Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0crvR-mHL70XOIA71M74BQmJOSo.roa
File: 0crvR-mHL70XOIA71M74BQmJOSo.roa (raw, json)
Hash identifier: Dtpw6FB5/tg5KR9T/AzMO0OVGl//JzMeE2qpI1uOhtE=
Subject key identifier: D1:CA:EF:47:E9:87:2F:BD:17:38:80:3B:D4:CE:F8:05:09:89:39:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186C21045D70BDCB2A2509B2B32F93F785B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0crvR-mHL70XOIA71M74BQmJOSo.roa
Signing time: Wed 08 Mar 2023 16:31:31 +0000
ROA not before: Wed 08 Mar 2023 16:31:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 94.103.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:10:45:d7:0b:dc:b2:a2:50:9b:2b:32:f9:3f:78:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 16:31:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1caef47e9872fbd1738803bd4cef8050989392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:d3:ec:06:31:53:f8:e9:a7:fc:c3:7a:90:
fc:c0:fe:c7:93:23:96:73:cb:8c:c3:80:b8:e9:79:
ae:79:b2:b2:5b:7f:d5:8e:81:7a:6e:85:a5:dc:44:
4c:8b:34:bc:cc:87:e4:9f:3a:bb:5e:37:b6:1e:75:
84:a9:76:73:30:c2:68:ba:af:69:2d:f6:a2:31:ea:
be:43:f9:ab:7e:bd:ec:de:42:e0:c5:06:48:6f:c4:
59:53:f6:5a:fc:73:d3:03:16:58:e6:8d:52:73:b3:
b4:df:34:7d:be:a2:a8:ab:40:ed:59:68:82:9e:1d:
ea:e8:e1:a2:04:34:64:08:19:4a:66:4c:e7:21:7d:
54:79:90:b9:15:a2:aa:ee:05:e5:3c:98:d2:c7:7d:
92:b1:88:64:aa:91:0a:95:ff:65:37:69:87:b7:ba:
33:5f:68:1f:f9:03:17:b9:d0:99:e3:cd:fa:bf:00:
ad:8c:d1:bc:86:17:d7:77:f0:98:50:15:a2:a0:08:
dd:6c:0b:7b:68:30:8d:ef:f8:8d:1d:f8:e8:75:ed:
29:2d:06:cf:77:39:45:35:a1:78:88:ae:7a:f5:62:
40:a0:00:24:9b:81:47:db:bc:b8:45:89:db:e1:d2:
71:45:8b:f1:e6:0b:ca:e7:85:f7:91:1a:72:6b:a4:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:EF:47:E9:87:2F:BD:17:38:80:3B:D4:CE:F8:05:09:89:39:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0crvR-mHL70XOIA71M74BQmJOSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:65:48:6d:66:db:3d:74:d0:1b:e8:30:8e:92:9d:e9:d7:aa:
d5:21:56:7f:65:96:ae:eb:21:ec:0e:94:cf:7f:aa:49:c4:c7:
00:e5:e9:4a:4d:ed:d6:bd:b0:6b:77:f7:4d:0e:1b:2e:d3:21:
bb:11:3e:1c:62:9b:d4:32:c4:64:b9:4a:89:ed:ea:bd:79:eb:
da:fd:40:9c:6d:ed:0b:fa:5c:95:e2:6c:bb:d2:0c:af:b8:5d:
f4:b6:29:3c:38:ad:4b:0e:0f:6f:4f:88:94:92:92:39:eb:e4:
2d:26:ca:4b:66:08:ff:98:c7:aa:d6:73:55:44:36:7a:13:7a:
eb:dd:ed:9e:6a:9b:a3:66:e9:e7:67:77:2b:f6:58:23:be:08:
47:c4:b0:32:2c:e5:f2:60:72:42:85:fb:a2:1f:34:3b:e6:27:
15:ed:b6:a7:84:dd:e8:62:99:9f:ba:12:5e:68:01:80:a8:58:
1c:a8:f8:b9:8a:cf:81:ee:45:fd:12:e3:a2:15:b1:8a:fd:47:
ef:3a:7f:90:72:84:e3:6f:5f:77:96:ab:f7:18:2c:a3:64:f5:
22:3d:70:20:14:16:fd:4e:0a:32:43:63:73:cc:51:9e:95:67:
57:fa:ba:c7:ec:8e:0f:fa:cd:c4:f5:73:ef:c6:f4:6c:2d:55:
e3:3c:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org