Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aJd-WJkBnZPZvoUFbhPILo-oxgU.roa
File: aJd-WJkBnZPZvoUFbhPILo-oxgU.roa (raw, json)
Hash identifier: b0iYAevOg7DFxOwB2qNbVlE64HJRI47/Gpaj+wGjwj0=
Subject key identifier: 68:97:7E:58:99:01:9D:93:D9:BE:85:05:6E:13:C8:2E:8F:A8:C6:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01915FD3D2A0F9FCA92D24272AADF23C434B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aJd-WJkBnZPZvoUFbhPILo-oxgU.roa
Signing time: Sat 17 Aug 2024 10:13:23 +0000
ROA not before: Sat 17 Aug 2024 10:13:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.222.161.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 02:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:d3:d2:a0:f9:fc:a9:2d:24:27:2a:ad:f2:3c:43:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 17 10:13:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68977e5899019d93d9be85056e13c82e8fa8c605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:57:9c:81:d6:16:82:df:27:64:36:f3:56:
08:67:ac:de:3d:35:66:0e:17:f9:c1:4d:b3:5e:aa:
d9:87:ac:ed:e8:92:e3:97:a8:5a:bb:72:9e:1a:4f:
08:0a:f5:4c:68:d8:65:1d:53:c4:78:f4:b2:8c:50:
f7:bb:4f:52:9c:d1:4c:f0:51:32:50:1a:e1:25:40:
b7:22:b1:db:a6:23:76:96:71:c8:24:69:6e:04:ca:
26:f0:32:66:ab:37:70:7d:1a:82:92:1d:76:6a:54:
44:9d:98:eb:eb:6e:5a:d7:ac:f9:6a:53:b0:05:74:
33:ba:65:19:21:6a:89:69:58:81:a9:cb:cb:f8:89:
5c:6c:b2:94:56:ba:61:83:19:52:fa:81:60:cf:1d:
34:61:af:70:10:d9:a3:02:73:cc:b2:49:17:9e:ca:
cd:65:69:96:85:2e:4d:6b:07:04:74:8f:01:81:38:
4f:5f:1c:0b:52:6d:c6:78:46:e8:35:97:40:48:d3:
b6:c7:d7:ac:ad:d8:04:9b:3a:bc:49:04:08:1d:ab:
aa:f4:5d:54:af:99:e0:00:42:dd:01:74:5e:90:b0:
ef:f6:2b:fc:fb:da:b1:d8:8d:67:fa:b0:a2:92:7d:
ab:57:fe:ad:93:9b:3c:4b:b2:9b:45:5b:bc:56:51:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:7E:58:99:01:9D:93:D9:BE:85:05:6E:13:C8:2E:8F:A8:C6:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aJd-WJkBnZPZvoUFbhPILo-oxgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
185.222.161.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:22:80:31:e0:d0:f0:f5:9d:eb:30:a4:b1:83:34:0b:1c:8f:
de:ef:52:51:9e:47:a6:95:b2:a8:6b:3c:55:17:e9:76:91:6a:
ba:0f:18:65:3c:d1:01:42:61:35:f3:81:33:aa:a5:40:c8:19:
9c:b3:9f:75:d9:e2:f3:43:1c:c5:1c:40:0b:d4:37:65:71:9a:
66:72:de:30:1c:ab:e3:33:44:ff:e6:6f:77:42:5b:d1:69:1f:
d6:d9:3d:fc:98:30:7c:f6:9b:af:16:87:69:63:06:8f:57:d2:
e4:55:95:05:c6:c5:c1:d4:93:3a:32:ee:22:46:00:fe:b0:d5:
c8:30:2d:e8:d4:92:6e:bb:82:f8:51:08:30:fe:cd:36:58:bf:
50:82:b7:be:79:8d:24:95:93:43:13:f3:7b:8a:17:bf:28:62:
64:b5:f9:bd:95:35:71:43:b7:da:73:7c:cd:05:0e:aa:a7:10:
91:2e:34:22:3a:91:46:2f:79:c3:e0:b0:39:34:78:a5:77:b9:
0c:1b:8a:f8:c8:d9:d2:ad:35:d7:fc:23:9f:ee:76:a3:88:10:
bb:16:d7:52:5e:54:cc:35:4a:a0:8e:ab:af:58:b8:2f:0c:62:
0c:2a:3d:bb:6a:6a:c9:b6:ac:4f:ad:a6:bd:b7:1c:6b:01:7c:
b5:98:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 07:18:33 2024 by rpki-client on console-fra.rpki-client.org