Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VhogZfKqfEeVTE7T7IYQDuibaL0.roa
File: VhogZfKqfEeVTE7T7IYQDuibaL0.roa (raw, json)
Hash identifier: YkuO/G9aTY6nIgcv9CT7X40mNHCi5sU/s0EdIJxOhBs=
Subject key identifier: 56:1A:20:65:F2:AA:7C:47:95:4C:4E:D3:EC:86:10:0E:E8:9B:68:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C19D16222BDD2B3B0E48A72AFDCF25059
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VhogZfKqfEeVTE7T7IYQDuibaL0.roa
Signing time: Wed 29 Nov 2023 06:43:21 +0000
ROA not before: Wed 29 Nov 2023 06:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:d1:62:22:bd:d2:b3:b0:e4:8a:72:af:dc:f2:50:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 06:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=561a2065f2aa7c47954c4ed3ec86100ee89b68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:9d:8d:89:3c:ba:8a:2b:ab:99:aa:f2:3b:
c4:35:69:73:ea:1e:84:10:0b:e7:70:8d:cf:65:c2:
74:cc:a9:ad:28:08:ca:a8:09:69:f0:f5:87:b1:c1:
80:5b:16:8a:a6:3a:a5:20:04:36:bf:ed:e0:cd:97:
07:b7:7f:da:ef:95:ad:87:0a:74:66:be:83:91:fc:
be:45:4f:c2:1a:6d:63:8a:3a:23:ba:d4:73:7b:b9:
82:82:4c:13:e4:74:45:33:01:ce:60:2a:9e:f6:29:
b7:89:83:b2:38:3b:b6:cb:88:f3:6c:ea:4c:6a:ea:
9f:a6:a9:61:ec:39:f4:71:76:da:d3:81:3f:b6:1f:
2a:45:e7:fd:f4:f0:91:79:15:b0:c1:59:dd:4c:3d:
ab:91:00:90:ea:0e:9d:a5:40:13:af:93:2d:f0:0c:
c5:19:b8:92:d1:96:51:4b:24:c6:94:28:6e:d8:24:
22:03:37:61:d4:78:be:49:41:34:57:f5:72:ae:e0:
13:b4:b4:4b:f2:85:62:b1:7f:0e:60:a9:47:b0:0c:
e1:9a:b3:44:12:40:ee:1d:18:b3:3d:f4:88:e5:58:
8b:67:1e:b0:28:54:14:f1:6f:43:cf:df:ff:94:71:
22:67:5d:b7:36:e6:b3:ac:ab:18:2b:c6:8b:51:7a:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:20:65:F2:AA:7C:47:95:4C:4E:D3:EC:86:10:0E:E8:9B:68:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VhogZfKqfEeVTE7T7IYQDuibaL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8a:b2:ce:e2:f2:ca:b7:de:ab:db:81:b3:7d:b1:cc:7f:fb:
68:cc:a6:b6:3c:40:c6:ab:ad:ef:bc:dd:04:8e:4f:20:9c:3d:
ed:a1:45:66:ca:72:2a:6e:49:ab:95:7e:ba:fd:f6:85:6b:a0:
95:05:cf:22:8a:6f:9b:10:42:9e:bb:bc:8d:b7:43:d3:64:e2:
a4:90:8a:77:f7:fe:54:82:7f:d4:c0:f1:40:08:99:8b:dc:1e:
c8:7c:13:e9:ee:bb:cf:19:5e:d4:fd:44:5d:a7:8b:d6:a3:d2:
31:d1:5f:fa:db:b1:7a:35:7d:79:cf:da:b3:16:ce:22:86:e2:
50:b1:fe:3b:f7:34:eb:9a:34:f8:b2:71:5a:78:a4:ab:60:48:
07:df:ff:a9:c7:6f:f1:be:23:41:01:33:11:3e:ce:e4:98:aa:
2b:13:37:9d:c8:9d:26:89:20:cb:90:bd:3e:1c:e1:e9:5f:4e:
e4:0d:e3:0b:81:e3:57:40:ec:ca:01:5b:62:47:61:35:6d:53:
e9:00:a0:8a:9f:64:cb:0a:0b:76:e9:6e:51:a3:27:9e:31:dc:
75:2f:68:61:55:23:c9:7c:23:cc:6d:49:fb:13:23:64:9f:a7:
c9:9a:45:5a:67:fe:df:b1:84:c8:19:00:09:2e:1f:5c:58:9a:
bd:29:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 22:30:16 2023 by rpki-client on console-ams.rpki-client.org