Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dJIKchUCpYc0yeKAxb5oG5zUBMo.roa
File: dJIKchUCpYc0yeKAxb5oG5zUBMo.roa (raw, json)
Hash identifier: equhet9uXV5qnK1yRPFELLLU7WekONFCAdkmsy8S8R8=
Subject key identifier: 74:92:0A:72:15:02:A5:87:34:C9:E2:80:C5:BE:68:1B:9C:D4:04:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018956E00F0DEAC71B3E79CD87897683FE8B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dJIKchUCpYc0yeKAxb5oG5zUBMo.roa
Signing time: Sat 15 Jul 2023 00:07:51 +0000
ROA not before: Sat 15 Jul 2023 00:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.14.167.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:e0:0f:0d:ea:c7:1b:3e:79:cd:87:89:76:83:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 15 00:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74920a721502a58734c9e280c5be681b9cd404ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:d8:52:0b:b9:61:95:39:99:3c:9b:53:34:
0e:36:4d:d5:72:b7:b4:da:e5:17:74:e7:90:36:5b:
90:2d:3d:c8:f4:46:c6:9c:02:e5:64:3a:31:3d:16:
2e:33:c2:54:df:22:eb:50:74:5c:5b:e1:45:54:cf:
5d:e7:6d:3b:b1:66:9b:fc:5f:b4:02:56:d7:ee:d2:
9d:95:c6:0d:3f:31:4a:c7:80:d0:c5:a4:d3:8c:f6:
20:d3:c3:cb:05:c9:44:90:44:07:0d:19:91:78:46:
9a:5a:7f:d1:fa:47:00:75:77:f8:ad:fc:88:f6:54:
19:26:2b:3a:c4:2b:d3:7a:88:a0:7e:95:2a:fb:e6:
e4:b3:58:7b:0a:1f:76:79:e3:a4:37:07:fb:5d:94:
ce:b4:82:cb:70:d2:19:bf:9c:07:62:bb:dd:20:77:
06:3e:23:66:5c:cf:06:6c:95:d1:bf:61:ac:8f:61:
e3:bf:07:24:69:05:58:70:aa:f6:8b:e9:a8:ef:42:
54:fc:99:94:1b:96:10:c6:98:b1:bb:87:eb:50:5d:
ac:cc:a1:f3:70:1e:a3:8d:6b:18:43:c1:99:f1:49:
c1:cc:ed:25:99:0a:62:a8:8b:3c:ba:eb:89:94:09:
2d:f0:a2:3b:c1:9b:ab:9b:a8:16:ad:e2:dd:ef:17:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:0A:72:15:02:A5:87:34:C9:E2:80:C5:BE:68:1B:9C:D4:04:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dJIKchUCpYc0yeKAxb5oG5zUBMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
83.219.96.0/24
83.219.99.0/24
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
23:8e:99:7a:57:ab:2e:f8:4a:00:d2:5b:a8:f1:4d:49:eb:33:
de:4e:7f:9e:87:72:b5:a6:f9:ad:a5:48:24:d1:ef:30:a1:ea:
8b:00:e4:96:93:3e:f6:9d:41:1a:68:5c:02:04:48:f1:ac:5f:
1e:66:a4:fc:69:f9:15:95:7d:09:87:76:63:9a:50:c2:e6:09:
8b:38:7d:56:c8:58:a9:4b:a2:1c:00:b0:41:e9:ca:a0:89:40:
78:3e:e3:3d:80:c0:89:c0:a2:25:43:5e:b7:aa:46:b1:11:49:
83:46:4e:85:56:dc:5b:ac:b2:ed:7f:50:b3:c4:59:7a:f0:37:
65:a0:0e:3a:3a:73:45:ab:01:0f:f9:f4:da:ac:4b:84:ed:6c:
cd:36:49:1c:1a:3a:6e:a9:00:be:53:e1:09:10:8f:f6:ef:9a:
cf:b3:b2:fd:6d:22:99:7b:15:7f:58:cc:e0:bd:aa:dc:21:0f:
12:49:bc:52:ed:41:30:53:77:8b:f8:d4:36:ee:1d:8a:74:98:
a5:67:83:e5:5b:5b:1a:58:77:aa:a0:d0:7c:1a:58:a0:a5:bc:
18:4d:35:8a:94:f1:36:84:94:96:17:ef:b4:75:7c:75:fe:fd:
d9:74:2a:08:37:68:d9:9d:e2:58:2f:9d:21:d0:86:98:6a:a0:
e6:94:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 00:38:19 2023 by rpki-client on console-fra.rpki-client.org