Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Kc2qeRnpAKS83_CAZpyaTE20oE.roa
File: 2Kc2qeRnpAKS83_CAZpyaTE20oE.roa (raw, json)
Hash identifier: fMGSunhCoxfN1LYmWNHeSfToZfC03xqJKgIgzjLUQ/k=
Subject key identifier: D8:A7:36:A9:E4:67:A4:02:92:F3:7F:C2:01:9A:72:69:31:36:D2:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D82119352C831B37A09770B7A2DE3FB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Kc2qeRnpAKS83_CAZpyaTE20oE.roa
Signing time: Sun 01 Jan 2023 13:25:18 +0000
ROA not before: Sun 01 Jan 2023 13:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210106
IP address blocks: 93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:11:93:52:c8:31:b3:7a:09:77:0b:7a:2d:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8a736a9e467a40292f37fc2019a72693136d281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:0c:c5:c7:3f:c3:44:e8:ff:f8:02:21:7d:
d1:bf:28:a6:c8:f9:62:66:0a:1d:d5:32:8d:b3:6c:
8e:3d:22:78:89:57:70:66:60:c4:7c:5e:18:1b:ad:
57:1e:ce:0a:ad:42:9a:d4:ff:6f:d5:9a:cf:27:a2:
d8:ee:06:4c:0a:01:bc:be:76:b4:1c:fd:0f:de:44:
03:4c:0b:40:1d:43:f4:92:8b:a2:95:a1:1d:ce:9a:
47:70:ec:5b:1b:4e:cc:07:11:7b:3e:33:ad:44:36:
9d:73:0f:f4:1d:6c:42:4c:49:04:fd:3d:c9:32:b3:
a2:cb:90:07:0d:cf:f8:6a:30:e8:88:d9:e5:a2:84:
fc:64:c4:a5:5c:a9:34:8e:da:de:ca:31:e9:bd:f1:
5e:d2:ec:fc:7e:4d:57:6d:6f:a3:89:d0:2c:bb:21:
e8:d1:a7:80:e1:06:81:90:34:e5:1c:4b:a4:24:36:
b7:5f:34:55:74:11:ff:16:9c:51:18:5d:ea:b4:1b:
02:88:50:a8:fe:35:54:79:87:83:6d:5b:2a:5d:85:
a5:29:cc:e7:0b:ae:0b:0d:34:4e:ae:d3:0a:da:06:
10:5c:ae:f5:0e:18:60:f7:13:4e:b2:f2:5c:93:c0:
51:73:9f:5a:25:2d:cc:66:96:f8:b5:4e:45:ac:99:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:36:A9:E4:67:A4:02:92:F3:7F:C2:01:9A:72:69:31:36:D2:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Kc2qeRnpAKS83_CAZpyaTE20oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ff:ee:5d:22:9f:2f:28:da:a1:68:5d:22:ed:6f:48:02:84:
47:2a:76:fb:70:67:0d:08:6f:3c:1e:cc:f2:cf:a7:b8:b4:75:
f8:de:e4:e6:02:dc:70:f9:34:58:34:fe:68:25:c7:58:d4:5d:
46:32:d9:65:7a:0d:7d:f0:e6:04:5b:2c:c6:a1:3c:0e:f7:8c:
5e:f9:f8:6b:9f:5d:f7:dd:fd:1d:01:4b:4b:1f:1f:7d:81:a1:
7b:4a:9d:60:0f:59:d3:e8:7a:fb:5d:6e:87:cb:d5:c1:bf:27:
53:bd:21:a0:ed:eb:e5:ae:ac:81:1c:10:52:c5:09:66:b5:79:
28:48:4d:39:90:a0:26:e5:59:08:b1:a9:99:eb:37:84:08:1e:
1e:64:12:86:41:38:a5:b7:ea:ea:1e:29:df:05:ac:90:69:97:
ce:eb:00:68:ab:aa:ec:ab:01:bb:f4:cf:27:29:fc:85:23:d8:
47:7a:d2:a7:81:e3:3e:3e:d6:6b:49:9d:79:3d:49:d3:49:dd:
76:c5:56:86:6e:f0:f3:5a:9e:86:48:2a:77:ea:b9:5e:b7:b3:
98:50:ee:79:20:8d:05:ed:e3:1e:6b:f7:99:2b:bb:49:58:32:
12:96:b1:9c:a8:b3:65:48:d4:ba:6c:d0:b3:58:7f:e3:79:a6:
8a:2d:56:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtghGTUsgxs3oJdwt6LeP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGE3MzZhOWU0NjdhNDAyOTJmMzdmYzIwMTlhNzI2OTMxMzZkMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVcMxcc/w0To//gCIX3RvyimyPli
Zgod1TKNs2yOPSJ4iVdwZmDEfF4YG61XHs4KrUKa1P9v1ZrPJ6LY7gZMCgG8vna0
HP0P3kQDTAtAHUP0kouilaEdzppHcOxbG07MBxF7PjOtRDadcw/0HWxCTEkE/T3J
MrOiy5AHDc/4ajDoiNnlooT8ZMSlXKk0jtreyjHpvfFe0uz8fk1XbW+jidAsuyHo
0aeA4QaBkDTlHEukJDa3XzRVdBH/FpxRGF3qtBsCiFCo/jVUeYeDbVsqXYWlKczn
C64LDTROrtMK2gYQXK71Dhhg9xNOsvJck8BRc59aJS3MZpb4tU5FrJlXAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNinNqnkZ6QCkvN/wgGacmkxNtKBMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMktjMnFlUm5wQUtTODNfQ0FacHlhVEUyMG9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXsQAwQA
XXsWMA0GCSqGSIb3DQEBCwUAA4IBAQBX/+5dIp8vKNqhaF0i7W9IAoRHKnb7cGcN
CG88Hszyz6e4tHX43uTmAtxw+TRYNP5oJcdY1F1GMtlleg198OYEWyzGoTwO94xe
+fhrn1333f0dAUtLHx99gaF7Sp1gD1nT6Hr7XW6Hy9XBvydTvSGg7evlrqyBHBBS
xQlmtXkoSE05kKAm5VkIsamZ6zeECB4eZBKGQTilt+rqHinfBayQaZfO6wBoq6rs
qwG79M8nKfyFI9hHetKngeM+PtZrSZ15PUnTSd12xVaGbvDzWp6GSCp36rlet7OY
UO55II0F7eMea/eZK7tJWDISlrGcqLNlSNS6bNCzWH/jeaaKLVb1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org