Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cx-aE-YLoPHrLAVbvZpREVdbr8Y.roa
File: Cx-aE-YLoPHrLAVbvZpREVdbr8Y.roa (raw, json)
Hash identifier: WP3yHILZ6bUEDbKtDcE/xpZwqxrAGwlLcZVQAQLfm4Q=
Subject key identifier: 0B:1F:9A:13:E6:0B:A0:F1:EB:2C:05:5B:BD:9A:51:11:57:5B:AF:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E43349C8107B348621CA6D25946FCEC3C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cx-aE-YLoPHrLAVbvZpREVdbr8Y.roa
Signing time: Fri 15 Mar 2024 17:41:45 +0000
ROA not before: Fri 15 Mar 2024 17:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215420
IP address blocks: 93.123.39.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:34:9c:81:07:b3:48:62:1c:a6:d2:59:46:fc:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 15 17:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b1f9a13e60ba0f1eb2c055bbd9a5111575bafc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:bd:cc:c3:4f:86:b8:99:54:eb:4c:a8:a3:
bc:70:4f:95:be:2b:7b:84:1d:1e:4d:0b:ba:9e:99:
05:89:89:d2:cc:f2:4f:5f:f4:fe:62:2d:fd:a5:92:
a1:d6:52:d1:d8:3c:88:d9:cd:eb:30:ba:3b:d2:36:
7d:15:a1:66:58:e5:15:4f:23:d7:68:10:a9:ce:c7:
f6:2a:45:2d:48:cd:73:57:69:7b:7b:82:9d:b7:65:
2c:59:7d:ad:ec:87:d7:b7:36:0c:81:14:2f:16:df:
15:33:95:6b:33:d6:1d:69:54:96:f6:dd:c8:7d:28:
78:97:aa:ea:bc:2c:77:f5:b4:c3:6f:85:ff:b7:fd:
2b:55:06:53:dc:46:0b:4a:ca:67:1a:9b:0e:57:2e:
66:cf:41:2f:48:f2:7d:a4:cb:1a:5d:59:55:0e:a4:
bc:9a:28:15:1c:89:2b:83:8e:27:3f:fb:60:d3:b0:
3c:cc:07:f9:d6:44:36:e1:29:86:f7:70:3c:21:46:
fc:95:52:1c:2f:97:a6:59:ba:85:88:08:15:11:8d:
57:8d:5c:db:34:a5:70:3d:fa:f8:b3:18:4b:e0:0d:
23:37:33:db:b6:5a:cd:06:87:fb:94:bf:56:b8:e3:
f9:68:a1:bd:fe:77:35:2d:cc:93:b7:5d:cb:12:ad:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:9A:13:E6:0B:A0:F1:EB:2C:05:5B:BD:9A:51:11:57:5B:AF:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cx-aE-YLoPHrLAVbvZpREVdbr8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
94.156.8.0/24
147.78.103.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8a:b7:e5:17:bf:4f:e2:9c:7c:a7:35:c8:71:8f:53:2d:e7:
62:b9:52:bd:23:01:fb:60:50:00:fd:92:69:29:74:f5:f4:d7:
d0:7b:8c:53:52:df:d3:c5:c5:49:c5:d7:48:c6:72:46:58:5c:
7c:e9:80:2a:be:e4:51:3f:32:31:c7:98:ff:d1:0c:48:13:c8:
d0:ce:61:d2:58:72:c2:0a:6d:fa:36:2a:93:5c:3c:7a:4b:b0:
98:0d:a9:f9:69:5d:06:4e:4e:ff:95:73:cb:6b:4a:aa:5e:ec:
6e:aa:0a:3f:fd:39:c6:78:fb:c3:90:33:da:a4:26:3e:cd:43:
69:91:fe:70:17:de:a3:ad:a6:fb:44:b6:87:f9:17:d6:84:83:
a1:ed:99:de:75:90:01:cb:76:8b:3c:d8:4d:91:8d:fb:84:35:
29:52:cc:10:d6:f3:fa:fb:aa:ce:ed:ad:8f:08:de:8b:69:84:
3c:90:47:dd:09:74:b1:80:2a:ea:f9:3a:86:39:18:19:ee:69:
de:02:a1:6b:26:d4:6d:3c:78:f9:5f:03:a1:d9:3b:52:87:c2:
05:bc:2c:fc:d4:17:f7:d0:0d:9e:4c:73:ac:39:b8:6a:ed:06:
8d:24:89:78:92:76:d8:10:b1:8f:71:54:f8:c0:e8:a1:40:4f:
f2:dc:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 08:30:32 2024 by rpki-client on console-fra.rpki-client.org