Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2tOKMfZZbdmex6oVfNi_3XxShCU.roa
File: 2tOKMfZZbdmex6oVfNi_3XxShCU.roa (raw, json)
Hash identifier: iBgrTdal/+k4HSySReJq1CdCukgK3KLmzRRRzIC1YjY=
Subject key identifier: DA:D3:8A:31:F6:59:6D:D9:9E:C7:AA:15:7C:D8:BF:DD:7C:52:84:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191FC8C76133EE5805FAAEF54D281709731
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2tOKMfZZbdmex6oVfNi_3XxShCU.roa
Signing time: Mon 16 Sep 2024 20:35:49 +0000
ROA not before: Mon 16 Sep 2024 20:35:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 93.123.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fc:8c:76:13:3e:e5:80:5f:aa:ef:54:d2:81:70:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 16 20:35:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dad38a31f6596dd99ec7aa157cd8bfdd7c528425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:82:3e:37:a5:bd:1c:f5:86:e6:2e:d1:92:
7b:d3:19:18:60:ed:80:be:e6:cd:00:27:9d:a4:a3:
7d:c5:90:65:cf:5b:e6:c2:eb:51:24:66:ef:1b:95:
25:64:0a:10:8c:90:5a:a5:c5:c2:96:3d:5a:4a:f0:
82:96:d2:bc:63:c3:94:c9:c5:5e:af:b4:65:45:2d:
ba:de:07:6c:e9:bd:63:a7:2a:b9:98:f7:7b:7e:b5:
e7:5f:10:9e:fa:57:5f:62:5b:b1:ae:05:84:67:ec:
5d:75:e1:3b:d5:18:53:16:26:97:cc:ed:3a:18:d1:
8e:55:e7:68:e3:11:01:42:fc:5c:f9:cd:c0:cf:57:
c3:ce:31:b8:17:dd:7c:61:45:88:50:69:52:85:14:
e7:ba:26:f6:bc:31:b8:42:05:d5:a7:e9:3c:c6:7b:
a7:d9:e9:ca:0c:59:4a:cb:91:a8:40:cb:d1:d6:cb:
c4:21:ee:0d:1f:47:69:71:eb:cd:ce:16:75:6f:02:
2d:b0:4f:92:9f:02:0d:1a:00:cf:e1:a5:b2:d1:ab:
be:34:51:c9:8b:01:26:e6:f8:04:81:f5:85:b4:7e:
5b:e4:5e:28:9d:53:82:04:b8:86:b4:b0:a5:61:c8:
6d:50:dc:50:48:db:79:fb:40:31:5d:6d:b0:17:63:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D3:8A:31:F6:59:6D:D9:9E:C7:AA:15:7C:D8:BF:DD:7C:52:84:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2tOKMfZZbdmex6oVfNi_3XxShCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.113.0/24
Signature Algorithm: sha256WithRSAEncryption
95:40:40:a8:5b:4d:ef:d9:ec:a9:c2:94:b9:8b:47:d5:f4:40:
4c:59:4c:1c:0d:c4:cb:9f:1c:19:37:42:da:ec:3b:e5:a4:cf:
cd:fe:84:84:ad:f3:56:cd:8d:f7:52:31:d3:62:fa:8a:95:03:
4f:12:6e:67:8c:1b:0e:2e:9d:0a:e2:7a:70:a4:c0:94:98:17:
fd:2a:21:82:5f:d9:e4:47:df:60:36:99:b2:b7:df:b4:6d:52:
88:da:34:8e:56:22:d0:2f:5a:14:71:60:b4:47:ea:77:31:9a:
79:74:71:b6:b7:ba:40:3e:e1:71:0c:5a:c3:9a:ec:ee:bf:45:
8f:a4:12:c7:17:a4:b0:33:6c:f3:23:36:4f:ad:88:11:8f:fd:
f7:57:65:2e:77:b1:65:45:96:4d:35:b8:6f:a8:e0:63:e6:ad:
1a:2b:a5:c5:d9:0c:4a:ab:05:7a:12:ca:25:49:6b:45:8c:d0:
d0:2f:e1:8a:69:e5:31:c9:18:af:38:98:af:a6:0a:9a:e9:7c:
e3:00:49:ce:6f:77:ca:4f:51:ef:ea:1a:3c:df:ea:25:e3:2f:
c9:c0:df:0d:0e:6a:c3:d5:12:5f:a2:41:33:3b:2c:dd:95:7a:
9d:b9:5f:bf:85:40:43:44:f6:37:a0:f8:9d:8c:cf:5c:6d:80:
6c:d1:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:39 2024 by rpki-client on console-fra.rpki-client.org