Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CxKh5yc05pvV9g1-7AsFqScP9K4.roa
File: CxKh5yc05pvV9g1-7AsFqScP9K4.roa (raw, json)
Hash identifier: kJRiqoiIMyP+W7NKesrK0qTO+Lkl8u9lbK3XTwR0hDs=
Subject key identifier: 0B:12:A1:E7:27:34:E6:9B:D5:F6:0D:7E:EC:0B:05:A9:27:0F:F4:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01938BF4B571A7158AC77A0307C9A0CF3824
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CxKh5yc05pvV9g1-7AsFqScP9K4.roa
Signing time: Tue 03 Dec 2024 09:58:10 +0000
ROA not before: Tue 03 Dec 2024 09:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 93.123.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:f4:b5:71:a7:15:8a:c7:7a:03:07:c9:a0:cf:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 3 09:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b12a1e72734e69bd5f60d7eec0b05a9270ff4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:92:2c:73:b3:7f:9d:9a:4e:06:68:6c:13:
ee:64:c3:cc:ec:c5:f8:41:fa:7e:60:c4:dd:2d:b0:
dd:7d:b3:d4:74:df:a8:1f:7d:25:52:43:0e:1d:ba:
c8:c5:29:98:fa:ec:ce:8b:3e:79:47:88:d5:48:7d:
5d:f6:bc:f3:d1:34:7d:90:a3:f3:eb:b9:85:53:11:
00:79:07:23:2f:1d:84:b3:e3:74:9b:57:68:e0:c1:
fc:0d:7d:b9:aa:5b:a8:92:9b:15:29:09:db:e8:89:
8d:fd:de:77:31:6c:76:d0:c5:0c:74:d9:c5:60:88:
d1:c7:f1:39:d0:0f:6e:6a:b0:95:98:d7:1f:66:5a:
40:64:61:3f:e8:09:c0:06:44:0b:3d:6b:fa:b5:2b:
e7:8d:86:23:fe:e8:31:52:e2:de:26:26:87:58:bf:
9d:2a:b8:ab:cf:f0:1c:bf:a2:90:89:b8:79:33:63:
cb:18:a0:1d:ae:09:7f:44:b3:d5:24:7a:c0:a4:c9:
bb:d9:55:9d:1d:11:d8:8e:46:a7:d6:97:69:8c:60:
d3:d0:c6:15:7d:cf:a2:17:a5:28:34:fd:36:0d:98:
71:9a:34:d8:a6:4d:5f:6b:6d:7f:5a:9c:6d:60:5c:
8d:8c:24:1e:8b:0d:1a:6c:2d:41:50:7c:62:38:18:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:12:A1:E7:27:34:E6:9B:D5:F6:0D:7E:EC:0B:05:A9:27:0F:F4:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CxKh5yc05pvV9g1-7AsFqScP9K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.13.0/24
Signature Algorithm: sha256WithRSAEncryption
97:57:8a:8a:bd:ec:80:89:04:05:8f:29:df:03:c2:7c:c1:21:
29:86:2e:40:4a:e8:9a:aa:5e:76:53:9c:29:7c:91:87:4d:13:
b6:fc:6c:9d:5a:48:dc:69:02:c6:f3:b8:83:df:3c:52:d3:e5:
31:b7:b1:78:40:1c:8e:50:55:db:90:db:9b:6f:32:eb:31:e3:
61:1d:39:6f:55:63:d9:9d:6b:ab:1e:9f:09:23:15:53:d6:02:
e2:8b:8e:ee:32:a1:85:72:39:68:6b:0b:35:70:5b:e2:ca:2d:
74:7a:9f:7b:df:ec:8c:5a:80:07:c7:cb:56:86:d5:e7:21:45:
b1:57:51:35:04:9b:65:5f:46:f1:43:6a:2a:3b:f1:97:f3:7b:
03:6d:62:cc:af:63:41:1e:bd:b0:80:c0:5a:d4:59:45:91:3e:
c4:09:d5:75:44:b0:60:53:09:92:b6:e9:df:f1:b2:c1:c9:6c:
f4:f5:ed:11:ba:36:e5:56:dc:4d:c6:db:8f:5e:b3:f4:b5:1d:
d5:86:cd:47:24:30:9b:f8:5e:7f:ff:ce:9d:e4:43:3a:30:3c:
fb:7b:1a:50:51:04:16:e0:96:05:cb:8e:71:7c:b6:c8:0b:c1:
43:29:56:83:ab:e5:be:09:9c:ec:34:b2:b7:1e:a7:bf:0e:c9:
ca:92:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:45:26 2025 by rpki-client