Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TDohDe_njEDbQNtqy3TbpLRiPi8.roa
File: TDohDe_njEDbQNtqy3TbpLRiPi8.roa (raw, json)
Hash identifier: l3je1Agqj8WhKYDiXsx5Luoc7DLnXnYHk1qN85TVpN8=
Subject key identifier: 4C:3A:21:0D:EF:E7:8C:40:DB:40:DB:6A:CB:74:DB:A4:B4:62:3E:2F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B3A388D896CF69B646040FFE961BA4322
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TDohDe_njEDbQNtqy3TbpLRiPi8.roa
Signing time: Mon 16 Oct 2023 20:41:06 +0000
ROA not before: Mon 16 Oct 2023 20:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:38:8d:89:6c:f6:9b:64:60:40:ff:e9:61:ba:43:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 16 20:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3a210defe78c40db40db6acb74dba4b4623e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:09:78:79:9e:fd:00:22:b4:c8:f0:cf:5e:
5e:80:d6:b4:11:8f:13:5c:a1:83:92:b6:e6:6a:e2:
61:3c:0b:c4:9c:4a:cc:23:91:1f:83:c4:cf:95:97:
27:a0:05:56:74:1f:d7:27:be:1c:3b:e6:15:bf:c5:
79:9a:ce:55:68:9a:92:ab:83:d2:b2:e6:7e:cb:dc:
0b:77:e1:73:75:30:7e:51:78:94:55:35:e2:14:8e:
02:2d:de:29:aa:4b:c0:97:1f:73:ef:33:39:55:80:
da:39:b3:f1:24:74:a9:06:b4:eb:e0:3f:62:16:23:
fb:88:f1:fd:38:51:65:60:da:a1:c4:6a:34:1e:16:
9a:ce:41:1f:34:24:e8:05:ab:5b:4a:e3:62:9d:1c:
ea:ab:ab:46:57:5c:3c:c9:ef:0c:0a:b7:b7:28:a0:
7c:57:77:a8:9e:05:a2:ed:40:01:ff:d5:59:65:b8:
e5:68:a3:17:e7:b4:27:21:94:a0:bf:4b:13:80:b0:
b9:cb:1c:1a:34:72:eb:6d:f7:78:4d:2c:99:c0:bb:
b8:31:92:95:b1:60:25:0a:a2:de:15:72:54:68:6c:
c7:11:2e:c3:5f:a4:56:a4:2f:01:e9:ca:15:fd:97:
72:27:73:aa:c9:52:77:0a:74:ba:6c:77:46:42:7a:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:21:0D:EF:E7:8C:40:DB:40:DB:6A:CB:74:DB:A4:B4:62:3E:2F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TDohDe_njEDbQNtqy3TbpLRiPi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8b:b0:7f:15:1e:19:d3:11:e5:b3:e0:ba:a3:5f:14:d0:1f:
80:8c:70:45:2e:7a:b5:7d:48:5e:35:e4:2e:de:9b:92:67:e7:
87:9f:b2:ed:8f:d8:61:81:93:bb:d4:ae:72:72:a5:50:1b:0c:
8a:6a:e9:a8:9c:e5:80:b8:e4:e7:d8:eb:22:0e:0b:80:94:d9:
54:db:a0:fe:72:bf:61:f8:a3:e7:a5:08:3b:d4:cc:fe:31:37:
91:8d:be:8a:ca:b6:62:fb:b4:5b:b5:bf:b0:e5:30:8f:9a:95:
0e:43:d2:50:ee:7f:df:b8:c7:98:0f:97:fe:5c:b2:65:c7:42:
a0:b3:ac:51:1b:22:c6:7f:25:c6:6d:87:d7:6f:13:3f:c3:54:
13:ea:f3:37:f3:8b:1d:07:c9:23:58:e5:74:8f:4f:5b:81:15:
2f:ef:5d:0a:76:35:b7:ef:2f:66:08:ba:6c:b8:b3:69:5c:14:
c9:77:93:8f:64:d4:f3:14:88:42:d1:39:a8:a2:84:b2:e1:f5:
1b:da:04:e8:de:84:d1:18:92:30:f9:26:4f:f0:aa:6d:4f:ea:
5f:73:63:0e:25:b2:e6:9b:d6:e4:23:12:36:94:80:2e:8a:a9:
ee:fb:35:9b:2f:b3:8c:4e:66:d5:a1:e1:72:14:cd:65:c3:ff:
df:7f:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 03:25:22 2023 by rpki-client on console-ams.rpki-client.org