Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AomRrTEEyC3vGGApw5_eN0Uwq90.roa
File: AomRrTEEyC3vGGApw5_eN0Uwq90.roa (raw, json)
Hash identifier: irT7KTyi0JvLVUy1xmgqFdVvg4Q0nb7+pRc/ZWwjs4E=
Subject key identifier: 02:89:91:AD:31:04:C8:2D:EF:18:60:29:C3:9F:DE:37:45:30:AB:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BDC91256D95CDA335F629941CD25674D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AomRrTEEyC3vGGApw5_eN0Uwq90.roa
Signing time: Fri 17 Nov 2023 09:16:21 +0000
ROA not before: Fri 17 Nov 2023 09:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 93.123.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:91:25:6d:95:cd:a3:35:f6:29:94:1c:d2:56:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 17 09:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=028991ad3104c82def186029c39fde374530abdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:bc:aa:35:f5:00:c1:b3:56:25:15:45:e0:
a1:2a:e2:a0:af:a5:a2:e0:92:f2:02:a0:83:eb:9e:
04:21:d0:29:37:16:7b:54:09:d2:b8:b8:d9:24:41:
f5:af:fa:c7:c1:37:9b:9d:4f:b3:94:1e:46:7f:53:
f0:eb:34:45:c5:8b:31:ff:b9:93:8e:3b:8c:9a:99:
16:5f:5c:82:9b:1b:fe:98:e9:59:95:f1:45:a4:7a:
64:5b:b5:dc:f5:34:e8:ec:6c:93:84:75:c8:68:1c:
c4:8f:4d:c3:e1:c5:af:bb:43:c3:5d:18:f7:1d:be:
cd:4f:23:89:eb:08:ec:e6:b7:05:a2:1d:35:41:ce:
36:72:8c:14:21:21:55:f0:7f:7a:77:9c:4b:c6:dd:
ed:c8:de:86:e9:e5:52:ce:4a:23:9c:19:2a:7e:a1:
82:f5:c0:b0:1a:7b:96:69:64:22:69:25:02:02:7b:
50:bf:1f:c0:fe:7a:9f:19:3b:1c:6a:5c:af:fd:46:
46:4f:00:bc:49:a2:2b:00:dd:10:e8:99:ed:e9:6f:
cd:aa:14:d7:65:cc:dd:15:6f:ee:91:a0:80:ce:78:
71:2c:9b:83:48:99:7f:15:16:24:ec:7e:c6:04:7c:
5b:a2:19:db:14:9f:b7:27:ee:43:70:31:2b:f1:36:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:89:91:AD:31:04:C8:2D:EF:18:60:29:C3:9F:DE:37:45:30:AB:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AomRrTEEyC3vGGApw5_eN0Uwq90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:16:b1:be:13:8e:19:50:87:3f:8d:f4:68:96:31:f4:8a:2d:
1f:e0:c5:4e:56:e8:77:87:4a:4d:71:e8:e9:ed:3b:5d:89:9c:
95:eb:22:ad:d3:d5:85:9e:1c:0e:7f:0e:d6:21:3f:cd:06:73:
8d:f5:1f:43:27:c1:49:d3:1d:0a:52:1c:87:79:b9:78:3b:8f:
6d:2e:e4:7b:6d:1b:ca:df:f7:9d:3b:54:d3:08:ab:9f:40:33:
12:a6:e9:26:36:75:2a:fa:8d:41:b2:40:db:51:f5:c9:b9:92:
48:b4:96:fe:af:f0:a0:03:b5:b5:eb:25:89:e9:48:d3:c2:e5:
19:be:3f:f3:4f:a7:fa:0b:58:20:23:29:22:c6:2e:12:4a:c7:
5f:56:41:40:0d:10:fd:f1:df:87:ea:33:a6:e5:8f:ee:6b:63:
2e:f4:1e:5f:1d:d3:e3:43:0e:27:51:43:7c:f1:c4:99:20:92:
08:07:40:1f:16:45:09:55:01:7d:35:7f:c4:9d:1f:dc:bc:94:
86:8a:88:72:11:cf:17:c1:2a:c7:05:02:45:e7:9b:65:be:b6:
b1:37:5d:6f:f1:c8:56:ec:0c:71:1d:b9:67:08:a7:2e:02:34:
92:25:b5:6a:1d:93:c9:b7:81:24:ba:c9:01:84:7f:e0:af:41:
9c:93:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 14:52:04 2023 by rpki-client on console-fra.rpki-client.org