Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ARHrNIQAxqJKnKmVDG3L1Z03xJk.roa
File: ARHrNIQAxqJKnKmVDG3L1Z03xJk.roa (raw, json)
Hash identifier: N2ilKvwCodXgXKI75CvUDGdfAGv9qkVoaD8nuQjMjqk=
Subject key identifier: 01:11:EB:34:84:00:C6:A2:4A:9C:A9:95:0C:6D:CB:D5:9D:37:C4:99
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0BAE5654A6B7F402AFBD90917590
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ARHrNIQAxqJKnKmVDG3L1Z03xJk.roa
Signing time: Tue 02 Jan 2024 06:29:38 +0000
ROA not before: Tue 02 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210106
IP address blocks: 93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
45.144.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 11:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0b:ae:56:54:a6:b7:f4:02:af:bd:90:91:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0111eb348400c6a24a9ca9950c6dcbd59d37c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:11:15:90:e0:e2:cc:c5:f6:1a:71:c0:56:
6e:82:91:7b:db:5d:3a:b3:0f:7a:b0:63:e4:b2:ba:
c7:99:77:08:4f:0e:fe:25:c8:ab:7d:59:55:4e:a6:
d4:95:44:c7:9f:d4:77:6d:fc:26:6a:7b:53:e4:b3:
bc:d7:d5:41:66:52:8b:02:e4:ca:3b:7f:b3:24:a8:
4b:6c:df:b7:ea:6d:12:ed:3c:1a:04:73:d0:32:16:
af:1e:41:4f:0f:8e:59:67:f9:42:96:1a:76:3e:de:
3e:8b:04:f6:9f:76:35:c7:a3:ec:99:33:41:c9:a6:
3e:91:c3:9f:95:4a:0b:8e:95:05:4d:dc:66:bf:1f:
47:5b:85:94:b6:f3:f4:41:49:f2:cc:4a:10:e6:87:
45:7f:d1:d4:4f:d5:c9:2b:0d:eb:3a:81:de:89:f7:
b0:af:43:96:ba:1a:c7:c9:2f:11:4c:57:80:31:e9:
d2:58:60:5c:83:63:e0:ec:e2:e0:38:32:3d:e2:53:
95:88:72:72:ae:8c:4d:49:16:bd:0c:67:7b:e2:31:
47:8c:83:00:aa:b8:4d:e7:92:ca:4d:ee:2d:bc:37:
87:1b:c6:d1:90:c6:44:1a:26:26:7e:de:a5:09:b3:
49:20:88:11:2e:5c:72:82:9d:20:9b:6c:83:ae:c3:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:EB:34:84:00:C6:A2:4A:9C:A9:95:0C:6D:CB:D5:9D:37:C4:99
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ARHrNIQAxqJKnKmVDG3L1Z03xJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.155.0/24
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a3:d4:0a:de:a3:c0:41:ec:3b:8e:26:50:75:92:03:2f:95:
67:fd:39:f8:96:4b:f2:4d:73:df:70:c4:2f:42:2e:12:8e:3a:
ed:ef:b5:3e:c9:86:4d:0d:ba:93:15:94:2f:75:23:16:5b:20:
eb:09:74:e8:0a:3b:b7:4d:a3:e1:32:45:e0:d4:d7:b7:d8:80:
ae:59:be:63:d2:09:05:21:8c:58:18:c8:78:1d:21:92:7e:63:
06:f7:cd:cc:c2:1b:32:9d:44:b8:fe:8a:98:50:3b:8c:a1:54:
eb:2a:3e:89:5c:24:b0:3d:38:11:18:fa:85:cb:76:84:02:0a:
6d:36:25:7e:47:58:e6:ce:2d:81:bc:cd:54:91:cc:07:06:76:
2a:1d:ba:4f:f1:3d:92:46:46:43:2c:5c:1d:c2:a8:56:fc:b3:
0a:7d:f9:c9:e0:d6:7a:fc:4a:32:f3:b8:8a:6c:cc:ec:9b:f5:
e2:19:e1:c1:67:53:21:e1:fe:43:7b:cd:50:a1:85:d3:db:4c:
c4:aa:4d:bf:c2:41:b6:7e:38:8e:73:4f:1d:23:c1:69:08:93:
17:81:2e:d2:2e:85:26:23:5a:a0:cc:6e:86:88:1d:f1:30:78:
08:25:0c:33:4b:7c:91:13:d2:a2:3f:77:ae:22:6a:39:bf:5a:
8c:30:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 15:30:02 2024 by rpki-client on console-ams.rpki-client.org