Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KIhKMeHK-_8hpEKsPvmvx7xwns.roa
File: 6KIhKMeHK-_8hpEKsPvmvx7xwns.roa (raw, json)
Hash identifier: TUVT2Szgmkftb91pQCXPvBWFbiee/Jr3/EHN4XTa3E8=
Subject key identifier: E8:A2:21:28:C7:87:2B:EF:FC:86:91:0A:B0:FB:E6:BF:1E:F1:C2:7B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B5A6209D8DA4BF6AE0991DCE99C9286E9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KIhKMeHK-_8hpEKsPvmvx7xwns.roa
Signing time: Mon 23 Oct 2023 02:34:16 +0000
ROA not before: Mon 23 Oct 2023 02:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 164.40.185.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:62:09:d8:da:4b:f6:ae:09:91:dc:e9:9c:92:86:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 02:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a22128c7872beffc86910ab0fbe6bf1ef1c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:21:5f:b8:94:e3:bf:79:17:ab:be:70:fe:
01:78:b8:24:b0:14:ca:9a:a0:4f:c2:ee:a3:01:8f:
14:40:c6:0b:ff:2d:2b:67:64:64:7b:0f:8e:ee:76:
d7:39:0e:f9:42:d8:22:48:4c:1c:4c:16:98:f8:fd:
db:8e:89:f8:dd:14:a1:7e:5c:fd:84:e7:67:c3:2e:
10:75:d1:a1:a3:ac:6c:74:e6:ae:61:8c:e1:91:9b:
ca:be:fa:e1:75:68:dd:2e:a5:cf:f8:3c:fa:c9:95:
67:c9:31:88:58:a4:bb:6b:22:02:92:d1:ff:c8:77:
b2:41:e9:d1:e7:23:8c:23:a8:35:9f:49:26:c0:fd:
9b:37:a0:68:06:08:fd:76:dc:6b:94:c7:ca:b1:bc:
9d:0b:6e:78:08:e6:35:8a:f5:1d:cb:34:ba:d9:c1:
c0:5d:ae:d2:cd:7f:3f:d4:e9:02:01:59:12:57:f3:
5d:ad:9b:ba:02:fe:ec:7b:b9:f4:2b:9b:17:f4:f0:
f8:33:ff:ce:6c:fd:a3:5f:ff:15:be:d8:62:d1:46:
44:28:9a:39:3a:43:61:d6:07:87:13:c9:be:f0:42:
2b:58:ee:30:da:10:5d:b9:f3:9f:19:2d:2f:de:08:
19:f4:1e:a0:35:68:1d:58:39:26:c4:f2:15:49:7a:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:21:28:C7:87:2B:EF:FC:86:91:0A:B0:FB:E6:BF:1E:F1:C2:7B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KIhKMeHK-_8hpEKsPvmvx7xwns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:82:bb:82:bb:48:0e:94:64:81:8f:cb:65:34:64:06:67:3d:
13:75:a1:32:72:41:d7:06:4f:f4:78:a0:b9:fa:fe:79:f8:19:
23:04:ff:71:76:34:a2:b8:82:25:25:a7:e2:f7:80:bb:d0:00:
58:07:1f:41:29:cc:6f:1d:39:b1:69:82:38:9f:4d:aa:a2:9b:
e3:92:55:87:20:ee:2d:7a:6c:03:a0:81:2f:7b:e8:34:6c:7a:
e6:5f:a5:70:0d:f8:cc:78:4b:08:72:18:e0:e0:93:0e:68:3b:
7e:e7:ac:45:d9:78:61:c6:31:4b:8a:21:ee:66:30:09:92:ac:
ae:b7:27:25:55:94:19:81:83:43:fb:de:0b:02:63:e0:28:28:
6d:72:ea:55:dc:cc:09:2a:e9:56:22:e0:06:6f:2c:5d:ac:35:
f0:c1:bc:b1:74:6d:fe:7b:1f:59:cc:5a:17:e3:87:8b:c8:7a:
de:1f:49:c9:d7:77:91:49:dd:a8:e9:bf:bd:7a:46:42:50:78:
58:c6:5a:92:bd:59:da:8f:0f:a7:9e:db:f2:2d:97:9d:31:a3:
4f:b2:ce:35:8a:68:cf:87:a2:a0:0f:6e:3e:18:de:84:f1:2a:
93:82:f7:25:01:cb:cb:ac:ba:39:24:d4:6a:7b:42:fb:de:f5:
b0:54:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 07:27:24 2023 by rpki-client on console-ams.rpki-client.org