Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XmCMk9ulmG5DU99uUMT3Ti40sdE.roa
File: XmCMk9ulmG5DU99uUMT3Ti40sdE.roa (raw, json)
Hash identifier: FhJxKuYribA3FVvpiArd5OfNBJCi7IbxEmmdCWKXkjE=
Subject key identifier: 5E:60:8C:93:DB:A5:98:6E:43:53:DF:6E:50:C4:F7:4E:2E:34:B1:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D2C083AA81A89714A53FC60A116C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XmCMk9ulmG5DU99uUMT3Ti40sdE.roa
Signing time: Sun 01 Jan 2023 13:25:02 +0000
ROA not before: Sun 01 Jan 2023 13:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 212.87.223.0/24 maxlen: 24
212.87.221.0/24 maxlen: 24
212.87.222.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
92.119.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Feb 2023 11:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d2:c0:83:aa:81:a8:97:14:a5:3f:c6:0a:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e608c93dba5986e4353df6e50c4f74e2e34b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:70:72:7e:c2:85:95:dc:22:19:f5:bb:46:
e5:7f:c7:9d:8c:ee:5b:cc:93:36:a7:48:1b:e2:ce:
c4:c2:63:8e:d4:ef:17:17:4e:64:df:4a:44:5d:1c:
ab:6c:e6:dd:c1:8b:f9:71:f7:0a:9d:11:de:1e:23:
d0:83:93:de:57:fe:fd:1c:0d:e9:95:d1:16:13:9d:
61:26:62:03:d0:2e:b6:ea:68:cc:59:c4:6c:f0:e8:
a3:eb:f5:58:fd:94:81:7e:2b:87:4c:55:79:17:5e:
fb:35:7f:f4:e4:82:53:07:92:3e:5d:0b:2e:9e:41:
22:cf:63:f7:5d:a8:c0:16:8e:46:da:d0:0d:f1:a1:
6f:a6:3e:25:aa:e1:eb:a2:84:3d:e9:47:aa:14:28:
e0:26:e6:cd:27:90:0f:06:74:fb:98:cd:a9:cd:82:
9b:eb:5a:c8:9e:67:c6:97:f7:13:9b:b3:e2:9e:4e:
bf:f0:ee:13:db:99:39:74:29:44:f9:5d:48:da:a4:
00:f2:e9:e7:5a:81:88:ac:d8:8a:67:8e:df:4d:8d:
f4:56:d4:4e:92:2b:3b:05:c7:93:e2:e8:69:1d:5d:
12:86:03:b0:cf:59:10:43:db:6b:47:d7:e1:75:97:
01:75:1c:d7:f0:fc:e8:46:31:55:22:56:ae:00:01:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:60:8C:93:DB:A5:98:6E:43:53:DF:6E:50:C4:F7:4E:2E:34:B1:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XmCMk9ulmG5DU99uUMT3Ti40sdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.124.0/22
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
53:5c:90:a9:0d:8f:c8:84:7c:3c:f2:3a:9b:55:a1:66:75:aa:
db:3d:c5:22:1c:d3:2f:b2:a1:b9:69:e5:90:ca:9b:09:67:bd:
5d:2a:6a:66:83:7b:37:f5:66:f5:20:f5:96:3e:d1:f4:cf:fa:
76:1e:a6:44:84:5a:2f:1b:85:66:5b:e9:d0:f7:b9:d3:42:95:
c5:66:3b:b2:ab:26:54:f9:1e:ed:a2:e4:89:43:3f:19:24:1e:
3a:d6:d9:2c:fa:e0:38:5d:0d:f1:31:87:7b:1e:60:37:cb:19:
47:01:e6:8e:c2:bf:69:61:4e:6a:d1:cc:c5:fa:67:0d:ac:b9:
3c:0e:df:6d:8a:28:d2:ba:ee:08:4a:a3:20:71:ca:f9:5a:dc:
c0:b4:33:8c:80:38:8a:77:86:2a:9f:62:37:f2:2c:ed:b4:cc:
34:0a:b1:ea:bd:11:11:0a:89:46:4e:75:e8:14:36:89:fb:d9:
e4:e2:92:f7:be:39:98:42:d2:40:e8:3d:10:9c:e6:9e:6c:1e:
b1:fb:63:da:78:5c:d5:c9:37:fb:c2:d5:a3:10:2b:78:43:e0:
d7:ae:49:8e:de:3f:83:af:87:ae:ee:5b:ed:c2:5d:b2:ea:52:
9e:cf:a1:d6:1b:93:ad:58:05:df:13:1a:8a:27:8f:46:cf:bb:
d8:43:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:35 2024 by rpki-client on console-ams.rpki-client.org