Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/K12gyTvze2_u6LXL-oAeI4WuGtg.roa
File: K12gyTvze2_u6LXL-oAeI4WuGtg.roa (raw, json)
Hash identifier: ph/1qhgKFkBy+pbBAU2MEGvpuL4Tp0uZunHgzG/YzBg=
Subject key identifier: 2B:5D:A0:C9:3B:F3:7B:6F:EE:E8:B5:CB:FA:80:1E:23:85:AE:1A:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018875D8A468D5054BD119835EB00B72B0B1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/K12gyTvze2_u6LXL-oAeI4WuGtg.roa
Signing time: Thu 01 Jun 2023 07:25:12 +0000
ROA not before: Thu 01 Jun 2023 07:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 84.21.173.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:d8:a4:68:d5:05:4b:d1:19:83:5e:b0:0b:72:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 1 07:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b5da0c93bf37b6feee8b5cbfa801e2385ae1ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:f3:03:c1:c0:e3:6e:c6:35:4b:73:c2:aa:
17:6e:56:94:a6:f1:6b:99:14:36:70:3a:4c:4a:b6:
6c:cc:14:a4:1a:17:a3:9c:09:ed:d8:2c:a4:34:47:
30:3c:76:28:bf:b0:98:24:b6:cc:4c:d0:b5:17:41:
8b:5d:15:61:07:23:00:a4:09:eb:1d:b5:d0:cd:52:
31:ab:d8:5f:1a:02:26:b0:bb:aa:cb:0a:83:de:87:
57:b0:3f:41:78:80:9b:32:4c:b2:1f:59:ac:5d:c1:
7c:79:9e:75:a1:1c:6c:80:86:3b:4e:c0:28:75:3b:
3a:ea:a4:a6:60:17:8a:fc:7b:b9:3f:a3:47:88:88:
b1:c2:58:6f:85:72:13:af:ed:d8:05:9e:ca:77:a7:
f2:90:a3:b7:89:7f:6e:42:90:bc:b0:ce:ed:ef:9b:
91:4b:fd:b1:41:4c:3d:33:ca:ea:d8:9e:57:f7:7d:
63:2f:40:fd:2d:1f:21:d1:5b:c6:6e:72:54:c0:44:
4e:67:83:0e:18:5b:a8:52:8a:f4:e7:db:73:1b:ef:
e9:45:52:f1:21:29:1c:12:1b:b0:02:d6:a3:62:c9:
e0:a2:99:98:d4:c9:a7:4b:51:18:72:bd:92:19:cd:
89:04:a0:be:f0:a8:03:51:47:64:b3:bc:3d:06:72:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:A0:C9:3B:F3:7B:6F:EE:E8:B5:CB:FA:80:1E:23:85:AE:1A:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/K12gyTvze2_u6LXL-oAeI4WuGtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.173.0/24
87.121.59.0/24
93.123.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c8:ec:4b:5c:3e:b1:00:b3:2c:c7:fd:7a:b9:3f:a6:71:bf:
78:1e:55:00:df:c8:6d:32:a4:03:3e:30:1d:5a:59:6a:3a:05:
63:67:76:23:57:ce:3f:67:ab:a4:bc:18:6a:89:ac:3c:04:90:
41:6e:b6:ce:60:dd:57:c3:2b:23:74:5f:77:ed:d1:2d:62:e7:
a0:b0:43:98:7c:2e:16:85:c4:3d:12:04:68:7b:fa:9d:44:6a:
a6:46:00:6a:51:b0:65:69:62:94:38:3c:66:e7:12:7b:a5:c1:
8d:cd:04:2d:82:4c:0c:73:19:d8:46:bd:e6:aa:78:fe:2e:ea:
27:f7:ab:f3:9b:ed:2e:03:c1:77:9f:3f:dc:6a:4a:d2:61:46:
25:bb:97:6b:07:41:6d:4a:ed:55:69:8d:1c:46:50:84:58:38:
38:50:aa:19:2d:e6:51:73:ad:e4:87:b0:ff:28:32:ca:25:b3:
13:cf:e6:d5:fc:cc:98:eb:f1:13:23:cf:21:bb:ab:11:60:0d:
79:55:c7:08:c7:6f:89:73:8d:35:71:88:ca:f3:1b:dc:12:c0:
e9:8e:79:cc:a2:e9:05:96:2c:f4:c1:25:0a:6f:9f:43:9b:fc:
41:d2:23:7f:8f:0c:5b:a6:bb:f8:8c:f3:f6:c9:15:ad:04:58:
e3:dd:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org