Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8uhniBBtGZo9n2r_TAXoaiJKDP4.roa
File: 8uhniBBtGZo9n2r_TAXoaiJKDP4.roa (raw, json)
Hash identifier: 5PBLyjOKnGmvgIKwui6k4Izl+bhaH4orsr0oUUxtb70=
Subject key identifier: F2:E8:67:88:10:6D:19:9A:3D:9F:6A:FF:4C:05:E8:6A:22:4A:0C:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907FE9AF1D13D5DFB9D9550F2B660A29B5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8uhniBBtGZo9n2r_TAXoaiJKDP4.roa
Signing time: Thu 04 Jul 2024 22:42:19 +0000
ROA not before: Thu 04 Jul 2024 22:42:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 87.120.158.0/23 maxlen: 24
93.123.75.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 20:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7f:e9:af:1d:13:d5:df:b9:d9:55:0f:2b:66:0a:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 22:42:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2e86788106d199a3d9f6aff4c05e86a224a0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:39:40:f5:1d:45:c8:c2:6b:ef:f4:f5:b6:
9b:ab:fd:2b:60:ec:01:ab:6f:e0:7d:38:a0:b8:40:
dc:10:ab:64:5a:4e:45:65:34:6a:23:48:cd:bd:fd:
58:11:aa:48:05:2a:c6:fe:c3:b9:02:48:9e:09:b1:
29:4d:f2:0a:a5:b7:61:80:c8:86:24:bf:a0:5d:63:
60:71:a6:e2:93:ab:62:5a:67:9d:39:14:49:eb:08:
f3:2a:97:f8:a0:c5:29:23:04:50:d6:99:ae:66:97:
80:23:b2:cc:bf:97:92:2b:5c:6a:3f:95:63:5a:63:
c0:2b:b5:b0:ae:b9:fe:c6:d2:95:38:19:e3:cc:94:
97:0c:22:12:ba:7e:c6:01:59:1d:be:b0:5b:88:bc:
b2:48:bd:c7:71:d9:82:89:f4:5f:66:1c:a6:e9:54:
b4:ea:2b:e0:48:fc:b9:c4:02:0c:73:95:6f:16:1d:
af:6a:c7:68:04:94:df:7d:ae:6f:85:6b:04:24:8e:
77:39:91:fc:95:97:76:a3:16:51:52:0b:a9:4d:ce:
08:f6:29:8a:ba:ee:8d:1f:66:3b:65:3a:42:f3:1c:
35:30:2c:41:a8:43:a5:0c:d4:f9:70:33:79:51:5a:
74:fa:e3:29:f1:da:db:81:b3:e3:37:95:03:ea:66:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E8:67:88:10:6D:19:9A:3D:9F:6A:FF:4C:05:E8:6A:22:4A:0C:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8uhniBBtGZo9n2r_TAXoaiJKDP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.158.0/23
93.123.75.0/24
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
69:77:71:7f:5c:d4:ba:4c:f2:cb:64:1e:d5:c0:92:e2:78:f9:
33:49:d5:19:69:f6:3e:63:07:fd:6d:e4:81:f6:28:a8:d0:36:
45:e5:70:a3:6d:34:ff:82:bd:f4:74:a7:fa:7f:a1:e8:7c:06:
45:75:83:61:cb:cf:7f:0f:9b:5d:8d:d4:7a:90:8d:97:69:ef:
3e:c4:d7:97:3f:3a:e9:a5:31:a0:37:74:cd:50:c9:25:2c:45:
0d:35:1d:1f:97:17:ca:2b:6c:0b:f1:88:fd:01:4a:34:99:55:
ff:55:f2:5c:2e:de:63:bf:23:85:82:af:ca:03:44:e6:c5:73:
48:b1:7c:70:ef:ae:c6:f9:14:ad:a5:eb:7b:c7:79:8e:f7:77:
3e:b0:6b:3e:b9:67:2c:65:5e:3d:97:31:b1:43:92:3b:e3:1d:
db:bb:16:6b:78:f9:96:bf:26:a7:f9:1e:d3:08:33:d3:07:d1:
6d:a9:5c:96:1b:a7:c4:4f:1e:c2:77:7d:a7:d7:f6:82:cd:81:
05:e3:5f:e4:cf:17:92:95:ee:73:30:75:8c:7c:9f:2e:c4:28:
5f:fe:3f:a4:da:19:51:26:47:62:c9:2b:ba:45:46:85:b8:98:
77:82:ab:d4:d4:d5:7b:12:24:a1:0d:d8:1b:8c:e2:64:ec:fe:
e2:92:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 22:18:38 2024 by rpki-client on console-ams.rpki-client.org