Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fdKgTdM0rL7BmRY1Dlv5f6hs7x0.roa
File: fdKgTdM0rL7BmRY1Dlv5f6hs7x0.roa (raw, json)
Hash identifier: 5cJZrKEccPY/rJgYIzflPDt+hXqANGVr6/4MqHp/Epc=
Subject key identifier: 7D:D2:A0:4D:D3:34:AC:BE:C1:99:16:35:0E:5B:F9:7F:A8:6C:EF:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4C2B39426466D47C937517E9AA5B9B7A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fdKgTdM0rL7BmRY1Dlv5f6hs7x0.roa
Signing time: Thu 31 Aug 2023 15:16:55 +0000
ROA not before: Thu 31 Aug 2023 15:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 13:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:2b:39:42:64:66:d4:7c:93:75:17:e9:aa:5b:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 31 15:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dd2a04dd334acbec19916350e5bf97fa86cef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:c8:d7:79:c4:91:7f:de:99:f6:bd:82:fd:
c6:bd:c0:e4:fb:80:49:42:d8:d6:e9:1c:79:5b:f0:
03:08:b5:4d:f1:59:fc:bf:ee:65:40:f3:ae:e0:99:
86:40:41:28:9d:ad:ca:2f:4a:34:12:52:f2:af:03:
e2:58:62:88:b9:db:12:a8:b7:8d:31:bf:29:33:98:
d0:fc:91:2c:3a:43:5b:53:eb:0b:19:d0:ec:c0:4d:
a7:fe:10:54:c2:82:5a:6c:86:c2:1c:ff:5d:4d:8b:
df:9d:27:30:34:ae:77:20:b3:c7:4d:ce:bf:b3:b8:
7c:d9:d7:13:16:c2:54:3b:8e:53:64:ac:bf:7a:a1:
18:3e:c9:bf:70:0d:dd:dd:d2:e3:97:7f:e0:dd:0b:
10:fe:fb:ba:27:2f:f0:81:59:43:2b:50:28:95:dc:
dc:07:d2:83:81:ff:a2:51:f5:bf:d3:96:7a:17:1f:
64:1e:ab:33:db:13:29:b0:b5:63:91:7e:63:4a:99:
ac:0e:ba:63:18:80:26:b2:e0:61:c3:df:7d:26:c7:
2d:be:81:27:41:7a:52:4b:fb:1e:fd:06:70:eb:f7:
47:f6:dc:71:eb:15:be:a4:55:49:62:24:da:72:93:
7e:58:89:a7:23:26:df:f3:8c:8b:ab:63:69:f6:70:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:A0:4D:D3:34:AC:BE:C1:99:16:35:0E:5B:F9:7F:A8:6C:EF:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fdKgTdM0rL7BmRY1Dlv5f6hs7x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.99.0/24
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5b:64:0d:74:d1:7b:27:b6:55:6f:6b:7c:84:49:a4:b2:39:
68:9c:d1:50:68:5a:ed:73:2e:22:24:0f:8b:a9:da:e7:3d:9c:
af:5c:dd:cc:67:62:56:7e:92:36:9b:f6:60:72:a0:db:77:8c:
04:05:76:23:a5:d9:be:b5:27:58:d5:55:bc:c7:9a:3b:0d:17:
60:4a:27:0c:d6:a7:d0:01:9c:7a:2f:b1:9e:94:fd:47:aa:cc:
fe:48:80:7b:02:02:76:d6:30:96:ca:59:e3:34:5d:3a:ae:8c:
74:84:89:8d:7f:e8:49:d3:ee:a3:79:9c:23:e4:f5:d6:db:be:
82:c9:ae:58:ca:c3:61:53:a5:47:2a:f7:c0:76:59:96:56:d2:
78:9f:f3:67:e5:6e:99:97:6a:d6:11:67:d0:6b:6f:87:2a:d9:
9a:0f:01:de:ba:8a:83:d6:c4:3b:ae:95:71:cb:9d:94:3f:54:
78:8a:73:8e:2d:6a:ac:41:87:cc:cc:15:3b:21:0e:5a:44:33:
84:53:ee:2e:71:f9:1b:f2:40:fb:3d:7d:82:98:30:f4:8d:80:
0f:5d:da:a0:5b:33:5a:87:51:4f:97:2f:c9:08:49:1f:6f:c9:
19:63:05:76:2a:54:01:d7:76:8c:96:0d:1c:20:be:61:b3:e9:
05:fe:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org