Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-MWishqysKPXChQ2NJbIUPdeB9c.roa
File: 1-MWishqysKPXChQ2NJbIUPdeB9c.roa (raw, json)
Hash identifier: iRov0FiDjrTrWinH0UyqypzCH8cuHQTBQlS246Y+KT0=
Subject key identifier: F8:C5:A2:B2:1A:B2:B0:A3:D7:0A:14:36:34:96:C8:50:F7:5E:07:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E755938E00B8C936789C61802B310B524
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-MWishqysKPXChQ2NJbIUPdeB9c.roa
Signing time: Mon 25 Mar 2024 11:22:45 +0000
ROA not before: Mon 25 Mar 2024 11:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.75.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:59:38:e0:0b:8c:93:67:89:c6:18:02:b3:10:b5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 11:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8c5a2b21ab2b0a3d70a14363496c850f75e07d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:eb:73:b9:05:d7:d2:d9:e2:ba:7d:a3:d7:
03:8a:2c:31:bd:72:3e:47:77:9e:9c:75:a0:b3:7f:
dd:fc:98:01:65:24:af:b5:33:34:28:6c:97:a2:ac:
3b:34:f7:a4:0f:0f:48:39:ac:61:5f:2f:93:58:7e:
26:4e:ab:b5:84:b1:26:1a:c4:0c:72:d4:e7:39:da:
06:a7:4c:b1:aa:71:f1:2a:f7:bd:6d:96:cc:aa:70:
36:8a:12:52:5b:cf:40:ac:89:83:b4:6f:2f:f1:71:
51:6b:48:88:6b:f5:55:32:e3:ff:d9:91:38:d8:cd:
7e:c6:9a:09:e3:7f:9c:19:1b:7c:05:40:3e:de:11:
90:29:5b:8d:a2:55:e1:b0:5f:e6:6d:bf:46:fa:5c:
81:3a:41:db:f2:d5:e0:ea:08:38:d9:9e:52:13:d3:
df:16:15:bc:93:e1:35:ba:66:84:75:db:b2:26:cf:
ec:02:43:f9:43:ec:d5:78:c5:fd:2f:17:93:61:07:
7a:83:ad:c8:c0:a7:1c:fd:46:7c:7b:b0:6f:27:4d:
a8:2b:6d:e3:89:08:fe:0c:7b:56:3e:77:1d:c7:c4:
e8:73:5f:2a:70:aa:fc:4a:c3:09:ce:2b:eb:50:4c:
3d:fa:b5:bd:1b:83:4f:e7:fc:6a:93:2f:9d:f6:c1:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:A2:B2:1A:B2:B0:A3:D7:0A:14:36:34:96:C8:50:F7:5E:07:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-MWishqysKPXChQ2NJbIUPdeB9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
185.252.163.0/24
Signature Algorithm: sha256WithRSAEncryption
28:42:d2:13:6b:c3:c6:b5:08:15:21:34:e7:9b:23:d2:79:23:
35:b4:40:40:cf:31:f3:74:8e:eb:d9:cf:1a:d2:e3:fb:a9:e5:
7e:5f:0d:69:96:79:cd:1f:a0:6a:d5:95:fa:35:8f:65:27:0f:
6f:c5:6b:87:b5:72:ae:16:ea:d9:2e:dd:56:93:e7:d9:ca:0e:
e0:69:6a:08:5e:68:2d:29:af:e2:1c:4d:94:29:9e:8f:99:93:
2a:f5:9e:d0:72:58:ed:fc:7c:62:c5:dc:57:9b:bc:e2:c2:c4:
39:6c:2e:e7:9b:a3:59:5a:32:a9:0d:57:8c:5c:48:d6:2b:a9:
92:68:f8:8a:84:6a:d3:c6:17:e6:82:d6:d9:5a:b2:91:51:a1:
48:46:61:d2:ed:c3:3c:32:e5:6f:d2:17:d1:ea:01:e9:f4:82:
04:c3:9f:6d:57:66:b0:1f:f8:30:94:0f:03:5f:a4:24:75:6b:
e2:c0:06:ed:7f:d6:10:88:b9:11:89:fa:fb:0c:62:58:2b:45:
37:4f:c2:b3:b2:09:81:26:e7:22:6b:d2:78:32:bc:b3:3d:2e:
8c:72:db:29:21:8f:52:25:10:17:8b:7f:4c:0d:1e:d8:ce:4b:
d3:2d:57:10:ef:fe:12:5e:68:70:12:2d:b3:8a:e0:dd:8f:38:
cc:bc:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 03:57:59 2024 by rpki-client on console-ams.rpki-client.org