Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RgumxTLuRfxn9mjHjha5KTztKXk.roa
File: RgumxTLuRfxn9mjHjha5KTztKXk.roa (raw, json)
Hash identifier: KJXR9RQw2lgTWts39tjQMBoTIAWm/TnZcy6va9KlO0s=
Subject key identifier: 46:0B:A6:C5:32:EE:45:FC:67:F6:68:C7:8E:16:B9:29:3C:ED:29:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189D49D2EFDAD0ABE86C42C097306252C8D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RgumxTLuRfxn9mjHjha5KTztKXk.roa
Signing time: Tue 08 Aug 2023 10:06:58 +0000
ROA not before: Tue 08 Aug 2023 10:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
45.14.166.0/24 maxlen: 24
45.14.167.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:9d:2e:fd:ad:0a:be:86:c4:2c:09:73:06:25:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 8 10:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=460ba6c532ee45fc67f668c78e16b9293ced2979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:63:53:b3:99:e2:d9:43:b5:2f:81:11:6a:
b3:38:eb:5b:8e:3b:f0:78:45:44:f3:5b:21:e3:3b:
bf:d9:dd:9b:86:09:17:e6:0a:ae:85:0d:f4:35:8c:
18:1c:8e:58:9d:30:e6:08:cd:f7:4c:9d:df:84:50:
cc:1c:90:34:a7:3a:42:7e:bb:00:ae:cb:9d:4b:c0:
00:c3:3e:83:bd:3c:8b:87:d6:a7:ec:f5:a5:9c:1c:
24:2c:c9:2f:41:a7:f6:ea:66:01:ca:19:2a:37:77:
b1:01:a6:f1:2d:4b:b6:59:5c:23:a8:01:1e:8c:aa:
e5:20:68:ee:4c:65:e4:63:d6:13:72:b8:2a:51:04:
6e:ea:dd:a9:5f:08:22:47:62:5a:19:35:cb:52:8e:
83:e9:e6:01:55:24:28:da:2e:36:67:88:eb:7f:04:
b8:be:2a:cb:79:74:c9:e6:4b:68:79:2c:af:47:80:
26:7d:9b:60:8e:d0:c0:5e:86:23:34:5d:f5:11:14:
e0:70:90:90:ec:e7:16:22:f0:f1:87:22:69:0c:b2:
0f:34:dc:03:5e:b9:4a:1d:01:9d:77:14:c9:04:f6:
b7:a2:8e:db:6a:83:bf:24:4e:23:fc:53:a0:4f:3f:
a8:dc:73:8d:56:50:3a:7e:3c:2a:91:1b:a3:31:8e:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:A6:C5:32:EE:45:FC:67:F6:68:C7:8E:16:B9:29:3C:ED:29:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RgumxTLuRfxn9mjHjha5KTztKXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
45.14.166.0/23
45.129.85.0/24
83.219.96.0/24
83.219.99.0/24
87.120.68.0/23
93.123.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d6:13:9e:ed:18:e5:60:b1:55:4f:62:62:2d:70:10:12:bb:
fe:99:a4:c3:a5:b8:2a:cc:0d:92:ab:eb:2d:87:d5:e2:13:14:
fb:fa:70:98:ca:c6:ef:60:e9:84:5d:52:e2:2e:bb:02:6a:19:
cb:66:6c:dc:7a:09:f7:b6:dd:d9:10:cd:46:7b:29:1c:09:a6:
c9:87:e6:a7:56:82:4d:4f:c3:e3:e3:e5:16:20:48:18:7b:23:
5b:68:46:65:3d:b7:cd:61:83:9f:c5:d2:91:b9:29:a0:e3:1e:
91:05:2a:04:1a:84:5f:95:3b:fd:b4:0e:9c:73:3d:1c:9e:b7:
88:eb:4a:2a:95:ac:b7:4b:b5:86:7b:6d:eb:1f:d1:f5:9c:60:
8d:0b:aa:2d:d6:e7:b9:1a:92:6c:d7:da:f2:18:c6:08:0c:12:
01:1a:da:b0:0c:69:e0:25:a4:39:fb:3b:31:b3:8e:2b:70:40:
ff:98:8b:da:7c:3c:a3:17:75:d5:2d:13:0d:8a:e9:8d:e5:f0:
b3:c2:dd:14:f7:b0:db:94:de:76:9c:98:35:d7:a8:36:bd:12:
3b:e5:09:27:96:31:80:1d:db:b2:1b:59:33:7e:8c:7e:66:e4:
3c:c6:13:ae:e2:aa:b3:82:fd:15:d3:87:7b:30:81:fe:91:72:
62:8c:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 09:33:59 2023 by rpki-client on console-ams.rpki-client.org