Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6quT5y52jzdCkUnT3gJ_W3kd31A.roa
File: 6quT5y52jzdCkUnT3gJ_W3kd31A.roa (raw, json)
Hash identifier: CAQa5uREJnagj8cp7w97ZGF1f726Y9FuydGNJXMBJ+A=
Subject key identifier: EA:AB:93:E7:2E:76:8F:37:42:91:49:D3:DE:02:7F:5B:79:1D:DF:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4153A8AC08F6D7C8A62F78825AC7292B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6quT5y52jzdCkUnT3gJ_W3kd31A.roa
Signing time: Tue 29 Aug 2023 12:45:16 +0000
ROA not before: Tue 29 Aug 2023 12:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200785
IP address blocks: 93.123.84.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:53:a8:ac:08:f6:d7:c8:a6:2f:78:82:5a:c7:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 12:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaab93e72e768f37429149d3de027f5b791ddf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:ee:77:b2:0e:c2:d3:d1:7c:59:c7:7c:6f:
ef:8a:2f:d4:90:6f:82:26:c0:d0:4e:0b:5c:4a:03:
b0:37:fe:b5:43:5b:b3:1a:12:88:75:2d:a1:98:ff:
44:51:e2:f3:9a:a0:d3:6c:f4:ed:d5:9c:e9:67:42:
b8:18:e7:1d:bb:27:ad:1c:ab:2d:9f:4f:4c:58:58:
be:3d:63:de:61:b4:94:74:7a:57:c9:05:d2:40:32:
6c:01:67:99:8b:bb:7f:38:b4:36:91:6c:a2:cc:75:
f4:af:57:62:f7:24:53:09:29:f4:0f:00:ba:d1:c5:
b5:b3:30:be:46:67:3b:13:cf:d7:1c:7d:66:a5:59:
fd:dd:f9:41:0d:01:69:0f:49:00:36:a3:64:ac:ad:
fd:17:71:ac:0c:b0:72:55:15:75:6a:bc:0c:43:b6:
ca:9f:d0:36:f1:af:5f:ab:34:45:dc:a1:96:ed:6c:
ed:f0:9e:2a:7a:06:e0:57:60:ad:86:66:b1:5e:fd:
8a:c5:2d:4e:ef:55:5a:c0:b4:c8:ba:fa:98:14:e0:
10:16:7c:26:9d:fd:4c:38:fc:d2:d0:fc:a6:11:f0:
fd:c6:ae:9d:8c:2b:1b:ba:f8:2c:7d:9c:77:69:f2:
75:b6:e0:2f:31:94:b8:02:0f:c3:cf:50:cd:53:22:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:93:E7:2E:76:8F:37:42:91:49:D3:DE:02:7F:5B:79:1D:DF:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6quT5y52jzdCkUnT3gJ_W3kd31A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
45.139.106.0/24
87.120.33.0/24
93.123.84.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9f:27:31:cc:0c:94:97:0d:5e:3d:64:b6:3a:69:66:4a:76:
75:72:0f:51:ae:5b:cf:31:63:b0:91:48:a8:e4:76:f2:16:86:
99:31:ca:6e:e9:c7:48:3c:a4:d7:c1:2b:77:28:29:43:46:88:
c0:18:76:b6:a0:8e:b5:53:78:5f:52:71:a0:ec:1e:83:d6:8e:
38:3e:32:32:b6:01:44:4e:87:89:a5:af:b9:bb:a4:36:a7:0d:
a9:52:cc:80:de:a3:34:36:cb:39:29:ce:d7:0a:b4:37:5d:1f:
0d:aa:00:19:81:cb:dd:0a:67:de:5a:61:c9:d4:be:fe:77:ed:
96:9d:42:64:aa:86:26:33:6d:e2:e4:d6:85:55:07:4b:4a:a3:
3a:4d:06:33:0e:88:9d:2a:31:4f:6b:18:09:0f:6b:41:20:9e:
17:7f:20:54:ec:6e:31:69:b5:4d:ca:ad:c0:3e:04:a9:f4:7a:
ad:3b:82:5c:01:22:6b:a1:5c:56:56:ef:7b:1b:d3:53:a2:42:
96:8b:05:32:7e:9f:08:93:8f:93:7e:1b:c7:e8:21:81:f2:41:
73:fa:91:8c:03:7e:ea:0f:a0:27:6c:8b:c7:21:cd:20:f8:2e:
1c:b4:6b:b2:f9:24:2f:64:1e:4b:d4:49:15:37:1c:2b:cf:33:
a9:c8:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 16:57:54 2023 by rpki-client on console-ams.rpki-client.org