Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cbZZ8Kmq2bAKP9PoH9E89EWk80g.roa
File: cbZZ8Kmq2bAKP9PoH9E89EWk80g.roa (raw, json)
Hash identifier: te4YjuBsA1v/cMIeVZJaurdWdep2M+I8aSG8e3HdbLI=
Subject key identifier: 71:B6:59:F0:A9:AA:D9:B0:0A:3F:D3:E8:1F:D1:3C:F4:45:A4:F3:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01896E0F0C954975C3E995B57666C45F39D5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cbZZ8Kmq2bAKP9PoH9E89EWk80g.roa
Signing time: Wed 19 Jul 2023 12:10:27 +0000
ROA not before: Wed 19 Jul 2023 12:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 93.123.85.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 07:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:0f:0c:95:49:75:c3:e9:95:b5:76:66:c4:5f:39:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 19 12:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71b659f0a9aad9b00a3fd3e81fd13cf445a4f348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:de:9f:24:39:ba:5e:9e:33:f1:90:e4:69:
ba:01:0d:01:64:87:73:64:45:7c:96:d0:35:7e:96:
1c:6d:1b:d1:ff:35:f1:2e:ab:94:3e:be:74:2a:98:
b3:2b:31:0a:9f:52:b8:25:9a:2b:ca:52:5b:09:d3:
1d:42:ee:02:1f:10:91:1d:9b:5b:ba:18:9e:a8:cf:
d7:26:b7:ae:55:98:37:c0:3c:64:29:8d:ab:26:28:
61:47:69:82:16:5f:33:49:30:26:b7:fb:18:22:72:
19:e8:e4:4d:03:48:a5:51:7a:61:91:6d:3f:c3:bf:
24:70:90:94:30:9d:81:85:39:99:71:6b:2f:9d:46:
98:3b:dd:ac:b4:c4:c4:2d:b9:36:19:de:aa:0d:96:
bf:5c:9e:08:1c:20:9d:f1:f6:4e:bd:c1:de:25:d3:
de:b8:af:fc:f6:42:c4:87:be:ac:2d:29:eb:41:47:
75:50:f0:a3:5e:85:0a:bf:9c:7b:ab:cc:4e:7b:73:
d8:97:3e:e3:19:0a:cc:e8:81:e7:7b:0c:7d:fd:a1:
48:16:45:c3:9e:16:03:03:6b:81:39:46:2e:0d:75:
ac:b1:f6:59:db:e6:02:a1:3a:14:65:3d:ac:33:2f:
38:c9:99:73:a6:64:8a:6a:3f:d3:0b:99:e5:af:0e:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:59:F0:A9:AA:D9:B0:0A:3F:D3:E8:1F:D1:3C:F4:45:A4:F3:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cbZZ8Kmq2bAKP9PoH9E89EWk80g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.85.0/24
94.156.177.0/24
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6e:5c:03:6b:f0:95:2c:f9:a4:2a:f2:29:79:fc:d9:c6:6e:
a7:ad:7f:6b:fb:42:f7:21:a6:90:e2:ee:6d:b2:09:11:07:58:
f1:01:c3:8a:a0:ea:58:87:df:fc:98:61:21:d7:56:3b:ea:aa:
7b:8a:84:c8:47:c4:f4:66:7e:7a:41:6d:34:27:be:64:02:af:
11:73:70:be:8e:16:35:bd:79:af:b7:77:9f:84:9e:24:00:75:
2e:b2:ca:21:d5:1a:10:f5:ad:1e:3a:5c:19:52:d1:36:26:51:
7c:31:01:d9:0f:75:8d:51:86:b9:e0:ab:07:78:9a:43:4e:4b:
2b:14:27:20:f8:d9:dc:6c:f5:bc:e7:60:c9:62:59:38:fd:8c:
d0:ad:53:f7:a7:e9:e3:e9:fb:e4:f3:04:34:54:8d:5d:4d:ab:
59:e9:a4:51:90:b4:ac:dd:35:91:6e:3a:0d:3b:e0:bf:bf:7d:
89:5b:33:a1:e2:92:8a:75:e7:df:f2:5e:ef:98:9f:02:03:4c:
c5:a4:b3:bd:9d:98:a7:0b:44:65:50:f9:0f:e2:05:8b:fb:8d:
83:93:d7:82:8c:5f:c5:a0:e8:10:52:03:6b:72:9a:51:3b:6b:
d8:5f:e5:18:2c:4d:b5:e0:d6:27:b1:d5:1c:cb:cd:d4:d1:ac:
36:58:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:15 2024 by rpki-client on console-fra.rpki-client.org