Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B7dDCtCnx2kp-GlYUPK7OCQGj54.roa
File: B7dDCtCnx2kp-GlYUPK7OCQGj54.roa (raw, json)
Hash identifier: kp34mjnHfEMAWjnB7pzXPpSiQpOK24Mwb3n+6GXCl5E=
Subject key identifier: 07:B7:43:0A:D0:A7:C7:69:29:F8:69:58:50:F2:BB:38:24:06:8F:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01864F6B33FE8A2A575E124EA4E3374D6271
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B7dDCtCnx2kp-GlYUPK7OCQGj54.roa
Signing time: Tue 14 Feb 2023 10:14:30 +0000
ROA not before: Tue 14 Feb 2023 10:14:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 84.54.51.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:6b:33:fe:8a:2a:57:5e:12:4e:a4:e3:37:4d:62:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 14 10:14:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b7430ad0a7c76929f8695850f2bb3824068f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:c8:ee:1c:93:6a:de:13:24:5f:4d:94:fc:
28:7f:f1:88:9f:e0:33:1b:72:6f:a6:ef:10:e4:cd:
17:e3:28:72:0a:49:d5:74:95:75:88:8f:58:db:56:
57:37:8f:6e:d6:dc:8d:cd:dd:c7:a7:89:fb:1e:3e:
93:7d:70:e3:ae:aa:bd:f5:96:74:31:9e:f9:7a:d4:
6e:cc:a0:06:c1:bd:cf:a2:fd:b2:9b:d9:01:35:0f:
00:f3:58:6b:5d:4f:80:4c:4e:1c:3c:73:19:c9:fc:
17:6c:bf:af:93:c7:2f:56:03:17:9b:1b:82:db:e8:
a4:49:6a:f1:55:48:b5:ef:d2:ea:e9:77:e4:e7:25:
a1:f3:0b:59:bb:a6:12:1c:6c:2a:b8:08:eb:72:e3:
f2:d3:7c:73:c7:87:5f:92:9e:c9:b2:bc:47:20:f9:
1d:7e:1c:bd:df:c8:d6:73:87:dc:ad:37:f4:5d:ec:
44:17:05:10:26:cc:59:b3:9d:fd:c1:1d:09:76:de:
f0:fb:3d:aa:45:13:a0:50:53:50:fe:09:f1:ae:07:
1b:1f:a4:32:7a:04:14:7a:f6:20:5d:3d:a5:90:74:
5a:f0:98:35:1b:b9:21:93:51:b3:18:00:7b:2a:08:
63:5a:2f:ce:dc:d1:16:80:42:bf:42:e4:fd:61:2e:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:43:0A:D0:A7:C7:69:29:F8:69:58:50:F2:BB:38:24:06:8F:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B7dDCtCnx2kp-GlYUPK7OCQGj54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
87.120.84.0/24
147.78.103.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fc:1f:88:7e:a1:ae:b3:74:37:32:2b:d6:85:dc:05:73:f2:
a9:3f:03:46:fb:c4:3e:72:9b:31:9b:03:7f:d8:9e:d2:10:7b:
a8:d9:fb:80:60:c1:3a:2e:82:69:ba:13:63:24:62:53:0b:fc:
f5:13:e8:cd:2b:af:21:eb:82:e8:84:89:6e:22:7b:48:90:3b:
52:6c:a6:3b:a9:1d:0b:8c:25:37:43:ab:ef:82:93:ab:49:02:
3a:11:83:e8:fe:7c:2c:a9:b0:f6:dc:1a:04:ee:12:df:6f:5a:
e3:9c:3c:c6:4f:64:38:ba:0b:69:f7:68:ff:02:6f:09:f5:a6:
fc:c2:bf:b4:d2:75:13:ad:b2:a8:a3:43:3b:0f:30:81:ea:d1:
2f:87:bc:e3:fc:79:c9:34:b3:db:2a:da:ec:2e:a0:35:cf:50:
30:eb:1a:d7:5f:b2:af:01:c5:66:8a:97:7b:31:34:22:86:67:
9d:70:cc:48:d8:98:22:94:91:b2:16:23:6c:7d:32:1e:c9:b5:
3d:78:19:7c:30:4d:88:18:b2:d0:6e:85:68:36:24:07:0b:be:
a7:9e:fc:38:23:de:bb:66:d8:33:a3:f6:80:e8:3d:0e:1a:3d:
3f:16:f5:c6:e4:a1:5f:41:33:10:2f:ec:f9:5a:1e:7e:5f:37:
dd:56:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org