Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0qx1oBVwJn52DZmvOvTNP4vLCfg.roa
File: 0qx1oBVwJn52DZmvOvTNP4vLCfg.roa (raw, json)
Hash identifier: gJQoFK0fde3lpB9TXPR1HRjyqTQvggY4g27JXWzCelU=
Subject key identifier: D2:AC:75:A0:15:70:26:7E:76:0D:99:AF:3A:F4:CD:3F:8B:CB:09:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B956AA2888B9FBCEFBA278367C916525
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0qx1oBVwJn52DZmvOvTNP4vLCfg.roa
Signing time: Wed 23 Oct 2024 12:25:17 +0000
ROA not before: Wed 23 Oct 2024 12:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 93.123.30.0/24 maxlen: 24
192.145.28.0/22 maxlen: 24
193.168.198.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 14:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:56:aa:28:88:b9:fb:ce:fb:a2:78:36:7c:91:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 12:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2ac75a01570267e760d99af3af4cd3f8bcb09f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:25:85:64:96:a1:47:6d:ff:20:6a:b6:71:
ef:6f:ca:5a:d2:14:55:37:99:b7:29:09:25:38:3f:
06:56:21:69:00:6f:15:18:00:8a:6c:af:ca:e2:c9:
fb:ce:c4:8d:0f:05:05:c4:2e:69:27:3c:d0:f5:4e:
d2:ec:d9:1b:cb:77:16:d3:ab:0d:68:9f:4e:83:17:
1d:c9:32:7d:e1:76:21:c3:b5:db:a9:f2:d7:5c:04:
dc:20:1f:60:b5:d4:ae:6c:17:38:0b:e1:ad:99:de:
1d:52:57:4e:e8:16:9b:74:aa:29:28:d1:f0:8c:66:
64:b6:3e:30:05:38:96:31:ab:06:64:c2:5d:71:c9:
77:1b:ad:8e:b9:11:ed:f7:16:7f:29:b2:dd:86:9d:
2e:36:48:5e:37:3e:b1:e6:0d:a8:6d:ab:89:a6:f8:
77:e2:52:b7:b3:5e:ec:b6:c7:b1:ce:5d:2e:b0:bb:
95:f5:bd:52:a5:f6:31:be:52:1f:66:90:86:2a:d2:
64:d5:7e:0d:c7:0b:00:ed:98:70:d9:c2:62:ab:4b:
f8:e2:97:8a:b0:38:05:0d:07:8e:34:a1:df:f0:ca:
e1:e6:d2:f9:6d:c6:ab:34:47:06:09:ee:56:b8:05:
1e:9e:5a:4a:68:9d:c7:2f:92:35:5b:22:0f:e3:0b:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AC:75:A0:15:70:26:7E:76:0D:99:AF:3A:F4:CD:3F:8B:CB:09:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0qx1oBVwJn52DZmvOvTNP4vLCfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.30.0/24
192.145.28.0/22
193.168.198.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ad:67:1d:8e:ef:46:e4:80:e2:35:12:b1:de:e5:80:03:6b:
f1:b4:cb:bf:ac:3c:5a:00:5a:be:7f:16:c6:87:c9:cf:24:88:
e9:6b:b2:22:90:a5:e8:e1:d2:d7:84:f1:0b:b9:71:18:da:5c:
c0:2f:f9:99:34:77:ca:64:51:d9:56:ed:0a:6d:35:74:e5:fc:
b0:33:c1:2c:c0:06:3f:c9:11:9a:38:1c:99:dc:2d:80:9e:de:
65:92:a6:d8:50:05:b7:80:03:e3:9d:50:0f:5f:45:a1:65:3d:
c0:b7:47:25:02:60:b5:4c:e1:2e:40:84:92:50:eb:7e:67:cb:
3f:c2:e2:63:e7:a6:68:1b:43:8e:50:52:1f:18:76:18:bc:d1:
88:ae:d1:a6:c2:d4:c0:59:09:db:41:be:c0:99:cf:34:b4:87:
56:d6:36:be:a7:0a:8c:65:2c:d4:22:4e:00:b2:df:bb:94:d2:
91:88:3b:ec:c2:8e:91:5f:c1:44:86:80:65:aa:02:7e:d5:6e:
f4:26:15:9f:f7:b7:c9:7b:6b:c9:7e:82:db:36:bb:36:15:ad:
62:35:e9:93:16:e6:a1:eb:12:03:c8:77:ec:9e:75:68:26:10:
8e:aa:3b:8f:80:e3:36:ff:1e:c3:9c:a5:49:a9:d4:85:b5:93:
32:88:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 16:41:12 2024 by rpki-client on console-ams.rpki-client.org