Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WSWsxDn9q9xind4UATOpZ8NpcHI.roa
File: WSWsxDn9q9xind4UATOpZ8NpcHI.roa (raw, json)
Hash identifier: h9KVndPNS2iwtokHw9y9vfaYZGtt9Kluqb1A0uq+M2Y=
Subject key identifier: 59:25:AC:C4:39:FD:AB:DC:62:9D:DE:14:01:33:A9:67:C3:69:70:72
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018F80C37B5C320C1A064F9B8986A506F206
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WSWsxDn9q9xind4UATOpZ8NpcHI.roa
Signing time: Thu 16 May 2024 09:37:25 +0000
ROA not before: Thu 16 May 2024 09:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.108.80.0/21 maxlen: 24
91.108.88.0/21 maxlen: 24
93.127.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 10:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:c3:7b:5c:32:0c:1a:06:4f:9b:89:86:a5:06:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: May 16 09:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5925acc439fdabdc629dde140133a967c3697072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:e8:3e:75:e1:56:2c:f8:60:66:81:b5:8f:
aa:c9:01:c6:33:d6:8d:be:c5:c3:2e:4b:51:a2:19:
87:9c:6b:46:3c:47:07:01:bd:76:e2:1a:eb:78:2c:
fa:42:dc:d5:0f:62:5e:6c:3d:20:b5:f4:17:8d:d0:
a5:75:65:97:09:5e:c1:b5:d4:16:2e:c7:e0:78:cb:
4b:b3:89:b8:a8:d7:12:b1:eb:19:6e:29:41:c5:47:
2c:09:81:67:0d:ae:4f:05:b0:13:55:48:f7:b3:93:
19:17:4b:77:6c:2a:87:88:97:5f:6c:79:ec:ad:03:
a2:24:68:f8:0a:d1:3b:cb:d6:a5:97:77:7c:c2:8b:
a4:2f:de:ba:9d:a2:06:9c:1c:43:12:96:22:7d:85:
eb:27:ee:b7:da:cc:7b:1c:0b:c5:1d:7f:26:f6:e8:
97:74:4c:86:76:eb:c7:2a:0a:86:aa:cf:27:6e:72:
e0:a6:e5:5a:90:94:76:ad:96:83:f7:3e:47:18:66:
d8:4d:7e:62:14:af:36:22:8c:29:7f:cb:de:3c:84:
47:d5:f0:b7:8d:1c:c1:31:26:2d:6d:ec:a1:ab:d8:
43:da:19:09:d3:0e:48:76:84:9f:d8:40:f3:8c:0c:
67:c8:62:1f:75:b4:54:de:f0:e1:a8:eb:fd:a0:ec:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:AC:C4:39:FD:AB:DC:62:9D:DE:14:01:33:A9:67:C3:69:70:72
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WSWsxDn9q9xind4UATOpZ8NpcHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.80.0/20
93.127.161.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:49:07:da:4e:84:52:0b:e4:33:3a:a9:bb:4b:61:0a:a1:1b:
3c:9c:13:8f:64:9c:88:a7:c6:fc:ba:1d:5f:0a:68:5f:e8:44:
c9:6a:78:8f:f6:5a:84:31:6c:3f:85:70:9f:19:29:15:cb:9f:
9d:48:64:ef:f3:36:8c:e6:ce:38:41:7a:07:f6:84:d8:30:11:
e4:80:1f:85:f5:dd:d4:e0:bd:b8:e9:8a:36:66:40:d4:b3:5f:
ca:30:05:d3:fc:56:4e:54:e0:53:96:a7:1a:c7:ee:1a:ee:82:
16:b9:47:0f:dd:be:d0:3b:68:d4:22:49:30:77:39:fc:62:bd:
69:73:ac:57:b8:7b:b6:c9:45:91:44:ff:8f:da:aa:73:bf:aa:
7b:3e:2a:6c:49:0b:10:87:4f:0c:57:ef:94:91:bb:e6:b2:84:
a1:f8:10:23:a1:3d:e4:13:21:c3:3e:9c:84:9f:2f:ff:66:64:
a3:83:c6:ea:be:fd:87:9a:39:93:9e:fb:16:a9:f9:b5:be:3e:
2d:a8:18:7f:f0:be:66:81:f4:67:b4:10:97:f5:35:2d:0d:64:
08:47:e6:ff:5c:a1:dc:63:85:65:93:e9:26:ce:7f:d9:dc:9b:
7b:0e:95:54:4a:ca:0f:cf:69:1d:83:8c:4d:51:59:99:ec:6f:
56:eb:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org