Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/WqTkHZewPeRaIu3lcxvZe6I1Lu0.roa
File: WqTkHZewPeRaIu3lcxvZe6I1Lu0.roa (raw, json)
Hash identifier: wUYT57/CbsvinnRNyjk3mhY48eRCmbScjN7vsT9pQD4=
Subject key identifier: 5A:A4:E4:1D:97:B0:3D:E4:5A:22:ED:E5:73:1B:D9:7B:A2:35:2E:ED
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0186B684F7A0DAD9738DDECEFF52DCC716B1
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/WqTkHZewPeRaIu3lcxvZe6I1Lu0.roa
Signing time: Mon 06 Mar 2023 10:43:32 +0000
ROA not before: Mon 06 Mar 2023 10:43:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 193.106.96.0/23 maxlen: 23
194.242.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:84:f7:a0:da:d9:73:8d:de:ce:ff:52:dc:c7:16:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Mar 6 10:43:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aa4e41d97b03de45a22ede5731bd97ba2352eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:64:1e:6d:ec:06:7f:1c:c8:e6:b2:e1:1c:
9a:7e:22:d2:d3:89:a1:3c:06:2d:5a:04:23:39:21:
e0:a6:9a:66:79:8f:5f:45:a0:b1:e6:66:11:53:7d:
5a:74:dc:8c:87:03:28:bf:50:cd:46:9c:8a:91:33:
72:9e:45:b4:bf:a8:b8:56:73:7a:db:64:10:5f:23:
66:88:64:f5:a5:34:57:ea:33:49:ad:0e:2f:b1:28:
e3:32:5e:bb:70:9c:71:5b:41:62:3c:52:27:00:2d:
59:91:e2:58:80:be:0f:bc:56:df:13:ae:9f:56:16:
19:17:ee:f8:ad:38:1f:e2:68:94:e7:75:77:c9:7a:
27:07:44:7b:89:86:e8:b8:9d:9f:58:86:4b:42:94:
d6:c1:a3:48:1e:06:58:19:31:b0:4a:0c:aa:76:a5:
ab:fe:70:63:8b:5a:a2:b8:5d:b5:63:3b:7d:16:c1:
7d:b8:88:59:6f:e4:fd:79:3d:4c:4c:03:b4:4c:7e:
ea:a9:9f:a1:57:12:ea:eb:8f:01:fc:50:f7:f7:bc:
a6:90:80:e3:06:05:d3:d1:be:75:f1:c6:ba:c4:ab:
6b:60:94:b2:ed:00:20:d6:b2:6d:d2:5b:8c:e7:a2:
c0:72:8c:d8:71:31:9e:02:57:13:1b:b3:d7:15:ce:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:E4:1D:97:B0:3D:E4:5A:22:ED:E5:73:1B:D9:7B:A2:35:2E:ED
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/WqTkHZewPeRaIu3lcxvZe6I1Lu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.96.0/23
194.242.26.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:af:07:43:ea:bc:d4:2a:f0:3b:4d:bd:df:6e:e6:34:00:7e:
1d:19:21:72:61:68:f9:10:c8:63:42:22:97:89:1d:0b:cd:2a:
57:1a:95:12:d0:d9:8b:03:0e:40:06:00:9c:6e:de:2d:97:fb:
3c:21:a8:00:ac:5e:3e:1b:58:3a:d8:3a:d3:14:3b:76:9a:a8:
f8:da:71:73:2e:4c:a0:9a:ff:dc:80:ee:03:d6:39:24:87:44:
72:c7:71:65:25:aa:16:a1:34:66:c1:1b:77:19:5f:f9:30:5c:
fe:d2:ce:ec:dd:df:a6:ab:ed:96:60:b1:a5:64:d9:c6:d7:1b:
15:84:5b:dc:95:f4:b1:37:3e:9f:c1:27:cb:f2:9c:0e:1e:3e:
f9:33:61:3a:01:ff:b0:eb:75:7c:52:8f:15:67:80:c8:c6:9a:
36:bd:b3:48:95:2a:45:28:55:f1:1d:f7:5b:60:0e:83:2d:f5:
9e:14:92:b5:6a:0c:87:5d:d1:60:86:4f:04:c7:d9:e3:dd:4d:
c0:16:6b:2b:11:af:43:c2:61:cc:7b:60:73:7a:cb:24:ef:5d:
c9:94:19:4c:5d:60:f8:21:4b:bd:5c:2b:11:e5:dc:42:eb:d3:
4f:94:6c:7f:56:da:76:b8:3a:37:df:1b:b1:39:08:70:97:2e:
82:60:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org