Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ty6sRReJyXcow-zuBSqM--AvxXc.roa
File: Ty6sRReJyXcow-zuBSqM--AvxXc.roa (raw, json)
Hash identifier: sqH/Ty0BwQV166Cs+eFkBGSku/cZrSbYwty/TIzpd5k=
Subject key identifier: 4F:2E:AC:45:17:89:C9:77:28:C3:EC:EE:05:2A:8C:FB:E0:2F:C5:77
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A21DE71C4415E82B50467215AB3730DBD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ty6sRReJyXcow-zuBSqM--AvxXc.roa
Signing time: Wed 23 Aug 2023 10:09:00 +0000
ROA not before: Wed 23 Aug 2023 10:09:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
45.14.167.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:de:71:c4:41:5e:82:b5:04:67:21:5a:b3:73:0d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 10:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2eac451789c97728c3ecee052a8cfbe02fc577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:e2:b5:73:01:04:d9:b1:65:68:4b:49:e6:
4c:5f:fc:c3:a6:32:08:b6:a1:e5:63:49:f4:96:56:
0a:64:e6:30:fb:39:77:55:a1:9f:07:6e:d6:d4:31:
88:fa:91:bf:68:27:65:91:dc:3c:e6:f7:f1:8a:75:
a6:20:57:d5:eb:02:04:75:b0:a1:b7:91:98:00:fe:
28:1e:7a:61:54:0e:28:9d:22:3c:a1:41:04:5d:60:
58:95:f4:5b:40:24:5c:18:e8:6d:e0:6e:8a:78:96:
ac:a9:d5:73:bd:13:32:23:45:b8:30:24:75:99:30:
d7:1d:90:39:1b:b0:3f:3e:8f:0d:45:71:47:04:99:
74:62:e1:24:9c:c9:2e:df:01:77:d6:72:ff:fc:66:
b9:5a:3a:f9:98:db:e8:92:19:49:49:3f:c3:35:41:
90:52:ce:36:e4:5f:c8:0b:f4:01:f7:6d:5c:79:20:
fd:56:c6:a7:52:bd:68:ac:f8:7f:17:f2:d6:b9:b1:
fe:6f:fe:e0:a2:e1:26:94:e2:a5:73:4a:03:08:f6:
f4:fc:3b:6b:92:dc:7c:05:f0:1d:66:6b:94:05:56:
67:20:ce:2d:bb:21:ce:0b:85:47:01:19:4a:ab:ff:
7b:c0:75:55:3a:05:51:68:26:80:3d:af:0b:d7:55:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:AC:45:17:89:C9:77:28:C3:EC:EE:05:2A:8C:FB:E0:2F:C5:77
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ty6sRReJyXcow-zuBSqM--AvxXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
45.14.166.0/23
83.219.99.0/24
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2c:91:30:70:d6:6a:9e:1e:b1:e6:4a:4d:03:e7:10:65:88:
c2:60:a6:2d:f8:99:09:7d:f1:17:ab:72:fa:d5:88:89:d7:06:
d4:17:76:dd:65:9d:19:3c:01:5f:e3:64:42:b2:7a:44:83:62:
91:e0:da:84:ad:c9:e7:47:e4:0c:96:ab:6d:fc:d0:94:69:e3:
cd:07:c2:45:fa:32:37:5e:0a:30:97:45:ff:9d:4e:4d:d2:f6:
7a:85:00:45:5a:2a:00:23:b9:89:53:c2:fc:65:1a:ef:bc:4a:
7d:db:30:b4:aa:57:29:c8:45:ea:8f:bb:ac:81:07:3f:d0:ee:
49:01:c0:2a:c9:cb:5e:39:7d:8c:06:d9:a8:35:62:e3:22:b5:
9c:0c:1b:74:cb:95:86:2d:f6:5d:e8:ff:50:ea:47:b3:1b:71:
7f:d9:df:a9:a2:ee:0c:ae:73:83:fc:7a:7d:33:81:8c:97:f2:
c5:23:0a:09:7f:71:11:96:89:c6:f6:68:0c:a5:ed:5e:99:29:
57:da:3c:18:fc:a8:2a:fe:46:85:b7:33:07:9c:60:c8:e5:d8:
88:64:14:b6:3b:33:9e:c6:33:85:4e:61:f2:6d:4d:ab:39:20:
25:bc:77:7b:67:bc:b2:a4:d4:79:7d:ba:19:b8:0c:9b:13:49:
2b:17:09:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 11:30:00 2023 by rpki-client on console-ams.rpki-client.org