Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I66KRDNgaJJbEwLLrY5ePOCslLg.roa
File: I66KRDNgaJJbEwLLrY5ePOCslLg.roa (raw, json)
Hash identifier: 41cePgtevO7ueQTBfKxbcw8bDNx/RgZIWs39Y/ntvk8=
Subject key identifier: 23:AE:8A:44:33:60:68:92:5B:13:02:CB:AD:8E:5E:3C:E0:AC:94:B8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01892F349B0212367C27E76BEAFCBCE1CEAB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I66KRDNgaJJbEwLLrY5ePOCslLg.roa
Signing time: Fri 07 Jul 2023 07:15:23 +0000
ROA not before: Fri 07 Jul 2023 07:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 93.123.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:34:9b:02:12:36:7c:27:e7:6b:ea:fc:bc:e1:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 7 07:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23ae8a44336068925b1302cbad8e5e3ce0ac94b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:8e:3a:c5:22:8b:b6:46:c6:49:3d:af:35:
ee:d1:d1:0f:fc:3a:bf:79:05:ef:92:6f:91:49:f4:
2b:0f:d4:b3:d4:d3:2f:83:e4:06:f5:6c:49:9a:56:
d2:49:cc:97:ce:55:e4:84:77:f8:e0:93:63:24:49:
db:0b:5a:a3:3c:71:08:a1:2d:e7:3a:21:09:29:93:
20:ec:d8:98:7c:5e:0a:12:d5:e2:ed:11:0a:8e:a6:
a0:64:6e:7e:07:14:5d:67:70:bb:6b:08:c8:22:9d:
aa:5d:e3:71:9f:59:fa:5e:57:3e:0b:9b:df:94:d3:
33:de:eb:ae:f2:3f:74:50:42:35:6a:e0:85:51:a4:
3a:c0:46:90:01:d6:9e:ef:9a:02:7b:ca:7b:ce:f4:
67:22:b0:6b:49:8f:5d:fb:97:36:e6:cb:80:9c:f2:
10:32:5d:fb:e1:df:f6:02:47:0c:f7:54:1a:4b:a9:
35:f8:fe:8d:95:ac:fb:88:1e:3a:4e:14:93:7c:8f:
d1:15:be:5a:82:ae:d3:61:9c:33:0b:f2:37:3b:f2:
cf:cb:ed:b0:88:53:dc:6f:26:0d:18:82:c2:3a:05:
67:39:77:88:3b:d1:7c:59:8d:1d:b6:43:6c:a4:c6:
f3:3e:68:95:23:12:38:1d:d2:d8:0f:5b:11:0e:53:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:8A:44:33:60:68:92:5B:13:02:CB:AD:8E:5E:3C:E0:AC:94:B8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I66KRDNgaJJbEwLLrY5ePOCslLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7f:14:77:4e:1a:3a:e3:fa:fb:d0:e7:f2:64:23:c0:aa:aa:
d5:ec:43:b2:30:23:ac:85:dc:0d:01:65:6a:b8:73:4e:d1:63:
4f:58:94:d2:e0:d8:de:f6:2b:d9:4f:f2:1e:63:7d:53:87:76:
75:86:98:52:af:5b:91:b1:ba:9f:ce:81:3d:90:d1:19:7c:31:
66:0b:c3:a2:77:99:dc:59:de:7a:3a:c6:68:47:90:ec:09:b5:
7f:8d:50:d3:6a:13:60:d3:92:47:15:2a:bf:be:33:28:18:72:
9a:46:cb:81:59:62:82:ae:8f:b3:72:3b:48:2c:88:ff:1f:22:
b5:a4:44:96:3b:c7:8f:bd:aa:3b:bc:23:7b:67:41:5d:3a:6b:
d2:9c:b3:c8:ed:73:3e:75:eb:5a:a2:65:3d:46:4a:11:2a:ad:
5b:f0:4a:63:7d:ab:98:9f:5a:b0:d9:ac:6a:9a:b4:c0:11:86:
2a:53:48:88:53:20:4b:87:97:dc:ba:dd:34:a3:af:ba:3e:d3:
bb:d6:4f:91:6f:89:86:ef:95:83:ed:42:db:58:ab:57:0e:11:
bf:88:d7:f5:5a:1a:e1:e7:5e:31:0c:47:6d:b4:7c:08:98:66:
5c:94:6f:16:46:ed:72:25:f7:c7:75:ee:9f:81:f8:40:34:58:
87:d1:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org