Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0a3-HUQCrEEZW7L4UHcZOy_I5lI.roa
File: 0a3-HUQCrEEZW7L4UHcZOy_I5lI.roa (raw, json)
Hash identifier: e4PDYotErRdJDTg5nU7wLT5r60BdhhsKXrYhXIrnwF8=
Subject key identifier: D1:AD:FE:1D:44:02:AC:41:19:5B:B2:F8:50:77:19:3B:2F:C8:E6:52
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E985FE580C68CDEC33BE6EB7F58A354E0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0a3-HUQCrEEZW7L4UHcZOy_I5lI.roa
Signing time: Mon 01 Apr 2024 06:36:45 +0000
ROA not before: Mon 01 Apr 2024 06:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 87.120.93.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 17:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:98:5f:e5:80:c6:8c:de:c3:3b:e6:eb:7f:58:a3:54:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 1 06:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1adfe1d4402ac41195bb2f85077193b2fc8e652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:dd:69:cc:21:f3:17:af:ec:3d:6b:ce:62:
75:c7:c2:dc:8a:35:9d:ad:19:1a:1a:c0:2a:03:de:
9c:00:5c:61:ef:3d:da:ff:3f:b3:b7:5f:c1:9a:5d:
50:fd:24:ea:7c:b5:98:32:f4:71:da:01:6e:d5:c6:
eb:18:45:e9:68:ee:57:ec:39:74:cd:a1:db:f5:64:
7f:bc:42:2c:37:ce:29:7b:c1:5a:ef:23:8a:e3:6f:
0a:fc:0c:3b:a8:a3:bc:fa:98:d7:26:fe:a2:9a:35:
7d:b7:5c:6f:8a:b0:a9:b0:f4:f1:7e:fc:d8:98:62:
1e:99:14:15:c9:6b:b2:98:b2:df:3c:02:5a:04:10:
39:dd:1e:be:b5:63:94:1a:e2:17:43:ba:5f:8a:8f:
0e:46:88:df:63:4d:2c:25:99:61:ba:9b:b2:1c:b4:
fa:da:7e:df:73:c5:58:02:0a:c3:74:1a:ee:b9:b6:
26:52:09:3b:30:b9:ce:3c:1e:35:cc:27:29:9f:a8:
4d:e3:ad:4e:d6:d8:2f:9b:72:78:8f:2f:37:2d:e4:
5a:75:79:9f:9b:7c:67:ec:e7:65:df:fe:02:1d:43:
c6:d6:2d:fa:51:3f:1b:09:26:5e:07:03:41:79:e9:
c3:50:00:cf:ce:16:fe:89:fe:60:e9:64:06:76:56:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:FE:1D:44:02:AC:41:19:5B:B2:F8:50:77:19:3B:2F:C8:E6:52
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0a3-HUQCrEEZW7L4UHcZOy_I5lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.93.0/24
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8d:5a:93:eb:14:ea:69:72:47:db:7e:5d:e2:09:d6:c9:e8:
8a:21:57:c1:a6:18:20:95:a3:fa:ce:56:40:2b:b4:86:65:54:
76:4d:23:41:9b:9f:1a:45:85:ec:33:76:63:bc:41:cf:1c:3f:
8a:9c:be:d4:31:a1:19:4c:9c:73:10:24:e3:af:73:1e:6b:6d:
59:20:19:51:69:5c:d6:c8:b0:de:5e:42:f9:bb:8f:17:06:07:
58:4c:60:d6:9a:31:5c:b9:b6:b0:c3:c7:7c:aa:fa:12:d7:e6:
ec:1a:62:b4:89:85:24:e7:ed:b9:03:92:1e:3c:32:34:9e:ca:
16:ac:2f:0c:74:8f:18:c8:ab:dd:82:26:58:b8:bb:b7:1b:04:
20:b4:64:d7:37:36:ad:4c:48:b3:63:9c:9a:31:f0:59:62:75:
4a:29:10:3f:2c:56:18:bf:a9:cd:1b:18:7c:b7:91:d5:f6:45:
59:bc:a5:d0:78:ca:74:72:cf:56:f3:2a:73:d1:8e:68:59:4d:
ba:44:cb:3e:1d:ec:62:35:c0:b6:d0:79:88:7f:d2:2d:5e:e6:
3c:a9:e7:d1:19:7d:66:c2:05:4c:7f:e6:b5:c1:15:31:ba:24:
32:e5:b1:12:18:f2:c4:5b:ff:fe:47:ea:54:fb:40:b5:58:fd:
98:67:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:55 2024 by rpki-client on console-fra.rpki-client.org