Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OHq3bwD-t1yakNbqxO54H-_cJD8.roa
File: OHq3bwD-t1yakNbqxO54H-_cJD8.roa (raw, json)
Hash identifier: 39mN6Ixcha/2ueRTNNNUvxHJ7+sUIGrosCDGQB1auiw=
Subject key identifier: 38:7A:B7:6F:00:FE:B7:5C:9A:90:D6:EA:C4:EE:78:1F:EF:DC:24:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193AA4B9FD454FCFC2CC55BB40CBF7C8391
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OHq3bwD-t1yakNbqxO54H-_cJD8.roa
Signing time: Mon 09 Dec 2024 07:21:42 +0000
ROA not before: Mon 09 Dec 2024 07:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:4b:9f:d4:54:fc:fc:2c:c5:5b:b4:0c:bf:7c:83:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 9 07:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=387ab76f00feb75c9a90d6eac4ee781fefdc243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:18:00:c8:3c:44:6d:24:00:3c:61:3b:91:
9f:08:e0:21:63:b1:f8:7a:f1:c1:0a:e1:d9:ae:c4:
98:5c:1c:65:b7:a7:bb:a1:0f:52:23:ef:2f:b9:f8:
4d:f7:a4:fc:27:02:2f:a8:a2:98:cc:e9:7d:34:40:
05:a7:fd:d7:c9:32:0b:be:be:3c:f3:d5:30:a4:12:
4d:32:8f:48:3f:25:5b:f0:9a:6b:b4:2b:34:f5:2b:
3e:b8:56:c7:a5:6c:3c:a7:8a:0e:6a:9c:33:ba:0b:
86:b1:7f:f1:e1:84:5a:d2:83:83:7a:4a:b9:7d:40:
f8:42:d5:67:8d:19:4b:4c:03:2d:2d:ea:dd:bd:63:
c1:da:f1:5e:54:be:5b:b2:30:b9:29:8d:ef:d2:2d:
cc:03:92:fc:cb:0c:d2:a9:71:7e:20:fa:c5:47:b7:
fa:fb:6a:6f:df:20:ce:84:7b:d7:6a:2f:c9:ae:3d:
11:bb:03:c2:be:91:63:e2:7a:11:e5:e5:63:72:70:
d1:87:d6:89:c7:96:a8:d7:eb:ae:ab:3a:25:af:88:
ab:ed:9f:aa:5e:cf:31:9b:b6:4c:8d:95:d5:c4:54:
36:19:3a:53:c5:e5:bb:af:c6:1f:b2:b8:02:b4:c9:
04:ed:b9:58:0a:c7:ed:66:f6:66:80:c6:24:d4:af:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:B7:6F:00:FE:B7:5C:9A:90:D6:EA:C4:EE:78:1F:EF:DC:24:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OHq3bwD-t1yakNbqxO54H-_cJD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
66:fd:d0:fd:4b:30:65:cd:46:fe:ef:23:10:6e:6f:e7:8f:bc:
9d:b3:ec:96:26:19:ad:12:99:f1:e2:44:20:da:9a:55:6e:d7:
91:4d:09:69:e7:e2:3b:da:e9:dd:83:c0:c7:b1:3f:ae:b3:aa:
d8:1a:ab:40:6d:bb:b0:be:9e:49:a0:e6:4f:50:09:cb:88:7f:
b9:00:97:8d:28:a2:9c:07:41:9a:f0:e4:22:45:70:41:fb:74:
bc:3e:b4:8f:e2:0f:32:3e:81:db:8c:fb:4a:fc:55:35:26:a9:
ac:2c:bb:2e:19:f4:3a:7f:5d:b0:83:ef:c5:67:7d:c6:1c:67:
22:8a:48:97:37:94:d3:72:10:cc:5c:4b:d4:73:67:5d:5a:95:
88:f5:60:e9:e5:93:fe:db:2d:21:3a:e3:da:ef:76:7e:87:db:
a2:34:b5:55:9d:fb:78:f8:19:dd:73:68:76:14:2f:e8:0d:a8:
46:c5:6a:a1:40:c7:83:b1:af:fd:82:46:95:71:7c:52:45:e7:
19:52:f8:25:b8:48:52:a1:cb:f2:0e:59:47:b0:e9:76:e4:27:
2e:3c:45:20:30:c8:75:c5:5a:37:fe:c5:8e:af:88:57:f4:9f:
88:a1:df:6d:99:c0:ec:f2:53:7e:68:75:3e:0b:37:f5:ec:f3:
02:60:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:52:50 2025 by rpki-client