Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PpYZYAQloz6gxlqE_GLU6HlSKow.roa
File: PpYZYAQloz6gxlqE_GLU6HlSKow.roa (raw, json)
Hash identifier: Lmil87Qwala0YcMhRVLHpvaNBwK+MDUmONmOwHoR1gc=
Subject key identifier: 3E:96:19:60:04:25:A3:3E:A0:C6:5A:84:FC:62:D4:E8:79:52:2A:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189073282BF77E928A8FF41C362CC3C9424
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PpYZYAQloz6gxlqE_GLU6HlSKow.roa
Signing time: Thu 29 Jun 2023 12:48:17 +0000
ROA not before: Thu 29 Jun 2023 12:48:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9028
IP address blocks: 93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
45.144.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:32:82:bf:77:e9:28:a8:ff:41:c3:62:cc:3c:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 29 12:48:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e9619600425a33ea0c65a84fc62d4e879522a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:60:d0:86:ae:ad:a9:c2:5f:4d:e7:bd:01:
7c:c9:f1:6e:57:d7:cb:96:78:c4:e5:b8:a9:ec:31:
44:5f:31:38:be:99:32:c1:a8:f2:1a:52:70:67:0d:
0a:fe:f0:ef:ad:62:b2:f4:34:f1:cd:7a:19:ce:30:
9f:68:22:4a:4e:4f:b5:39:d9:8d:6b:1a:6b:9e:93:
2b:56:c4:01:1d:2c:70:db:7b:2e:4f:28:cc:e1:a8:
f4:4f:32:e2:2b:af:4e:79:85:bf:21:36:b2:1e:c2:
7f:d1:26:60:fa:05:03:3f:26:15:bf:ca:9d:c1:60:
86:3f:68:0b:77:cb:f2:29:d9:d7:67:7c:bd:75:cb:
a0:10:1e:7d:7c:9e:c2:69:ef:f9:3e:43:fd:70:52:
ad:d3:0e:68:90:96:86:78:f4:22:8f:2d:d5:23:89:
e8:11:7b:b1:95:c4:59:59:5a:08:81:c4:67:bc:99:
ee:85:78:68:57:bb:25:f0:2e:13:e5:92:88:bf:1a:
4b:79:b6:60:6d:07:49:c8:7c:fe:2d:97:fd:b1:c0:
d1:49:11:9a:9a:bf:eb:06:43:da:53:7d:d7:86:f1:
47:e8:46:b2:53:d8:99:fa:db:e7:8a:38:3c:60:14:
3e:28:97:8f:ae:dc:5d:6d:48:2a:81:c5:3c:e5:0a:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:19:60:04:25:A3:3E:A0:C6:5A:84:FC:62:D4:E8:79:52:2A:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PpYZYAQloz6gxlqE_GLU6HlSKow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.155.0/24
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c7:bc:ad:6d:87:af:65:85:7b:3b:18:35:8d:0d:cd:38:c1:
c0:37:5f:ac:56:e4:11:8f:c4:89:75:23:2f:98:22:f4:9d:2a:
37:03:b4:65:48:5c:70:ad:5f:71:e3:a3:57:1d:e7:d7:33:f7:
b3:8b:a5:1c:c4:f7:de:26:d8:aa:c8:63:36:d2:7c:4b:78:00:
08:bb:b1:24:11:ca:e6:ba:e6:bf:92:68:bf:1a:a6:cb:1e:ea:
c9:97:69:e3:84:75:9a:75:ee:0f:25:a2:b4:22:5d:06:69:ae:
c0:80:b7:49:1c:af:6d:89:65:6a:c2:b6:1c:af:01:8d:6a:b3:
3a:ed:9e:1f:6f:93:b0:0b:42:29:84:4c:48:11:9f:fa:2c:6f:
53:ea:17:61:97:3f:25:29:7c:03:9c:29:80:4f:fd:f4:48:24:
46:e2:5e:47:5e:cc:c4:59:03:75:52:70:c5:66:b3:59:83:77:
c8:58:aa:42:ba:9f:a4:4d:08:d5:b4:30:5e:9b:10:5f:8b:43:
65:c3:f0:7d:e3:52:b8:d1:b0:f5:87:0a:c4:d1:a9:c5:9d:d2:
65:87:61:08:e1:37:bf:eb:48:3f:3c:6a:f0:f7:94:7e:35:50:
1d:95:b7:12:b3:c3:23:b8:43:34:5b:6b:b9:af:c0:f7:4a:0f:
98:3a:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org