Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7EN5g6AA0wmsIScXqufjkUq63G4.roa
File: 7EN5g6AA0wmsIScXqufjkUq63G4.roa (raw, json)
Hash identifier: lSJBsg4UpwDcXvw4azDqbeYg3fg4HniRUxJeDb33iW4=
Subject key identifier: EC:43:79:83:A0:00:D3:09:AC:21:27:17:AA:E7:E3:91:4A:BA:DC:6E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CEDA372435093FE51081DA6FAC38E281C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7EN5g6AA0wmsIScXqufjkUq63G4.roa
Signing time: Tue 09 Jan 2024 09:52:40 +0000
ROA not before: Tue 09 Jan 2024 09:52:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 19 Jan 2024 11:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:a3:72:43:50:93:fe:51:08:1d:a6:fa:c3:8e:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 09:52:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec437983a000d309ac212717aae7e3914abadc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:d9:37:d9:27:ac:dc:b2:58:b9:66:ec:20:
ad:9d:3d:52:86:c9:f2:ab:60:64:28:1b:c4:ab:f6:
f5:f2:90:7c:48:37:ff:72:38:a6:da:e9:46:2d:84:
2a:f5:20:1a:40:c2:e1:2a:36:8b:74:f9:3e:60:f2:
85:1d:50:15:33:ea:e8:96:b7:d1:d7:6c:9e:62:e6:
42:e4:65:da:da:5d:bc:b7:49:9e:3e:91:39:4b:f6:
ff:16:07:11:02:47:9a:42:80:a7:4a:35:29:a4:3f:
99:18:6b:f1:6e:68:9f:f4:49:e0:76:3e:e7:0e:a1:
55:0e:79:62:dc:15:e2:fa:f3:46:07:a8:fc:8e:e6:
21:85:59:78:89:ad:a6:41:a8:d7:18:f6:ae:a5:14:
dd:99:55:c2:8c:1a:ac:86:05:b8:e9:38:53:c6:5b:
2d:69:da:b5:3c:52:30:14:b3:4e:4d:57:d6:c9:b4:
e1:dd:71:7c:99:fc:de:59:89:6f:aa:88:a3:10:a3:
a2:d8:2b:1b:4f:c1:3d:da:5f:c7:d3:9d:ff:d9:f9:
3d:2e:d9:3f:76:88:77:b8:b9:f0:70:39:b7:2a:5d:
4c:1a:6f:c5:9c:c9:f6:16:11:13:e2:d4:c4:5d:cf:
cf:2f:f1:8b:d8:3c:0f:6c:cb:62:3b:ff:6a:c8:43:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:79:83:A0:00:D3:09:AC:21:27:17:AA:E7:E3:91:4A:BA:DC:6E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7EN5g6AA0wmsIScXqufjkUq63G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:03:ad:ed:e9:83:79:f9:56:bf:59:f1:ca:bc:c4:0d:1e:39:
81:21:7d:cb:eb:1a:52:4e:41:ef:9c:c7:8d:8a:43:87:c3:f9:
ed:74:0d:17:a6:6b:83:76:c7:40:18:a1:6c:d4:74:17:b7:db:
a9:e0:b1:ce:79:ce:c4:56:a6:74:86:a1:aa:fe:74:94:b6:f6:
11:b5:2d:50:74:56:aa:29:82:58:93:c8:0d:01:8e:7e:35:87:
b6:82:b8:b4:0b:2b:85:7a:b4:63:87:9e:7a:a2:9f:37:23:49:
17:48:92:ee:bd:40:38:bb:e2:4f:48:c8:d8:85:2a:b7:25:55:
e0:55:64:c6:b1:06:98:a8:b8:9b:1b:74:01:7a:4a:0e:08:98:
5d:b8:97:07:f5:22:7e:28:cd:75:78:48:39:33:db:80:5c:8f:
4d:f2:02:93:7d:d8:cc:fa:1e:be:f2:1d:fe:e3:b5:a4:3a:cf:
85:cb:5c:3a:36:25:b2:8f:e7:a6:61:7d:53:73:2d:72:40:a8:
c6:6b:bf:10:f3:4e:57:6c:0a:57:29:0f:2c:8f:86:c9:25:04:
12:cf:ac:3c:b4:d9:fb:1b:4f:8a:7a:10:69:47:c5:f6:44:25:
85:2a:1a:f4:5a:2a:43:56:d2:12:ca:70:7c:0d:b7:c0:c0:06:
49:bc:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 15:30:18 2024 by rpki-client on console-ams.rpki-client.org