Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-sQeu2yPk3d7kZgraw2rbSivrtc.roa
File: 1-sQeu2yPk3d7kZgraw2rbSivrtc.roa (raw, json)
Hash identifier: i0JJ/8VpaWsCWTBhAN0VuxQ0JU4h6eQR8MouqV+gZAM=
Subject key identifier: FA:C4:1E:BB:6C:8F:93:77:7B:91:98:2B:6B:0D:AB:6D:28:AF:AE:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C483349D9A595D6F0CC81774944BD9777
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-sQeu2yPk3d7kZgraw2rbSivrtc.roa
Signing time: Fri 08 Dec 2023 06:52:49 +0000
ROA not before: Fri 08 Dec 2023 06:52:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:33:49:d9:a5:95:d6:f0:cc:81:77:49:44:bd:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 8 06:52:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fac41ebb6c8f93777b91982b6b0dab6d28afaed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:50:f6:5a:c5:53:ed:d5:03:4b:fd:61:6e:
3c:ce:ac:fa:93:7d:14:71:e4:ce:bf:ad:ff:43:d6:
02:3a:55:c8:5e:0b:13:f6:2f:98:f9:f1:7c:c2:e2:
39:55:42:0c:4f:65:46:5f:09:5d:30:70:45:58:36:
0f:7f:78:29:a0:29:c8:3d:78:0a:a6:22:f4:1b:be:
4d:28:9f:14:34:03:f7:91:f9:34:df:a8:18:62:22:
f1:80:09:33:b7:d1:46:38:2f:8a:2e:90:21:30:aa:
90:29:3c:25:81:43:5e:00:85:4a:a4:6e:80:f4:7b:
bf:d3:19:4b:dd:35:3d:a6:56:c0:6b:e9:c3:92:48:
38:6b:7c:8e:e1:d6:79:44:01:a3:d7:2d:ad:7c:a3:
ee:69:0c:ff:89:45:3a:bd:7b:ac:c4:1e:9f:f0:0a:
52:55:90:f5:3a:93:78:61:9f:5f:0c:08:26:8b:d4:
a7:0b:f1:d1:93:5b:43:e8:e5:80:f9:f3:c4:c8:55:
52:c6:5a:59:8a:b5:dc:0c:09:0e:a5:3c:7b:89:18:
1b:02:f5:ca:36:04:cc:03:42:15:ba:39:20:4e:09:
48:a5:01:0c:35:22:21:68:ac:9f:b8:10:ac:31:4d:
2f:71:57:e7:be:aa:35:33:40:6b:33:43:e6:a5:0a:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C4:1E:BB:6C:8F:93:77:7B:91:98:2B:6B:0D:AB:6D:28:AF:AE:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-sQeu2yPk3d7kZgraw2rbSivrtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
01:58:9c:9c:30:4b:d8:fe:ce:31:76:5d:bd:52:8f:10:ab:45:
80:b0:48:e3:cd:bb:a1:64:cf:d6:a9:ff:e4:6d:53:31:13:0c:
7f:9e:6a:27:aa:17:c5:9d:bc:67:1d:a4:b9:a0:4d:fb:e4:33:
70:6b:9a:7f:4f:a2:71:8c:94:3e:f7:37:1c:20:ff:66:d2:35:
18:a9:3b:b3:05:59:a3:b8:e1:c1:61:72:76:09:d8:60:6c:b0:
5d:e9:ba:9f:ec:67:d3:0e:0d:e0:e8:09:fd:51:70:07:4a:d7:
60:5b:b5:68:14:b5:05:0c:13:de:e9:89:73:c2:07:fa:ca:3b:
96:e6:14:09:59:5b:99:aa:63:95:23:3c:3a:58:ad:ad:8e:7d:
59:30:d4:09:72:6e:87:07:2c:48:14:eb:92:7e:d2:71:c6:99:
a8:5e:a0:2e:92:f0:82:09:ac:35:a1:90:63:81:b7:9d:07:bc:
8e:df:3f:1a:0e:49:fd:ed:af:69:a6:06:ae:e5:93:5b:37:6e:
9a:9b:e4:73:ec:82:8f:25:7c:b9:0a:88:98:8c:86:fe:ac:f1:
4b:cd:25:e8:9c:a8:98:95:fa:e3:c8:1b:c4:86:95:b6:40:f0:
3c:0e:e6:04:d3:98:27:96:b2:25:3f:44:b8:88:fe:d9:c9:45:
f1:ed:3e:ee
-----BEGIN CERTIFICATE-----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==
Generated at Thu Dec 21 21:25:55 2023 by rpki-client on console-ams.rpki-client.org