Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4HAfcUIZTW088eQMihOOT9jMR0c.roa
File: 4HAfcUIZTW088eQMihOOT9jMR0c.roa (raw, json)
Hash identifier: MAAxEYhPQDaARWzbp6eQeedNHfcXQh72xjaC9NDcx2k=
Subject key identifier: E0:70:1F:71:42:19:4D:6D:3C:F1:E4:0C:8A:13:8E:4F:D8:CC:47:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A222513BF18925C93094E9FE559254C81
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4HAfcUIZTW088eQMihOOT9jMR0c.roa
Signing time: Wed 23 Aug 2023 11:26:09 +0000
ROA not before: Wed 23 Aug 2023 11:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
45.8.94.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:25:13:bf:18:92:5c:93:09:4e:9f:e5:59:25:4c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 11:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0701f7142194d6d3cf1e40c8a138e4fd8cc4747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:6f:0d:79:01:8f:28:65:7e:a8:cd:31:15:
bd:25:e2:b1:0d:e7:fc:0e:cd:db:45:c1:ef:67:74:
1b:2c:aa:8c:5a:3d:49:36:11:bb:03:7d:de:ca:f9:
63:4f:aa:76:7c:66:94:dc:be:89:f7:68:30:e8:83:
d7:d6:21:58:8c:d5:45:98:c9:47:a1:42:c0:06:8b:
a9:11:08:8d:2d:00:57:9d:d2:75:85:e6:59:d7:1a:
70:f2:99:85:d2:d9:96:d5:78:73:ae:0f:a2:92:ca:
c9:12:5d:f1:3e:43:aa:ad:2f:79:e7:06:ff:13:c5:
00:2b:04:bb:30:3a:1a:51:a3:11:66:c7:75:40:5a:
f3:4c:39:3d:ca:2e:d0:06:0b:77:a4:22:0c:06:5d:
7e:3e:b2:e1:b9:ec:dc:0d:9e:87:a8:9f:df:25:32:
19:9b:27:14:bb:d4:e0:aa:91:d5:f3:21:51:a7:df:
b6:45:4e:a4:43:a4:2a:bb:67:c3:2c:ad:bd:3a:35:
73:31:4d:51:7d:2b:02:c3:a8:1a:17:ea:de:e4:05:
ee:8c:2e:db:79:9c:57:71:16:39:ab:33:20:02:22:
9c:55:4d:8e:8d:ad:c3:c8:41:34:53:42:86:5d:ea:
cd:20:9f:b1:36:75:c5:d2:61:f4:cb:62:44:8b:94:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:1F:71:42:19:4D:6D:3C:F1:E4:0C:8A:13:8E:4F:D8:CC:47:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4HAfcUIZTW088eQMihOOT9jMR0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
45.14.166.0/24
83.219.99.0/24
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f2:96:5a:66:45:65:e9:45:58:aa:51:43:20:9f:6c:d9:54:
d2:b9:53:5a:a2:7f:97:1d:88:36:ee:c8:13:a8:c4:9a:8e:e4:
08:ff:5d:50:fc:a5:d4:e3:85:31:f3:13:00:d6:1d:be:c5:e8:
bb:54:25:bf:0e:1b:82:57:20:6a:c3:93:3b:94:9a:8e:ae:06:
4b:30:9f:7e:ee:0a:dc:3b:f7:72:89:a6:84:74:29:df:49:f9:
4f:78:17:91:c1:f7:af:0e:5f:4f:a0:38:a5:22:7d:54:53:14:
99:2c:18:6f:05:c2:97:7d:c0:1f:5a:5b:ad:80:dc:d0:cc:3e:
5a:6b:76:ef:93:ec:0f:af:d3:03:93:b7:15:12:ab:b9:d4:02:
59:7e:ec:18:f2:c6:3b:bf:41:33:0b:cb:9f:55:f6:8f:d7:e7:
ff:ca:cb:6a:a9:ac:37:a1:7c:57:71:b2:c3:cd:c1:26:93:0d:
ca:c9:32:d0:fd:33:a9:58:94:33:2b:88:18:6d:07:8d:5c:96:
d0:5b:80:56:e3:13:9f:d2:10:21:09:89:5f:21:09:9a:e3:ed:
09:dc:39:3a:a9:43:ba:0e:c0:b9:a5:e9:46:b1:0e:b1:bc:89:
5a:f7:ad:7e:59:03:1a:cb:14:c5:45:34:34:eb:03:40:7f:c7:
85:63:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 18:33:58 2023 by rpki-client on console-ams.rpki-client.org