Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dIWfwiK6c_sOeNNuFW3Gr-WWrwE.roa
File: dIWfwiK6c_sOeNNuFW3Gr-WWrwE.roa (raw, json)
Hash identifier: pNfgthgCJrv3dubytbOmtkOVaqvyGOjR1ObSAdqsMAY=
Subject key identifier: 74:85:9F:C2:22:BA:73:FB:0E:78:D3:6E:15:6D:C6:AF:E5:96:AF:01
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C3B077A674F545090EC7FA182FC2B91BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dIWfwiK6c_sOeNNuFW3Gr-WWrwE.roa
Signing time: Tue 05 Dec 2023 17:29:55 +0000
ROA not before: Tue 05 Dec 2023 17:29:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 13:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3b:07:7a:67:4f:54:50:90:ec:7f:a1:82:fc:2b:91:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 5 17:29:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74859fc222ba73fb0e78d36e156dc6afe596af01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:b7:3c:8f:6a:98:e9:b7:7e:f8:09:35:b4:
d9:df:35:13:79:f7:cc:c5:ee:9b:2a:4b:27:78:e0:
a4:9c:75:81:1d:4d:63:3a:d5:4f:56:31:d5:12:5e:
b2:39:3c:87:47:3b:8a:df:e5:6e:bf:a0:ae:f5:7e:
40:88:4e:64:29:02:34:ec:9d:b3:1b:ae:d0:03:e4:
7d:2c:38:8d:31:21:d5:3b:6f:b9:7d:34:8c:63:de:
6a:9c:89:fe:59:eb:15:2d:1e:a1:76:ec:cc:c7:35:
fd:83:18:5e:c8:f4:20:bd:e5:50:21:7f:a8:f7:bc:
5c:90:f4:a2:27:01:9b:4a:ba:dc:72:27:f6:51:b1:
47:ab:da:a7:a4:7a:43:e8:f1:35:19:33:ac:9b:bd:
7e:9c:2e:92:50:47:0b:0e:91:5b:03:c2:92:61:47:
93:8d:8c:a8:e0:c8:3a:f4:f1:11:30:1d:bb:cd:37:
97:65:77:23:53:cc:18:0f:e8:ef:ef:7e:75:ea:fe:
65:5b:ae:41:1d:f7:a7:7d:41:0f:59:55:6f:ee:5e:
7d:15:2d:cd:9c:5d:cb:4a:2f:37:2a:c8:d3:7c:94:
51:c3:64:5d:c5:fc:d3:ba:c7:78:ce:4a:e5:35:db:
fb:57:56:8a:06:07:43:79:c7:55:0a:de:0a:df:fe:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:9F:C2:22:BA:73:FB:0E:78:D3:6E:15:6D:C6:AF:E5:96:AF:01
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dIWfwiK6c_sOeNNuFW3Gr-WWrwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
93.123.84.0/24
109.206.237.0/24
147.78.103.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0b:af:36:5b:08:17:fb:af:91:d9:61:42:7f:df:2a:a8:e5:
44:f7:dc:de:22:6d:3b:cc:52:74:9f:2e:e3:1d:92:5e:37:1c:
b1:39:71:7c:9d:d8:61:da:51:0d:a5:cb:2e:c4:3a:0f:7a:90:
ac:5b:27:81:a5:b9:45:85:10:f7:ee:f6:43:77:73:33:bc:d7:
16:78:f0:3f:48:7e:11:4b:8a:74:11:04:79:86:31:cd:47:97:
65:1d:54:9b:41:a3:54:30:a8:15:19:07:c9:dd:7c:9c:9a:7a:
fa:85:3a:de:d0:84:33:6f:d9:7c:11:28:ce:89:c5:57:9c:dd:
24:cc:58:00:e8:a0:26:6f:0c:a8:08:eb:37:4e:fd:a1:ef:73:
b7:93:12:a8:42:57:74:36:93:2c:00:60:38:b6:a6:ba:8c:02:
3c:ca:75:64:42:69:4a:8d:1c:f4:b9:32:44:88:75:bb:cd:b7:
54:72:dd:d0:5c:7d:6b:3d:74:f4:b3:66:a2:80:6a:13:d6:aa:
8b:d4:e5:59:66:e9:7d:1d:b9:39:94:64:b4:1a:b4:27:49:02:
8b:0d:42:4f:ea:ac:e2:36:f7:b9:79:9d:26:a0:9a:77:10:dd:
4e:c1:98:93:9f:06:fc:83:cf:b3:85:8d:fb:ff:c7:fe:c5:be:
46:c2:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:38 2024 by rpki-client on console-ams.rpki-client.org