Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9mwRIvRHNgzoFqtlD8Rix39HQ8Q.roa
File: 9mwRIvRHNgzoFqtlD8Rix39HQ8Q.roa (raw, json)
Hash identifier: cn5WV8U9vUKUATLukq7Eo0MR4xSfzWf2lF3Zo/dw3jU=
Subject key identifier: F6:6C:11:22:F4:47:36:0C:E8:16:AB:65:0F:C4:62:C7:7F:47:43:C4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B5A62094214EE401CF42FF90124430522
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9mwRIvRHNgzoFqtlD8Rix39HQ8Q.roa
Signing time: Mon 23 Oct 2023 02:34:16 +0000
ROA not before: Mon 23 Oct 2023 02:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.120.69.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:62:09:42:14:ee:40:1c:f4:2f:f9:01:24:43:05:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 02:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f66c1122f447360ce816ab650fc462c77f4743c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:8d:7b:32:bb:34:c8:1b:19:7f:d8:56:5e:
18:69:78:b7:e3:d5:fd:47:0b:f2:9a:cf:9c:fc:f9:
4a:91:50:84:31:74:4c:78:56:84:f6:3c:20:87:0f:
d9:72:57:ad:cc:cc:24:48:fb:24:ed:1a:8b:c8:de:
64:41:12:75:4e:fd:4a:fc:da:3a:1b:96:98:73:e1:
8a:78:93:34:62:38:55:e5:f1:99:41:2f:53:14:1f:
66:02:77:69:c6:6e:7b:f8:27:46:37:83:9c:97:0f:
b2:97:45:ef:96:07:e8:84:84:47:c9:d8:da:80:0d:
07:1e:c1:b5:b2:05:5c:7e:d4:a2:54:55:eb:e9:90:
0c:5c:1f:09:76:3c:e5:9e:11:a4:19:c2:90:d0:ee:
d0:ed:78:ab:db:ee:c1:07:8d:42:3a:50:70:3c:7d:
e3:a2:66:25:d6:2e:7f:fb:27:8a:aa:95:88:d1:93:
02:66:6c:fd:7a:98:48:7e:e8:27:ec:af:51:00:ae:
4b:c1:77:4b:68:91:e8:ff:26:fc:4d:a3:f5:d7:bf:
4a:6e:24:32:8e:66:11:51:5d:02:dd:3a:6a:2f:42:
a5:71:72:61:92:74:95:7d:43:98:2e:d4:d3:81:eb:
5e:20:10:ac:e9:ec:ba:fb:cc:b6:36:50:77:ea:c0:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:11:22:F4:47:36:0C:E8:16:AB:65:0F:C4:62:C7:7F:47:43:C4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9mwRIvRHNgzoFqtlD8Rix39HQ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2b:e7:6b:81:35:ef:0f:7d:48:58:d1:6f:2f:79:f6:b0:1d:
ec:d1:ec:cf:23:45:12:23:d2:da:35:bc:de:34:c8:9a:39:04:
12:99:8e:48:24:9d:56:d6:82:09:29:ca:74:fe:79:60:66:f0:
1b:4e:fc:df:87:c0:f0:ba:f0:c2:fb:52:4c:dc:d3:b0:fa:0d:
3b:7c:4e:f7:d9:17:bb:c8:d3:79:0b:7b:b3:57:92:f0:ab:98:
57:69:73:57:b7:92:80:92:0e:09:20:88:12:e8:f4:6f:7b:b7:
a1:b6:47:b8:38:8a:01:45:91:1d:5e:5c:6f:0f:73:e2:77:8e:
36:b2:09:b8:3f:16:a3:56:39:da:e4:4b:06:09:5d:9a:96:0a:
47:b5:d3:3b:72:87:71:35:2e:4a:be:16:bf:bd:fa:b9:2f:06:
dc:13:3d:91:c2:f6:e4:6e:94:1e:18:72:a5:03:db:a0:8e:f1:
29:be:2c:3c:a0:d2:7c:ef:2f:81:75:ff:5f:e3:50:eb:5d:76:
ce:d4:9c:1b:c9:ed:88:60:7c:74:bd:85:9b:e3:e3:2d:06:3d:
36:3f:2b:df:65:93:22:69:e0:ef:43:5d:94:58:6d:21:87:b4:
f3:ed:e1:57:b0:26:fe:dd:c5:55:9d:40:33:b1:88:ab:21:9f:
bd:f3:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 09:38:22 2023 by rpki-client on console-ams.rpki-client.org