Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/odOAWl5Dh_YoIRAjqpU6Ri2PhyU.roa
File: odOAWl5Dh_YoIRAjqpU6Ri2PhyU.roa (raw, json)
Hash identifier: wsrpUsDDEC+WkkkJBn91xsynhvU0Yf54oNwt5F1+udc=
Subject key identifier: A1:D3:80:5A:5E:43:87:F6:28:21:10:23:AA:95:3A:46:2D:8F:87:25
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 018B3DD1B650F1DD68B229E67393C459A024
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/odOAWl5Dh_YoIRAjqpU6Ri2PhyU.roa
Signing time: Tue 17 Oct 2023 13:27:15 +0000
ROA not before: Tue 17 Oct 2023 13:27:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44534
IP address blocks: 93.158.185.0/24 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.170.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 09:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:d1:b6:50:f1:dd:68:b2:29:e6:73:93:c4:59:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Oct 17 13:27:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1d3805a5e4387f628211023aa953a462d8f8725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:84:c7:4d:d6:30:11:96:41:9d:9f:ae:b4:
a2:55:39:0d:bb:d5:80:5c:2f:7e:5e:7b:42:11:6c:
64:59:ca:29:e4:de:83:49:ba:7c:c5:92:53:5d:67:
8b:b3:12:94:b3:12:b0:91:82:f6:4d:15:3f:15:2b:
06:a9:28:c9:4d:e6:06:21:d1:6f:ee:a1:68:36:99:
44:e2:77:d6:9d:7f:a5:9e:1e:13:2c:35:45:36:da:
6a:c2:e0:49:01:4f:7b:5c:f7:cc:09:4b:71:bc:1b:
7c:50:14:3e:27:c2:cb:99:89:e0:66:56:b1:8a:1e:
1e:6c:fd:e1:d7:5b:00:eb:3a:f0:e5:8b:96:e7:43:
85:3b:84:74:92:39:dd:32:4b:08:1e:ad:c2:3a:2a:
c1:91:61:47:a0:28:40:e6:b3:cf:96:e9:82:fd:01:
83:54:fd:7b:1f:ae:1f:73:0c:3b:8a:06:5e:fb:46:
a0:f8:90:24:31:08:df:8d:88:c7:4f:d2:4d:e6:8e:
9e:9a:2c:b3:11:ec:28:20:fa:18:33:12:3c:78:d3:
ce:41:48:7a:1b:e8:0d:9b:aa:5f:95:d2:b1:76:68:
55:b9:69:91:af:49:cd:08:79:a8:44:45:81:82:fb:
41:99:a0:4a:6e:c6:38:31:b6:58:52:47:09:c2:56:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:80:5A:5E:43:87:F6:28:21:10:23:AA:95:3A:46:2D:8F:87:25
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/odOAWl5Dh_YoIRAjqpU6Ri2PhyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.176.0/20
93.158.184.0/22
95.108.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:15:1b:53:3d:eb:45:08:d7:5d:b3:24:34:90:03:46:be:d0:
34:ac:19:f5:92:d6:f4:9c:94:38:5a:9d:81:66:a4:ce:d2:35:
f9:db:7f:f3:6e:f1:d0:b2:dd:98:02:0b:25:35:82:e4:0c:40:
45:2f:d4:b2:e6:40:1a:15:57:33:83:17:03:91:7f:6c:d1:ca:
cb:98:5f:b6:6f:c8:d6:57:70:ce:f8:02:a3:a4:3e:08:21:92:
38:b3:de:a4:46:cd:8a:6d:d8:4f:c3:d7:bc:ee:9c:1c:b8:27:
f3:af:d8:16:13:1f:3c:2a:80:24:13:23:bb:dc:07:2a:72:b3:
b9:ea:0c:2f:a0:a3:2f:c5:e0:e5:9e:79:3d:9b:7d:9c:a2:09:
3d:1a:eb:59:f5:a9:d5:95:40:7b:38:19:f6:6e:1d:96:43:35:
84:52:31:a3:25:43:fe:94:0a:84:88:cc:a5:5f:98:c8:5f:a0:
92:8a:54:1e:2d:3e:29:83:1a:72:24:a7:f5:7b:e4:01:95:cb:
39:88:6a:31:90:ff:6a:e1:54:b3:c1:e0:ed:cd:04:06:7b:06:
50:06:1b:8d:d6:07:be:ce:b4:44:90:c4:9a:4b:a4:df:65:70:
7e:ff:1f:ba:f3:84:d3:4d:29:02:c2:93:2e:e1:17:0a:8d:dc:
d6:49:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org