Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1Q5nOmgQOBPZTOgv2f5zXD2U0nE.roa
File: 1Q5nOmgQOBPZTOgv2f5zXD2U0nE.roa (raw, json)
Hash identifier: Yoye9LsCunjNt/UshwqNaytnDdBGfF+4+UpUzYUJvtU=
Subject key identifier: D5:0E:67:3A:68:10:38:13:D9:4C:E8:2F:D9:FE:73:5C:3D:94:D2:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01899B7695692C2CDE02BAD81D6BF381C339
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1Q5nOmgQOBPZTOgv2f5zXD2U0nE.roa
Signing time: Fri 28 Jul 2023 07:46:27 +0000
ROA not before: Fri 28 Jul 2023 07:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 94.103.125.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:76:95:69:2c:2c:de:02:ba:d8:1d:6b:f3:81:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 28 07:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d50e673a68103813d94ce82fd9fe735c3d94d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:34:48:ab:d2:15:7b:80:68:bc:31:88:ce:
12:27:10:24:8a:63:c2:53:d3:a0:e9:aa:94:2e:db:
b6:d9:4b:cd:e3:2a:a0:e5:3f:6f:82:41:1f:c3:b1:
2b:9e:a0:37:a0:11:89:de:be:b3:d6:0b:94:65:47:
1a:d3:69:0b:fc:9a:2e:b6:74:d4:3a:a6:60:ad:6e:
7d:d9:48:f1:96:f6:a4:a3:13:94:57:e3:ca:41:1f:
5d:f2:86:5d:58:49:a4:2c:99:98:41:84:32:1c:0a:
41:51:f5:06:93:66:d4:57:48:26:59:19:1e:e9:c5:
7c:29:1a:71:6e:d6:13:24:ee:37:60:b3:07:db:68:
d0:dd:12:ca:93:e7:23:e2:62:92:25:f6:d5:8d:56:
9d:e2:26:35:7f:30:20:63:d6:56:1b:9b:91:3a:7d:
86:28:8b:e3:37:67:6c:1d:d9:ea:02:5a:f4:89:8d:
5e:22:4f:db:39:3c:ac:65:80:96:db:7e:81:a5:8c:
66:ab:34:9d:b2:41:09:89:b3:6d:79:36:f5:15:6b:
3f:58:38:a8:82:1a:ba:37:48:a7:6f:5b:b3:71:5e:
79:14:f8:7d:44:77:b7:84:fb:3c:8c:68:7a:89:39:
b4:3a:55:cc:f9:fe:11:2a:f8:3f:6f:e1:0b:fb:01:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0E:67:3A:68:10:38:13:D9:4C:E8:2F:D9:FE:73:5C:3D:94:D2:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1Q5nOmgQOBPZTOgv2f5zXD2U0nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.105.0/24
94.103.125.0/24
178.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
45:23:cd:e7:3c:81:56:8e:d6:b1:0c:29:66:b1:e6:62:07:97:
0d:eb:1d:a2:08:af:d0:49:12:98:e0:26:16:7c:7c:62:81:68:
ca:f9:75:f1:fe:1b:a2:8e:de:54:7b:25:13:ae:33:dd:76:23:
e1:7c:d0:47:97:be:64:a0:89:b7:55:04:df:0d:c5:db:96:71:
b4:7b:28:4b:0d:4f:bf:db:3e:45:f9:2f:3b:b1:a3:f8:72:d0:
0d:0f:e2:83:60:80:3f:2c:9f:69:a4:2c:89:3a:8e:6a:11:3d:
73:ff:2b:41:df:fe:8f:b3:27:14:ed:8a:d8:e4:0a:e8:14:96:
84:f9:3a:a4:71:61:8c:77:8d:bc:1f:23:fc:9d:8a:ec:9e:29:
ef:04:0b:c9:b9:e0:d7:a8:b2:fb:65:e0:77:e1:af:8b:ad:ff:
51:ac:52:d7:c7:78:76:98:ec:b9:e1:df:f3:18:64:6f:0f:61:
02:28:6d:95:5e:eb:ba:b8:93:cb:a2:6a:22:10:e7:34:41:5d:
bf:b4:83:94:82:96:4b:93:c1:5a:f9:c4:a7:06:82:7d:cb:10:
e4:8e:a2:ff:35:fe:c9:b6:27:70:31:da:df:2b:ed:57:3e:88:
57:f1:53:4a:ac:25:ab:d4:9f:e5:38:e2:84:19:72:14:35:0b:
47:9d:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 13:45:06 2023 by rpki-client on console-ams.rpki-client.org