Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3LcEbjwmt9Vq4oYXu_mVcko_3QM.roa
File: 3LcEbjwmt9Vq4oYXu_mVcko_3QM.roa (raw, json)
Hash identifier: Fc2gQLYLG+2xcBkic+jP6iR/yEJmE3CEqXTKsg1zsII=
Subject key identifier: DC:B7:04:6E:3C:26:B7:D5:6A:E2:86:17:BB:F9:95:72:4A:3F:DD:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AF52C06784071A64B6AD18467642C4B8E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3LcEbjwmt9Vq4oYXu_mVcko_3QM.roa
Signing time: Tue 03 Oct 2023 10:53:37 +0000
ROA not before: Tue 03 Oct 2023 10:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216240
IP address blocks: 93.123.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:2c:06:78:40:71:a6:4b:6a:d1:84:67:64:2c:4b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 3 10:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb7046e3c26b7d56ae28617bbf995724a3fdd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:11:45:c5:32:f3:12:09:e9:7c:d9:8f:26:
a3:53:3d:79:a9:16:5e:e1:8d:72:e9:7a:be:95:b9:
9b:14:28:a0:e0:43:0a:15:aa:61:d3:79:42:e6:9e:
95:b0:70:89:86:72:23:58:64:c7:26:5e:67:90:2e:
ae:6b:37:bb:de:1a:c4:84:43:fd:76:49:f2:4b:f2:
d3:31:54:25:17:3e:1b:40:29:c1:1f:84:ab:6d:92:
b7:cc:d3:0f:8c:8c:23:be:45:a9:25:e6:a6:35:3e:
df:c6:0b:2b:af:62:1a:94:9a:f1:41:87:dc:32:c7:
b2:a6:bc:6f:c1:0c:67:a7:13:17:5a:9c:b9:90:9a:
df:fd:3a:b8:9b:39:4c:c7:ca:c6:12:44:1f:09:1f:
86:c5:80:3a:ad:5d:cc:3a:0e:1b:aa:58:ea:4f:31:
e8:04:1c:39:6c:d9:75:ea:a8:9c:37:aa:94:20:52:
7b:50:d1:85:68:ac:57:0a:fd:0a:69:88:8d:94:7d:
38:66:49:52:06:86:5e:82:94:fb:c0:50:6e:15:81:
b1:a8:b4:29:c1:66:8e:c7:3f:cf:67:fe:0e:11:53:
b0:82:35:ed:85:9f:d0:8e:32:c3:44:dd:25:fe:6f:
91:14:42:c6:f0:87:6e:84:2d:bc:6d:6a:4f:d7:4f:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:04:6E:3C:26:B7:D5:6A:E2:86:17:BB:F9:95:72:4A:3F:DD:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3LcEbjwmt9Vq4oYXu_mVcko_3QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.85.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a2:93:d6:32:60:65:33:56:d1:c9:01:4c:dd:ac:fd:8b:8d:
62:58:62:37:64:d9:be:99:1a:e2:25:d1:b7:67:54:ab:e1:f7:
22:f3:ab:98:0f:c7:0f:97:28:9b:a3:3c:90:81:94:b8:8a:a6:
8a:01:0f:b6:1f:98:8e:ec:c5:4e:77:aa:9c:f9:5e:ef:bd:57:
10:77:46:a2:43:04:cf:db:ef:2d:72:52:17:ef:9f:cd:10:c1:
ae:b7:a9:b1:c0:d2:bf:47:cf:a6:8b:53:e7:81:42:c7:33:32:
91:00:b4:d8:46:9e:2f:f2:b5:07:be:e6:6d:4a:98:a8:a4:b0:
63:b1:82:b4:4e:0f:92:75:0c:b9:db:42:36:02:55:9b:04:75:
0b:cf:60:b0:ce:8e:67:86:fa:6b:b8:16:f2:01:f7:b4:35:2e:
1f:47:cc:3c:59:aa:7c:0e:fc:7a:33:71:e3:d0:ce:3c:7c:22:
ff:ba:1f:00:65:85:36:b1:29:33:6c:08:24:06:8c:19:34:05:
26:46:c4:6a:c7:c1:8b:04:96:56:5b:cc:ec:78:39:cd:0c:fc:
e6:d8:7b:75:57:0f:0d:60:7d:4c:c3:2b:68:6e:a1:ca:92:da:
76:ad:dc:d5:4c:cb:f9:81:66:3c:14:d0:a0:49:b1:4d:9d:a0:
20:f4:ea:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr1LAZ4QHGmS2rRhGdkLEuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDAzMTA1MzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2I3MDQ2ZTNjMjZiN2Q1NmFlMjg2MTdiYmY5OTU3MjRhM2ZkZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLoRRcUy8xIJ6XzZjyajUz15qRZe
4Y1y6Xq+lbmbFCig4EMKFaph03lC5p6VsHCJhnIjWGTHJl5nkC6uaze73hrEhEP9
dknyS/LTMVQlFz4bQCnBH4SrbZK3zNMPjIwjvkWpJeamNT7fxgsrr2IalJrxQYfc
MseyprxvwQxnpxMXWpy5kJrf/Tq4mzlMx8rGEkQfCR+GxYA6rV3MOg4bqljqTzHo
BBw5bNl16qicN6qUIFJ7UNGFaKxXCv0KaYiNlH04ZklSBoZegpT7wFBuFYGxqLQp
wWaOxz/PZ/4OEVOwgjXthZ/QjjLDRN0l/m+RFELG8IduhC28bWpP10+zYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNy3BG48JrfVauKGF7v5lXJKP90DMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvM0xjRWJqd210OVZxNG9ZWHVfbVZja29fM1FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXtVMA0G
CSqGSIb3DQEBCwUAA4IBAQARopPWMmBlM1bRyQFM3az9i41iWGI3ZNm+mRriJdG3
Z1Sr4fci86uYD8cPlyibozyQgZS4iqaKAQ+2H5iO7MVOd6qc+V7vvVcQd0aiQwTP
2+8tclIX75/NEMGut6mxwNK/R8+mi1PngULHMzKRALTYRp4v8rUHvuZtSpiopLBj
sYK0Tg+SdQy520I2AlWbBHULz2Cwzo5nhvpruBbyAfe0NS4fR8w8Wap8Dvx6M3Hj
0M48fCL/uh8AZYU2sSkzbAgkBowZNAUmRsRqx8GLBJZWW8zseDnNDPzm2Ht1Vw8N
YH1MwytobqHKktp2rdzVTMv5gWY8FNCgSbFNnaAg9OpN
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org