Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0cSDH3sLP4GBj9O2kIboEZlIS9M.roa
File: 0cSDH3sLP4GBj9O2kIboEZlIS9M.roa (raw, json)
Hash identifier: xNyCDtsQ/DzOew1tyMeUry9LeScxG6PgG4pP4tBxQVo=
Subject key identifier: D1:C4:83:1F:7B:0B:3F:81:81:8F:D3:B6:90:86:E8:11:99:48:4B:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CCE4B1F47C56DDFC1E1190E0A30F21A20
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0cSDH3sLP4GBj9O2kIboEZlIS9M.roa
Signing time: Wed 03 Jan 2024 07:47:58 +0000
ROA not before: Wed 03 Jan 2024 07:47:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:4b:1f:47:c5:6d:df:c1:e1:19:0e:0a:30:f2:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 3 07:47:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c4831f7b0b3f81818fd3b69086e81199484bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:97:c1:ea:40:35:36:38:38:d7:62:a6:df:
ad:71:cf:09:8b:8a:9b:33:0a:5f:cb:41:e1:b7:9c:
2a:56:e6:93:50:81:a7:45:30:81:a5:99:d6:f3:9e:
ad:75:e5:ca:df:41:5d:46:49:b6:96:05:59:22:2a:
ae:24:6c:93:2e:b4:23:c2:2e:3c:63:32:84:fe:c1:
c8:74:74:49:10:75:76:8e:99:59:8e:8a:99:63:ce:
cc:95:36:09:54:40:1e:45:4c:ea:bb:1b:46:3a:62:
06:7c:a4:85:79:1b:94:64:79:a9:8a:8d:9b:1f:1e:
06:ad:60:c2:0e:de:3a:6c:44:fc:27:cb:cb:6f:6e:
08:6f:60:13:60:13:ee:00:c3:d9:a0:c3:55:d5:37:
31:c8:0a:11:88:28:0c:7e:56:b8:41:f2:ed:3f:30:
e5:92:42:55:12:9e:64:ef:51:97:2b:97:f8:a0:ee:
82:50:5f:09:02:ae:1c:a7:dd:b4:17:cf:b9:1a:80:
e9:52:31:1d:2b:04:0a:0a:44:b5:3c:38:6d:9b:3f:
65:b8:bb:2f:02:f9:18:aa:08:07:fe:ad:3a:87:f0:
3f:66:cb:14:5a:34:6d:52:bc:07:64:9e:49:97:6e:
4e:1a:ef:61:6e:01:b8:ec:76:84:39:20:6f:ac:ec:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:83:1F:7B:0B:3F:81:81:8F:D3:B6:90:86:E8:11:99:48:4B:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0cSDH3sLP4GBj9O2kIboEZlIS9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.84.0/24
95.214.24.0/24
109.206.237.0/24
147.78.103.0/24
185.216.69.0/24
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:38:e2:1a:9b:d3:0c:93:ce:cf:07:a4:79:b8:a9:c6:db:a0:
09:b4:cd:d0:aa:9b:f7:82:01:33:71:53:45:de:87:80:f6:38:
ca:0e:db:bd:c5:2e:5e:1e:95:cb:ab:0a:f0:f9:8d:d8:79:19:
a7:05:b0:bf:70:ae:7e:21:89:9c:bb:3f:d4:57:f9:a1:0e:15:
a3:da:f8:6c:39:45:01:52:c1:85:13:25:b1:58:66:e6:56:6b:
1f:a7:d0:ae:12:66:b3:5d:af:9a:5d:db:21:90:81:5c:37:81:
57:d0:32:56:96:0c:98:7c:87:64:c7:7c:3e:6f:ed:ef:02:20:
4b:2a:9d:df:64:97:02:cf:a4:03:1a:dc:5a:a6:05:39:65:89:
fe:e2:fe:b2:d3:c9:42:7a:ff:9d:48:12:f8:d7:bc:10:46:3a:
2a:c5:93:24:48:3a:f4:a6:95:14:66:48:31:01:b4:59:45:94:
f2:7b:be:d2:77:01:34:42:68:2d:9a:c8:61:18:aa:3a:80:78:
74:35:27:42:b4:5a:78:04:a9:76:b9:cf:45:8c:91:75:ce:59:
80:32:25:47:f1:98:e3:47:8d:6f:05:02:94:4b:2e:be:7e:42:
1c:8c:80:08:44:c8:52:4c:eb:db:33:c5:3c:61:66:c5:ed:c9:
5e:bb:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:18 2024 by rpki-client on console-ams.rpki-client.org