Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CWajCgMorGoiMYHaVMcYDr--DE8.roa
File: CWajCgMorGoiMYHaVMcYDr--DE8.roa (raw, json)
Hash identifier: f7B1BcMZa+RU6AZIOBAQ8k7R4y+WV3vqOH1Cldss7v4=
Subject key identifier: 09:66:A3:0A:03:28:AC:6A:22:31:81:DA:54:C7:18:0E:BF:BE:0C:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CE158E47975CB4D24D4FA36882E42AB65
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CWajCgMorGoiMYHaVMcYDr--DE8.roa
Signing time: Sun 07 Jan 2024 00:35:48 +0000
ROA not before: Sun 07 Jan 2024 00:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 09:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e1:58:e4:79:75:cb:4d:24:d4:fa:36:88:2e:42:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 7 00:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0966a30a0328ac6a223181da54c7180ebfbe0c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:4f:ca:9f:34:a5:76:72:e3:21:c8:27:4e:
62:b0:3d:ca:97:55:7f:13:08:69:e8:ba:af:78:d9:
99:46:52:dd:20:a4:9e:bc:31:d6:2c:0b:a6:63:6a:
7b:1b:c3:bf:77:26:a8:79:13:2d:d4:ed:bf:93:b2:
65:4b:23:6e:72:ac:65:fd:8c:a8:4a:c2:c9:01:a9:
ff:ea:ee:e9:f0:eb:53:e6:7a:e0:f0:26:dc:50:13:
d5:1d:f7:82:4c:91:ce:55:a2:f2:b3:28:ec:5a:e7:
f2:c2:a4:4e:f0:15:8b:b3:86:c2:05:5b:aa:c7:ca:
f3:12:48:b8:01:81:4c:cb:40:4e:0d:3f:0e:ef:81:
7f:d4:bb:51:78:98:d5:8d:9d:f3:e1:61:77:e9:12:
d3:50:12:af:9c:91:50:51:fe:f5:9a:98:3c:a4:6a:
59:b4:ac:7b:b0:34:0d:1d:a3:8f:62:03:fb:c9:f3:
f8:51:ca:f4:7e:ab:d8:86:79:e8:02:03:75:80:6e:
ec:1b:07:7c:59:67:c4:aa:48:b0:f1:d0:3e:5e:40:
0d:a5:65:38:ca:4e:dd:05:c6:bf:f8:d5:d7:35:80:
34:8a:a6:a6:a2:ee:0f:78:4e:0f:02:30:b2:b8:15:
3d:20:8f:aa:a5:2f:b6:7b:92:cb:6c:92:95:3b:b7:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:A3:0A:03:28:AC:6A:22:31:81:DA:54:C7:18:0E:BF:BE:0C:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CWajCgMorGoiMYHaVMcYDr--DE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:ef:41:07:aa:06:35:ff:06:f6:7a:98:97:19:8c:4f:c1:38:
0e:03:09:13:6d:1d:fd:4a:9e:5b:e2:4b:4a:32:be:20:fb:73:
f8:19:64:ef:cc:f3:6f:47:57:40:2a:9d:20:03:04:3e:b7:28:
c5:26:c8:20:f5:c6:2d:9c:1b:3a:7a:ff:f7:9e:1b:7b:7e:88:
64:8a:d3:07:9e:b8:29:20:6e:f1:de:14:da:97:67:c3:ab:f1:
be:0f:d7:b9:95:08:6e:01:a8:93:88:94:0d:47:51:31:01:8d:
fd:70:df:a5:e5:7a:96:be:11:a3:10:68:94:6b:60:ab:ee:2b:
a9:8c:5e:14:cb:9b:de:19:b1:cf:fa:f2:5a:dc:46:f9:24:57:
c2:18:80:df:1b:b6:aa:db:4a:6e:e1:20:35:03:2d:b9:ea:e6:
27:6f:cd:8d:92:9d:66:82:43:69:7a:57:5c:a9:7f:41:64:d8:
cb:f0:95:85:c1:28:cd:23:10:86:2f:06:60:b2:dc:07:ee:45:
b7:60:09:ad:8c:32:3a:7a:4e:e3:3f:c1:b7:32:0e:a2:e3:5f:
e4:48:f9:a0:24:2a:21:b7:b7:c9:8a:66:a7:27:3a:69:e1:6a:
28:b4:c4:25:6b:0f:13:a7:5c:17:95:d1:36:26:ab:b3:88:e9:
a2:88:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:52:10 2024 by rpki-client on console-ams.rpki-client.org