Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fMxFsTCP6WYynzNOiHirjqNa1Zc.roa
File: fMxFsTCP6WYynzNOiHirjqNa1Zc.roa (raw, json)
Hash identifier: KFcShWHSr6TDWfDwvi4wtl7W99X5vEz5PPgDquo0Ono=
Subject key identifier: 7C:CC:45:B1:30:8F:E9:66:32:9F:33:4E:88:78:AB:8E:A3:5A:D5:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F6AE1DA2E674C2F5628BB10FF8259A361
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fMxFsTCP6WYynzNOiHirjqNa1Zc.roa
Signing time: Sun 12 May 2024 03:38:57 +0000
ROA not before: Sun 12 May 2024 03:38:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 00:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6a:e1:da:2e:67:4c:2f:56:28:bb:10:ff:82:59:a3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 12 03:38:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ccc45b1308fe966329f334e8878ab8ea35ad597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:41:e3:a6:04:24:c0:2e:ec:5a:4a:e5:a5:
e7:22:df:88:b1:f8:30:29:85:36:87:c7:86:26:dd:
3e:fb:b9:5f:58:84:de:d7:c6:20:5c:a2:78:71:70:
11:08:32:be:e1:e8:dc:2c:30:46:36:7c:67:26:1b:
e1:42:3f:0c:ee:4c:73:f2:de:85:73:e9:84:89:ad:
a8:e6:a2:b1:69:9b:0b:01:52:95:bd:4f:53:0c:00:
ab:c8:0a:7f:f0:fd:08:44:47:3a:f0:6e:07:f9:fc:
85:39:57:d7:09:01:99:33:5b:b0:90:db:6e:00:cc:
86:59:57:ca:dd:dd:ef:c1:67:a8:d5:a8:4a:a5:4b:
a5:0d:13:5a:c9:70:fd:7e:89:c6:da:0e:b5:1c:5e:
14:08:14:67:df:b3:43:e6:08:2e:7a:36:f8:ab:78:
de:0a:dc:fe:80:56:fe:ca:45:5c:72:ce:48:55:87:
fb:f4:2e:d0:e1:55:06:60:00:fc:6b:1c:62:4c:a2:
bf:dc:a2:fd:31:ec:78:f6:8a:fc:f2:63:26:41:40:
52:e0:fb:95:61:60:80:a4:f1:c3:e0:be:30:d9:8b:
f1:6b:c7:83:22:15:8c:71:a0:d9:26:79:39:70:1e:
64:5f:84:93:3e:6c:78:8e:13:c1:b2:aa:2e:18:a7:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:45:B1:30:8F:E9:66:32:9F:33:4E:88:78:AB:8E:A3:5A:D5:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fMxFsTCP6WYynzNOiHirjqNa1Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
50:22:cd:3e:a9:b0:52:d1:7a:c4:d3:cd:26:81:5d:65:a2:fd:
4f:99:07:78:e3:89:b6:9d:5d:2a:92:f6:6c:40:84:75:e3:17:
2a:31:22:c1:f0:a0:4e:36:20:c6:b4:ba:4d:78:69:b2:23:a9:
79:85:4a:1f:31:80:fd:9d:d5:b5:df:bf:70:5c:01:c2:81:10:
f1:e2:14:32:1e:e3:84:e3:a0:1a:25:b2:9f:52:cd:98:22:d5:
fb:8f:ca:52:35:3d:f7:ce:4b:9b:de:8f:b9:bb:b7:e6:57:0f:
45:db:cf:4c:e0:8e:f9:c5:db:eb:9a:5c:d9:2d:cc:3e:a1:76:
f5:8b:2d:24:74:d3:2f:e2:74:dc:30:29:49:8c:29:62:8e:5d:
96:3d:02:c9:48:26:a1:f0:66:9b:50:a1:d9:4d:ab:1c:c5:f3:
bf:39:e1:f4:1b:b6:d9:54:d3:9a:4a:35:ea:13:4d:a1:d3:fe:
30:55:bd:16:a2:16:ab:42:c9:e0:7b:4d:ab:31:31:07:eb:09:
93:28:c0:24:59:04:a4:79:45:8e:e9:25:ae:3f:0f:9a:1b:0a:
6d:88:9c:91:b3:8e:45:f0:21:b7:c3:fa:87:c9:21:14:3e:32:
ce:1c:83:a3:69:98:7b:df:34:9f:d8:74:20:97:9a:18:f9:dd:
25:10:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org