Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F3r6NTcXNaVNO0qvqbm6LNmOVGs.roa
File: F3r6NTcXNaVNO0qvqbm6LNmOVGs.roa (raw, json)
Hash identifier: du+lWjIBg3RInHgSLWsyLbB3HMwC8DvUPSQy085rAdM=
Subject key identifier: 17:7A:FA:35:37:17:35:A5:4D:3B:4A:AF:A9:B9:BA:2C:D9:8E:54:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190A97105E53C217C39B5E80D0A9238AD6A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F3r6NTcXNaVNO0qvqbm6LNmOVGs.roa
Signing time: Sat 13 Jul 2024 00:14:34 +0000
ROA not before: Sat 13 Jul 2024 00:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214547
IP address blocks: 93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 08:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a9:71:05:e5:3c:21:7c:39:b5:e8:0d:0a:92:38:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 13 00:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=177afa35371735a54d3b4aafa9b9ba2cd98e546b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:44:41:95:e0:c4:5b:e0:ac:04:6b:6d:e6:
3a:dd:f0:28:a9:fe:68:c1:15:ff:32:fa:d5:2a:dd:
7a:d5:61:37:4b:c7:4d:b6:68:df:b9:a5:2f:ac:ef:
40:5c:54:f4:77:ff:14:27:9c:de:bc:b2:70:21:35:
a2:07:06:c1:f3:36:e1:e9:44:3f:15:f9:ba:04:93:
26:5c:90:39:98:f6:e7:f9:f7:13:3c:0d:36:32:96:
63:ab:95:b0:3c:64:b8:d4:38:f7:25:de:73:1f:94:
3d:c4:cb:8c:3b:1e:ab:77:4f:94:6c:77:61:25:4a:
de:0a:09:8e:d6:44:bc:83:e8:8d:44:8e:04:39:6c:
6a:b3:79:75:39:9b:72:fe:8b:a1:67:20:10:de:e4:
d9:c8:93:c8:f2:75:7d:8d:2c:8b:f1:ff:a4:40:5e:
fd:00:28:6a:fb:bc:d7:42:0a:6c:57:9b:19:5d:8f:
8a:ce:d8:41:ff:0e:f3:fd:62:9a:64:e6:ae:fa:17:
f6:99:5e:d4:f2:a5:48:12:87:9e:37:99:6d:e5:ec:
54:48:73:12:cd:e6:ed:d9:60:f4:7e:dc:ad:a1:1c:
90:11:9e:d3:99:df:27:72:0f:0a:38:e4:25:d5:82:
5f:a8:45:e5:a3:14:42:d4:50:c4:d1:aa:bb:54:71:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:FA:35:37:17:35:A5:4D:3B:4A:AF:A9:B9:BA:2C:D9:8E:54:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F3r6NTcXNaVNO0qvqbm6LNmOVGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c6:10:ff:89:cf:a4:f8:9f:ca:1a:bd:9f:84:8b:dd:72:10:
6c:09:f3:5c:a5:b8:bb:0f:b2:97:4d:b9:51:5a:0c:29:ae:be:
99:ff:91:e3:ed:43:9a:68:e9:f1:60:71:d7:b4:08:96:cf:51:
82:c5:e5:20:1c:79:39:41:c1:7f:e4:bd:73:f9:42:cd:84:8a:
f3:68:d0:10:16:80:04:96:da:1e:15:2a:8d:5f:1a:65:03:fd:
af:88:5f:0f:2a:fa:52:40:a2:c0:72:c0:63:cc:1f:4b:8d:29:
9e:2d:49:54:82:35:02:77:24:26:92:cf:39:5b:2d:98:8a:06:
f7:80:42:2f:33:d8:a9:cc:12:66:ca:3e:0a:94:a2:41:a1:5d:
bf:fe:73:37:99:33:80:ac:8d:6a:ce:23:82:fb:a0:ac:61:bb:
ef:55:ab:d5:f1:b4:8f:e8:f6:41:a9:66:e0:d2:4a:63:2a:60:
93:f9:c3:4f:60:67:56:bf:16:8c:45:14:13:02:ab:eb:4f:e6:
9d:90:94:ae:3c:6e:68:3a:a7:ea:7f:5c:1b:c5:a1:0b:8f:aa:
30:f0:cf:4e:d8:e2:97:8b:d7:24:38:f4:bc:db:83:f2:b7:c0:
52:b9:95:c1:d3:1f:c6:a3:4a:6d:c5:bb:99:2e:2a:54:be:4e:
78:d0:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 09:45:19 2024 by rpki-client on console-fra.rpki-client.org