Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBf6mVhCh1XKP1W05dr0Yh2Q6KA.roa
File: EBf6mVhCh1XKP1W05dr0Yh2Q6KA.roa (raw, json)
Hash identifier: 7seWfuqFtLavFMn7kWk4yVbcAfnWzEx/Ik5lYkKaHEY=
Subject key identifier: 10:17:FA:99:58:42:87:55:CA:3F:55:B4:E5:DA:F4:62:1D:90:E8:A0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C19D161D31E26DAF1ED7CCD81B1DB487D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBf6mVhCh1XKP1W05dr0Yh2Q6KA.roa
Signing time: Wed 29 Nov 2023 06:43:21 +0000
ROA not before: Wed 29 Nov 2023 06:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:d1:61:d3:1e:26:da:f1:ed:7c:cd:81:b1:db:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 06:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1017fa9958428755ca3f55b4e5daf4621d90e8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:23:26:2a:d0:1e:9b:76:e1:d0:f9:30:98:
65:b1:0d:d2:dc:76:9b:4c:a9:88:5b:7b:71:92:68:
99:c3:7a:80:8a:a9:eb:1a:1b:4b:ba:df:a8:7c:2a:
23:79:e2:2f:5a:5c:ad:d8:99:15:ce:2c:54:2e:cb:
69:2f:ef:b5:b8:d2:8f:50:04:c2:d6:1c:5c:71:98:
dc:93:e8:c3:02:7c:ce:2d:3b:e7:3c:47:7e:a0:34:
48:95:b1:1b:7e:8c:d1:6d:fc:44:3c:51:22:ee:9a:
65:c2:4d:67:d9:bb:14:76:cc:e3:b4:74:61:6b:0f:
a1:0a:1f:bc:7e:04:89:6d:ce:1a:50:af:9c:a2:a3:
6b:f1:d4:fa:0f:4e:3f:3c:95:6e:bd:af:8d:34:94:
a6:be:89:a0:aa:b2:30:f6:d7:91:57:f5:37:3a:c5:
44:e9:52:e4:ee:89:f2:6f:8d:b9:11:f7:70:d2:f5:
06:a6:8f:6b:a1:6e:f5:48:dd:9a:50:a7:3e:71:22:
ee:a6:53:cf:77:81:a5:33:7e:3d:cd:5f:64:b4:30:
76:09:0e:27:f5:f2:72:9d:4c:1e:b1:75:6e:66:f7:
b8:39:38:e0:80:74:2e:f1:42:3f:94:e8:e8:c6:03:
2e:14:a8:b7:06:4b:67:8f:db:76:e0:98:30:bd:53:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:FA:99:58:42:87:55:CA:3F:55:B4:E5:DA:F4:62:1D:90:E8:A0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBf6mVhCh1XKP1W05dr0Yh2Q6KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2e:40:7d:2d:6e:80:be:aa:50:20:7d:76:7c:e0:e2:0a:f3:
51:0d:fc:5c:74:51:e1:78:ce:94:31:c9:e3:81:ec:42:b5:05:
54:c6:e3:bc:2e:f0:67:b0:a5:a9:10:0f:37:10:ed:56:1a:9f:
a7:59:61:b8:62:e0:1f:0e:2a:c6:86:e2:8e:c9:c7:9b:9e:d8:
f5:35:fa:3e:e4:d3:4f:3d:e3:21:4c:e4:3b:f9:a8:81:91:65:
c0:0b:5e:a8:b2:fa:0a:a5:2a:f0:8e:f7:1a:e4:94:51:3d:a2:
62:5b:5c:48:bb:04:92:9d:cd:77:f4:9b:55:cc:30:3f:90:38:
c4:20:6a:5f:48:22:36:2f:50:7f:e9:15:ee:1d:cf:37:12:2d:
6f:c4:22:c1:89:13:1b:61:32:4e:b9:2c:13:ed:5b:ef:e5:25:
c7:c4:7c:7b:d8:a9:df:66:be:43:9f:3d:7e:b9:3d:ae:ac:c2:
56:70:1f:19:62:ff:6a:40:63:d3:2c:47:7a:8d:55:1a:de:ff:
39:66:e7:22:8a:17:ca:5d:29:ab:1d:93:8f:6e:f1:e3:7d:6c:
06:d8:a7:67:cb:c3:20:a0:30:4c:2b:5f:0f:92:0c:ec:3b:3b:
d5:0f:8c:ca:c2:57:2f:4f:1d:05:51:d6:12:c6:fa:c0:fc:41:
3e:9c:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 01:06:23 2023 by rpki-client on console-ams.rpki-client.org