Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9RkXGojiZ170jfJ7atTTpo8jXxU.roa
File: 9RkXGojiZ170jfJ7atTTpo8jXxU.roa (raw, json)
Hash identifier: 21n5/hG7OixYa4X8KBLNokGe1trADykuva1a8KViWn8=
Subject key identifier: F5:19:17:1A:88:E2:67:5E:F4:8D:F2:7B:6A:D4:D3:A6:8F:23:5F:15
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DABEE60FF8B56BDAE0A694311A6E7608A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9RkXGojiZ170jfJ7atTTpo8jXxU.roa
Signing time: Thu 15 Feb 2024 08:42:22 +0000
ROA not before: Thu 15 Feb 2024 08:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 92.119.124.0/22 maxlen: 24
93.123.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 20 Feb 2024 06:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:ee:60:ff:8b:56:bd:ae:0a:69:43:11:a6:e7:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 15 08:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f519171a88e2675ef48df27b6ad4d3a68f235f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:2f:62:82:72:1f:4e:16:4e:07:c9:60:1f:
3e:55:4c:cf:c1:aa:94:3b:b1:ba:49:62:bc:0c:8b:
59:90:3c:8a:ff:a0:b9:f1:af:e4:19:06:ec:0d:80:
90:fa:52:3d:5f:b8:e6:d1:b9:95:b6:02:30:73:1e:
04:c0:34:59:a1:82:af:05:3a:46:04:17:c1:0c:94:
9e:7e:7f:b9:87:df:df:5d:57:18:59:f9:5d:23:19:
ee:4f:21:1d:2d:b4:c0:4a:0a:e9:50:00:9d:55:26:
e1:a5:45:1b:50:23:fe:a2:9f:0d:d4:c4:af:f4:c4:
6b:ef:93:fb:f0:a7:37:b2:c0:80:9c:4e:3e:f0:78:
f3:bf:57:97:7c:3d:fb:0f:49:67:96:35:64:9d:8f:
a3:71:7c:b1:3e:96:7a:1a:0d:da:21:38:fd:81:19:
69:71:6b:ce:2e:64:cb:3c:21:6b:26:e0:22:a9:b0:
72:46:e5:77:2c:04:42:49:0d:1b:da:7c:01:b2:56:
a1:7a:c2:a9:13:20:7d:b8:82:be:dd:d2:dc:b3:b5:
ab:9d:7e:75:43:69:be:96:fa:a5:53:be:b5:ec:34:
d2:33:f8:f6:9b:aa:bc:f1:c4:e7:e4:28:57:bb:f4:
75:a1:20:55:28:5b:db:46:7a:cc:5c:7e:85:b7:d4:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:19:17:1A:88:E2:67:5E:F4:8D:F2:7B:6A:D4:D3:A6:8F:23:5F:15
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9RkXGojiZ170jfJ7atTTpo8jXxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.124.0/22
93.123.100.0/23
Signature Algorithm: sha256WithRSAEncryption
23:c8:95:26:97:21:a8:35:9e:3f:40:3b:32:03:b2:51:93:9c:
de:91:ed:38:94:e4:bd:59:32:6b:70:08:7b:27:18:d6:5e:e1:
4b:0d:3b:6e:35:c3:3f:66:db:cd:5e:f2:5b:a5:d3:c5:84:30:
0e:22:8e:44:bf:7c:fe:ec:5f:01:39:bc:f5:70:1d:28:e7:d6:
56:fc:af:1c:e1:1a:9e:5c:30:ad:96:f5:ed:3e:d6:32:ea:64:
69:b8:7a:8b:b8:ed:d9:36:0b:54:bb:b2:3a:a8:30:f1:7f:f7:
01:56:03:b2:af:b3:78:9e:39:81:a2:57:88:2d:2c:9b:e9:62:
1f:ae:66:f6:ee:b1:5e:f5:ae:54:94:75:c0:95:84:0b:85:fe:
55:58:a0:09:5f:41:c3:d6:d1:1b:3b:65:d7:9a:ea:ce:99:cc:
72:a2:d7:b7:4c:84:c6:a8:f3:ce:d3:81:34:0e:ed:38:84:bf:
19:c9:30:76:94:c6:93:d5:d1:fe:9b:8d:f9:d0:7e:5c:4e:32:
43:4b:9b:0e:b3:71:52:c0:8b:b8:e4:0e:e2:5c:78:6f:43:21:
f8:eb:76:14:f6:6f:5a:82:f4:f6:8d:0e:93:ea:77:5f:61:e1:
92:b6:18:22:92:17:ae:db:a7:5e:b4:c4:14:65:37:98:8a:35:
98:81:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 09:36:46 2024 by rpki-client on console-ams.rpki-client.org