Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/APkzInJ7yyW7ioT_gy7aV5M_rqQ.roa
File: APkzInJ7yyW7ioT_gy7aV5M_rqQ.roa (raw, json)
Hash identifier: zy//gNmIgPABR0lOw7gIU0wPBWG72Gz7urB3mo24nRY=
Subject key identifier: 00:F9:33:22:72:7B:CB:25:BB:8A:84:FF:83:2E:DA:57:93:3F:AE:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D36112DEEB0499A131FAF0DCC02A53EFC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/APkzInJ7yyW7ioT_gy7aV5M_rqQ.roa
Signing time: Tue 23 Jan 2024 11:25:11 +0000
ROA not before: Tue 23 Jan 2024 11:25:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216289
IP address blocks: 93.123.39.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 07:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:11:2d:ee:b0:49:9a:13:1f:af:0d:cc:02:a5:3e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 23 11:25:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00f93322727bcb25bb8a84ff832eda57933faea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:35:c6:1e:ff:3a:ef:21:d7:bd:fd:0d:16:
46:1c:5d:83:38:8b:2d:10:7f:48:be:eb:f5:b3:14:
fd:2b:a2:8b:57:3e:5c:58:37:5c:09:44:38:be:27:
38:84:5a:7c:45:0c:9e:31:71:43:57:4d:6c:af:0c:
96:2d:ea:0d:3c:63:55:68:9d:65:78:c9:ba:3d:b9:
64:a9:5f:b7:45:57:69:62:35:81:b0:3a:cc:ca:33:
47:41:79:c6:83:b0:06:82:31:89:24:48:d5:50:ea:
18:a7:40:42:93:22:da:36:1b:22:06:56:b4:cd:85:
0c:c2:82:1a:84:d1:73:72:28:d0:8c:bd:ec:ef:b2:
33:55:bb:da:d6:d0:da:5d:9d:70:1c:d3:8a:d9:73:
7e:c9:76:42:7b:0e:c5:1e:2d:fb:23:c0:fd:4c:25:
cf:c7:c4:b5:30:5e:a3:21:37:e2:1e:30:07:44:ad:
27:2b:01:00:f3:24:c5:1e:2d:fc:5b:a6:7b:f6:07:
6e:e6:c9:ae:cf:8d:c5:2f:50:6d:e0:f2:2b:c9:a6:
11:04:b8:46:95:60:9a:a6:77:46:08:2b:47:4c:91:
04:b1:12:fd:87:48:ee:e0:4b:31:27:62:2b:ec:be:
0c:c7:14:6c:e1:5c:83:d3:a1:e8:7e:06:b0:ce:9f:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:33:22:72:7B:CB:25:BB:8A:84:FF:83:2E:DA:57:93:3F:AE:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/APkzInJ7yyW7ioT_gy7aV5M_rqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:97:07:eb:a8:39:d0:2f:32:84:63:1f:3b:d2:f0:06:2f:
56:b1:1d:d8:8f:80:15:b9:10:b8:db:e3:10:4f:3b:81:aa:ae:
ce:c0:31:a7:e1:7e:23:eb:8c:92:84:cc:d1:7d:6e:b3:cc:7a:
4e:43:83:4f:8e:f7:7a:5e:13:0d:84:34:9c:bc:bd:27:bb:90:
ff:09:0b:65:89:e4:16:a1:3d:2d:28:b9:53:91:f0:bd:d1:3a:
10:b1:8d:58:8a:9f:c9:2f:d3:5f:10:43:1e:78:81:42:72:a1:
a6:12:2e:91:00:7c:9d:3e:41:91:73:c8:a9:bf:e5:0e:34:32:
b0:34:bf:21:49:f2:c3:23:9d:e5:13:ac:ba:b9:52:ec:51:01:
f4:fc:5a:0b:92:5b:22:6f:83:ff:bd:96:54:17:fe:fe:bf:34:
d2:4d:17:1e:fe:fd:e2:7c:92:ac:03:eb:a8:98:62:ae:4f:cd:
4a:2a:9a:a5:fd:0c:df:15:55:fe:cd:0b:23:2a:fe:de:03:1f:
5c:6f:ad:e5:ef:b9:0f:ea:a7:7b:56:02:48:42:d8:bb:a9:73:
38:c7:ae:94:85:15:92:38:70:d3:a5:01:0b:a1:6f:0f:98:2d:
db:ba:8d:80:95:ba:4b:8d:1d:16:22:74:3d:b6:06:0f:74:7a:
1f:6f:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 10:48:40 2024 by rpki-client on console-ams.rpki-client.org