Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/WrsSNwisum9RG3VzLV9LvDj09C4.roa
File: WrsSNwisum9RG3VzLV9LvDj09C4.roa (raw, json)
Hash identifier: MJ4DX+yRL6oGCswzHl55cU+IdO7cEybq1VUsPLMSb7w=
Subject key identifier: 5A:BB:12:37:08:AC:BA:6F:51:1B:75:73:2D:5F:4B:BC:38:F4:F4:2E
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 018AD185E32B430D5BDA3F0321420758E711
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/WrsSNwisum9RG3VzLV9LvDj09C4.roa
Signing time: Tue 26 Sep 2023 12:45:27 +0000
ROA not before: Tue 26 Sep 2023 12:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44534
IP address blocks: 93.158.185.0/24 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:85:e3:2b:43:0d:5b:da:3f:03:21:42:07:58:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Sep 26 12:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abb123708acba6f511b75732d5f4bbc38f4f42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:a2:c1:21:a3:71:bc:e4:05:bc:10:c4:56:
97:46:67:2e:7a:f1:a0:d3:68:c0:38:cd:3a:d9:b7:
a0:06:6d:6e:1d:61:f6:96:c0:e2:ce:88:e9:15:7c:
59:30:c8:4f:9e:f8:e5:21:61:14:71:97:5d:56:0b:
76:93:79:5d:91:5a:c4:03:5f:8d:ce:58:19:3d:c3:
ad:04:ab:6a:9f:14:26:54:a0:5c:26:53:67:fd:68:
9b:be:7c:dd:f5:41:4f:37:b7:82:9c:8c:ba:a4:b7:
6a:28:08:49:8a:91:0c:86:1d:9d:f7:78:0b:2b:73:
b3:0d:b1:ae:66:ff:c2:85:be:70:10:7c:fc:b0:f7:
bb:c6:39:75:fc:4c:0f:b1:2f:e9:fe:a2:cc:7a:61:
f0:77:14:11:b2:26:09:26:14:11:02:03:12:51:b0:
d3:b3:2f:14:00:05:ea:b0:27:ae:f5:d7:38:f7:74:
a5:be:b9:f1:4a:28:6a:cd:95:97:36:20:ae:88:2d:
56:61:43:7b:9f:91:7f:03:6d:34:ea:af:74:ff:90:
95:24:08:8a:c7:97:66:d2:b5:9d:22:ee:9c:30:f0:
30:d6:89:05:a6:08:a0:39:d4:b5:b1:fc:40:5f:ba:
e2:70:21:7b:a7:be:f4:90:7b:92:b2:74:9a:fb:eb:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:12:37:08:AC:BA:6F:51:1B:75:73:2D:5F:4B:BC:38:F4:F4:2E
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/WrsSNwisum9RG3VzLV9LvDj09C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.176.0/20
93.158.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:44:a5:d5:ed:ab:ec:9f:fa:32:ef:d0:45:35:cd:e8:10:23:
ed:6c:ec:b8:01:30:50:40:7a:9f:c8:0e:a1:fe:93:55:be:1c:
f7:84:23:d9:d4:da:2a:fa:cb:04:1c:23:9c:dd:51:67:2a:35:
05:fd:2a:08:9e:7f:ce:b4:81:69:09:00:ab:ef:63:0c:75:c5:
80:a7:ad:d0:14:f8:05:b9:3a:18:40:8d:fa:e2:db:0a:3c:ec:
9f:f6:f4:83:48:84:0e:39:66:da:0a:80:56:65:3b:e6:47:ab:
5e:f3:04:33:1f:42:28:31:fc:79:b8:d9:0a:b3:12:a2:66:fd:
47:9d:75:91:8d:69:eb:82:b8:b6:9e:5a:b6:ec:d7:eb:36:df:
3c:77:69:f7:16:a9:1a:71:6d:47:f9:11:31:d1:06:0c:ff:22:
51:18:56:6a:93:b1:a8:6b:8a:f3:78:69:ab:d0:d7:29:4a:07:
b1:82:2d:43:99:b8:03:44:28:bd:d7:3b:6d:2b:51:b5:42:c3:
ae:03:f3:08:1e:7c:4a:04:c3:b8:ba:ce:4c:7f:65:71:7e:1e:
fd:2c:2b:f2:ab:df:8d:8e:cc:5b:9b:c8:29:7b:9e:f1:49:36:
8b:80:8a:dd:1e:7b:cc:0c:2c:95:f8:2a:fb:72:55:a1:9d:60:
ec:21:7f:50
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 17 14:00:00 2023 by rpki-client on console-fra.rpki-client.org