8PCOVOwhUiHtiA=
Subject key identifier: 5A:3B:07:10:23:38:DE:DF:6A:5B:79:FA:FC:64:3F:3D:7F:70:56:8C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018A1CC311F46D24EA70F6E1B3A741DA74E9
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/WjsHECM43t9qW3n6_GQ_PX9wVow.roa
Signing time: Tue 22 Aug 2023 10:21:00 +0000
ROA not before: Tue 22 Aug 2023 10:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Oct 2023 11:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:c3:11:f4:6d:24:ea:70:f6:e1:b3:a7:41:da:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 22 10:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a3b07102338dedf6a5b79fafc643f3d7f70568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:b1:e6:0f:3d:70:01:cb:fa:0d:66:ed:3b:
f9:f8:da:6c:88:49:50:39:7c:fa:0d:f7:0b:7d:59:
35:18:7b:52:f6:24:b6:84:1f:c6:ca:b6:79:c3:e1:
9a:11:f4:71:65:76:67:e9:3f:5f:5f:96:25:61:b4:
5e:b3:34:a7:5c:34:2c:aa:9a:9f:eb:5f:5b:99:f2:
64:89:bf:04:70:20:9c:2b:46:7c:05:df:60:a2:47:
dc:81:5b:fc:65:6d:f3:89:99:2a:20:30:5c:96:7c:
c0:ad:3e:5a:0c:f5:6b:53:11:eb:fa:c9:c9:5b:49:
e6:3a:51:09:dd:63:c6:31:29:b0:bc:cf:3c:63:5d:
2b:7f:45:a5:45:a8:2b:19:d0:f9:6d:79:a9:72:9a:
76:62:ef:ee:d2:19:46:16:a7:8f:d7:eb:38:8f:16:
86:48:45:3d:e0:4a:62:aa:a5:63:c9:bd:78:8c:90:
a8:6c:05:c8:8d:2f:6d:9e:8b:09:c4:e1:96:00:93:
54:95:fb:01:06:2d:2e:49:90:2a:f8:ea:8f:7b:85:
be:b8:71:48:27:db:a4:db:c1:3b:9d:a5:dc:07:9d:
d2:4a:45:cb:fd:ec:af:59:f5:7f:ee:e5:78:96:14:
24:c4:86:51:7a:9e:2b:d0:d6:fc:41:66:45:37:f4:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:07:10:23:38:DE:DF:6A:5B:79:FA:FC:64:3F:3D:7F:70:56:8C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/WjsHECM43t9qW3n6_GQ_PX9wVow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
72:c2:7d:0c:06:9f:05:e9:5a:10:8a:62:a4:04:eb:65:21:80:
25:3a:3f:ff:23:86:ce:cc:8c:89:c8:df:6b:cd:5b:d4:a3:68:
73:31:ea:0c:73:e4:4b:21:b6:2c:c6:d2:79:4e:4f:de:69:fb:
46:c2:13:82:cf:be:3a:92:a4:24:8a:44:78:f8:8a:e4:3b:3d:
c9:05:97:51:c5:21:e5:ab:a3:1b:81:5d:a8:e4:7c:2b:dd:73:
b0:9a:78:87:3e:36:f1:1f:c2:19:ee:a9:e6:69:35:7a:62:dd:
dc:30:65:b1:d4:85:41:59:d7:b7:3c:09:80:a7:32:1d:e8:bb:
77:db:a4:2a:3f:5d:fb:36:7f:5b:f5:eb:0e:fd:f6:17:24:31:
37:57:18:03:4a:df:c3:a8:0b:3d:39:c2:4a:24:51:f8:a1:a2:
d5:4a:73:5a:38:85:85:e1:3d:1c:a1:f7:b3:4b:bc:25:1a:b0:
79:3f:83:24:b2:88:da:49:15:c5:7a:b7:c4:69:8e:33:e0:97:
04:ef:00:80:dc:f6:a3:8b:15:cf:3e:df:3d:52:f9:b4:04:99:
05:cc:6d:e6:a5:0d:78:5c:33:b0:2f:b8:5c:09:6b:ce:e6:78:
bd:65:0f:11:ef:b0:ee:71:ee:46:d7:55:99:07:8c:5d:37:f4:
c7:f3:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org