Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/DW7eUMx7rnSqgCjknQiUVK4Bb1s.roa
File: DW7eUMx7rnSqgCjknQiUVK4Bb1s.roa (raw, json)
Hash identifier: ZQY+CEQfBfaQa4zeOVbP/5DQ6wFZfOjo7Y7jzl3Bpqk=
Subject key identifier: 0D:6E:DE:50:CC:7B:AE:74:AA:80:28:E4:9D:08:94:54:AE:01:6F:5B
Certificate issuer: /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial: 01856FC27003034D15C1331F31B0E9E5AC04
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/DW7eUMx7rnSqgCjknQiUVK4Bb1s.roa
Signing time: Sun 01 Jan 2023 23:54:51 +0000
ROA not before: Sun 01 Jan 2023 23:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210444
IP address blocks: 194.9.90.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:70:03:03:4d:15:c1:33:1f:31:b0:e9:e5:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Validity
Not Before: Jan 1 23:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d6ede50cc7bae74aa8028e49d089454ae016f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:aa:dd:84:08:6d:bc:9f:f6:c3:1b:ca:ae:56:
48:35:9b:71:1f:24:b6:92:7f:9d:ed:62:b1:4d:aa:
66:6b:8f:2a:43:94:f7:da:e4:11:35:9f:7b:cb:55:
8f:77:e4:d2:b9:26:61:7e:e1:2d:dd:c0:62:27:7c:
44:67:e4:f5:0b:0a:f1:fd:38:7a:db:12:38:b2:86:
09:c2:79:7a:90:1d:6d:73:da:0b:48:6f:1c:3d:f4:
70:b5:b7:b0:dd:62:70:2d:5e:17:1b:9a:d3:58:af:
60:13:50:8e:cf:52:7c:08:28:dd:bd:95:d0:0d:55:
2a:93:91:4a:1d:d6:5a:6b:32:56:df:15:93:68:45:
d3:87:dd:0b:94:42:b3:95:9b:33:3f:17:9f:1d:7c:
5f:73:96:16:d1:ec:b2:82:8c:db:cf:31:fe:e0:d1:
ec:8c:04:42:93:06:52:75:c5:e0:6f:4b:43:e0:36:
92:2b:2a:e9:6b:a7:e9:95:b3:77:c8:c6:d9:54:34:
b0:a3:7a:98:36:b3:f8:88:37:8d:7f:2e:51:36:bc:
3f:fc:be:77:00:35:33:84:19:a4:2b:f9:2e:84:f5:
5d:17:7f:fd:d6:25:d4:d6:14:1f:c4:39:65:4e:f4:
8a:49:c1:01:c3:f8:ac:fa:eb:8c:89:58:22:50:23:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:DE:50:CC:7B:AE:74:AA:80:28:E4:9D:08:94:54:AE:01:6F:5B
X509v3 Authority Key Identifier:
keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/DW7eUMx7rnSqgCjknQiUVK4Bb1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.90.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2e:76:ec:f3:10:2c:ef:9b:e8:e0:ed:14:c1:c8:5f:fa:e9:
b8:1d:2e:94:82:bc:4a:e9:0c:9a:ea:f9:71:52:51:49:f8:7a:
8c:81:48:a5:a1:71:c9:2d:6c:3f:86:5f:25:9d:64:9f:1d:a0:
40:a2:44:8d:bf:64:e9:a1:78:31:4c:c3:cc:4a:80:4c:6a:21:
ae:09:f0:a4:d0:d4:8b:6a:88:8d:ff:34:8c:8b:08:02:87:6a:
39:94:36:1b:0d:69:ec:78:88:f9:8d:84:b6:76:ee:d2:44:8f:
5e:ae:f5:13:0a:66:03:32:21:f5:6c:6b:68:69:88:91:19:4a:
0d:48:39:c0:38:ea:35:87:ee:b1:b4:3a:d1:47:e2:d4:7d:78:
06:c0:12:ef:6b:90:dc:25:a8:92:ad:15:a3:3a:7d:46:ea:f4:
99:ee:d9:32:5d:2f:ea:ba:60:63:4c:1e:25:a5:e4:97:6a:df:
f8:25:c9:01:20:08:00:05:a9:e1:55:e3:0c:51:51:15:c5:14:
81:a6:ae:ab:18:e4:e0:cc:c8:74:9a:c5:b1:ae:c4:a8:e3:dc:
52:52:a3:58:ff:ae:22:0c:79:66:a9:f2:ba:51:66:cf:9e:15:
3f:5c:8f:57:f2:ea:8b:10:b4:ba:3f:e9:5e:a1:6c:18:b0:9b:
9c:62:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org