Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4dJLJcOI_DQ8dLdblxUcXHrDnVk.roa
File: 4dJLJcOI_DQ8dLdblxUcXHrDnVk.roa (raw, json)
Hash identifier: RjPJ5D1ToMLSszz4pBdqbloj3ZIztxSSjCktcFTH2L8=
Subject key identifier: E1:D2:4B:25:C3:88:FC:34:3C:74:B7:5B:97:15:1C:5C:7A:C3:9D:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81FD1180C44500FF90F40B4B6CD695
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4dJLJcOI_DQ8dLdblxUcXHrDnVk.roa
Signing time: Sun 01 Jan 2023 13:25:13 +0000
ROA not before: Sun 01 Jan 2023 13:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198860
IP address blocks: 93.123.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:fd:11:80:c4:45:00:ff:90:f4:0b:4b:6c:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1d24b25c388fc343c74b75b97151c5c7ac39d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:3d:41:e6:90:1e:4d:34:77:55:bf:d5:ed:
46:91:c3:00:f8:63:4a:6d:77:bd:ed:07:3e:0d:13:
d1:88:e7:90:13:d3:e3:cb:b6:32:bb:fb:bd:d6:bd:
5d:a5:93:d3:b7:7e:64:14:a8:48:93:11:24:48:97:
cf:01:3a:4f:a2:e5:38:5e:52:f1:79:f9:c3:75:23:
91:8e:09:d4:7b:8d:a0:a3:3e:64:0a:ba:f4:ea:63:
5f:50:8d:b5:ea:b5:ae:a4:6e:77:0f:e8:34:ee:1c:
d3:03:81:09:ef:ba:ac:d6:8d:e2:92:64:53:3c:91:
f1:ae:89:28:0e:8d:f6:0c:33:89:75:d5:8e:d4:e1:
31:28:4f:6a:b8:25:8d:ea:9b:de:93:dc:c8:67:41:
7d:2f:8a:90:be:ca:eb:4c:5e:ed:42:6c:62:09:a6:
97:1c:eb:ac:85:74:49:9f:7e:e8:e8:d8:bb:52:b4:
40:18:8d:5c:2a:a9:b3:c9:43:d3:44:6d:d1:0a:51:
ba:80:6a:56:13:c7:d9:46:53:7d:18:4c:bd:af:cd:
25:73:ed:a4:36:83:bc:45:c5:32:d1:50:4a:ca:8e:
b6:5f:5d:f2:4e:47:20:0b:79:6e:85:b8:77:61:d3:
17:cc:8f:79:d5:5b:a6:17:3f:38:15:1c:02:35:f8:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:4B:25:C3:88:FC:34:3C:74:B7:5B:97:15:1C:5C:7A:C3:9D:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4dJLJcOI_DQ8dLdblxUcXHrDnVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:57:a1:de:5e:a3:67:1b:7d:55:72:93:09:64:70:20:8f:51:
67:2f:14:44:ec:b0:8c:fc:54:e7:87:6b:ae:a4:bb:7c:03:4d:
ba:e4:1d:07:8e:85:e1:73:9e:fa:4a:98:7f:fa:da:ae:db:be:
41:d3:dc:e4:06:78:b0:c7:ba:20:48:b5:70:80:43:21:a7:1b:
9e:aa:51:ba:6f:67:b1:09:42:96:4a:fb:d5:da:f3:e3:e3:db:
22:76:60:90:7e:6b:70:80:a3:a4:42:9a:d7:b0:1d:4b:78:99:
c3:b9:00:c7:fd:92:ae:17:8d:cb:cf:93:1c:69:b0:b8:cd:d3:
c4:b2:1b:46:ab:9e:e1:84:b7:2f:aa:a8:c0:0b:cd:92:35:3c:
4b:00:00:0a:5d:51:a5:6e:b4:62:73:4d:87:82:d0:38:08:a5:
61:3e:4b:59:22:d5:9a:c1:7d:92:22:eb:47:bd:99:13:f2:a8:
d6:46:30:30:1c:db:aa:6f:d9:6c:5c:a2:09:0a:40:a3:e8:8f:
84:05:7c:b2:29:a6:1b:0b:95:df:2c:ee:0d:f1:fc:ec:69:f2:
0f:91:cd:f2:21:bd:59:83:d7:15:de:55:b2:19:4a:db:44:18:
59:b6:43:f1:6b:a8:73:e5:41:24:7f:7e:31:a7:70:55:db:8e:
13:9f:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org