Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XUfuWjLJsbNLMx8GtiwZ7oKUI2s.roa
File: XUfuWjLJsbNLMx8GtiwZ7oKUI2s.roa (raw, json)
Hash identifier: v5MwwRt1BxbHQpG4Tj/0PXYcWnGxQSjpj40YwmqzVUk=
Subject key identifier: 5D:47:EE:5A:32:C9:B1:B3:4B:33:1F:06:B6:2C:19:EE:82:94:23:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907FE9AEA14EE6CE0B8D94868033F38269
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XUfuWjLJsbNLMx8GtiwZ7oKUI2s.roa
Signing time: Thu 04 Jul 2024 22:42:19 +0000
ROA not before: Thu 04 Jul 2024 22:42:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 05:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7f:e9:ae:a1:4e:e6:ce:0b:8d:94:86:80:33:f3:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 22:42:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d47ee5a32c9b1b34b331f06b62c19ee8294236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9c:ed:0b:b0:29:8b:80:89:41:5d:d1:d1:94:
81:14:42:e8:fb:3d:a7:2c:ae:e1:80:c4:b0:89:fa:
dc:20:e2:ba:99:07:9e:45:fc:e3:a7:43:17:8a:4f:
83:df:ab:4b:9e:83:ce:36:92:8e:7b:79:46:2b:41:
45:8f:6e:42:02:a7:18:c2:6f:16:07:43:3f:57:1d:
6b:c8:e3:3b:17:41:0a:cb:79:60:76:26:10:7a:2c:
44:44:1e:9e:7d:ad:59:b6:cd:69:a7:45:fd:e8:95:
fa:47:2f:c4:3b:2e:49:4b:47:60:43:97:b3:09:79:
cf:48:e0:31:8d:60:3b:a2:32:67:8f:9b:0f:12:d6:
14:78:91:97:c1:43:05:fc:83:bf:e6:29:92:8a:80:
11:fe:6b:ba:32:c0:f2:2b:b9:5a:c0:54:fa:32:06:
11:5d:eb:75:47:97:40:da:ec:6a:ed:79:5c:54:c0:
95:b3:79:7b:a1:d4:bb:39:6c:cd:d6:bd:ac:ec:19:
c9:b2:62:fa:21:97:04:47:c7:f0:51:6c:f4:13:96:
7b:02:30:70:20:9e:80:0a:75:1b:56:9a:eb:a3:cc:
aa:b1:2d:d0:91:74:8b:45:15:1f:58:84:46:ff:43:
07:d6:d5:b0:9d:f7:5e:e5:f1:ba:e5:c7:43:0a:4b:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:47:EE:5A:32:C9:B1:B3:4B:33:1F:06:B6:2C:19:EE:82:94:23:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XUfuWjLJsbNLMx8GtiwZ7oKUI2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1a:84:84:18:37:e9:fb:7d:26:51:94:f8:5c:16:a1:12:14:
d2:fa:a9:9f:16:dd:77:e1:1b:c4:2d:ca:11:e1:5f:60:ee:58:
e4:6d:99:68:ff:ca:87:37:72:49:c7:c1:5c:9d:82:ef:1e:22:
35:59:3a:6d:a7:c2:e8:e8:b7:4c:e2:83:85:32:70:14:e6:48:
bd:54:51:02:d0:49:9e:f0:09:8e:25:25:fe:6d:87:91:fd:c6:
33:1f:94:58:0f:8b:e0:ef:b9:ab:af:14:8b:4b:3b:05:de:21:
79:a1:74:26:3b:52:42:0d:95:17:41:b0:67:4d:38:78:c9:cd:
d4:22:c3:7e:d5:cf:cd:83:02:94:f5:2a:d2:8e:1f:a5:50:48:
25:31:df:35:3a:35:82:0d:ff:6f:48:8a:26:26:80:4e:ee:7a:
21:cd:18:bb:f0:81:33:5e:db:a1:26:de:ac:90:78:84:7a:12:
e3:0a:29:ea:a3:48:06:13:8a:fc:74:bb:e3:c1:a0:a1:9d:cd:
0b:13:5c:67:b8:1a:fd:ff:98:e9:c9:33:0b:44:12:49:16:bb:
15:9d:61:05:8b:2e:ba:26:23:ab:22:d2:ca:72:80:af:e0:ed:
14:df:97:01:44:03:aa:99:46:3e:13:c6:15:25:74:a6:6f:ec:
ab:e4:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 08:08:13 2024 by rpki-client on console-fra.rpki-client.org