Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fdnV7atUEHO6fyekVgoXlk4Qh-c.roa
File: fdnV7atUEHO6fyekVgoXlk4Qh-c.roa (raw, json)
Hash identifier: AcIDZLMvkwyYKi57LL1W6J8n7NyFiwzOqQBXeXLi5us=
Subject key identifier: 7D:D9:D5:ED:AB:54:10:73:BA:7F:27:A4:56:0A:17:96:4E:10:87:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01914DE41916919F6013DFA538ABED90EC35
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fdnV7atUEHO6fyekVgoXlk4Qh-c.roa
Signing time: Tue 13 Aug 2024 22:37:59 +0000
ROA not before: Tue 13 Aug 2024 22:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 07:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:e4:19:16:91:9f:60:13:df:a5:38:ab:ed:90:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 13 22:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dd9d5edab541073ba7f27a4560a17964e1087e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a5:1f:fe:2e:40:51:c8:99:11:38:a0:2f:e1:
00:be:c2:5b:bd:0c:c3:6f:9d:4d:cc:ec:bd:23:fc:
4c:0c:da:0b:78:c5:55:ea:98:8d:ec:bf:2f:f5:bc:
51:a5:0e:2a:03:da:54:e9:ff:3d:7a:d5:90:5f:cc:
7e:44:32:74:e5:11:bb:70:81:0b:28:58:41:23:be:
7b:48:de:fb:a4:0e:1d:1b:70:2b:50:19:a8:95:98:
e8:e1:81:19:af:b0:03:08:3e:24:81:4a:62:ab:e7:
37:9e:a1:97:e2:1a:5e:15:89:3d:7b:a8:5e:fa:30:
c5:4f:ed:9c:47:72:07:29:d0:a6:99:fb:26:e0:1a:
5f:6c:3a:be:3c:23:b7:2d:3f:b2:4e:6a:7f:e9:90:
86:8e:4e:c1:e6:ef:d0:af:85:99:bb:72:fa:a7:8f:
9f:c9:8c:1c:8e:72:e6:eb:90:87:13:b1:c2:a3:95:
4b:8e:42:b9:ea:e9:92:04:68:41:b8:d5:2e:3b:e7:
2f:c8:c5:2c:12:8a:52:46:de:e5:72:ff:bd:e0:65:
01:28:63:2f:17:26:28:5e:de:c0:ba:d8:23:3a:63:
b6:51:9c:28:6d:fe:c4:88:7c:d3:c5:c1:09:02:03:
7c:68:f5:d7:35:fa:74:6c:9e:b8:ff:6b:ae:60:ca:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D9:D5:ED:AB:54:10:73:BA:7F:27:A4:56:0A:17:96:4E:10:87:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fdnV7atUEHO6fyekVgoXlk4Qh-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7b:61:54:0e:c5:c6:49:6f:43:39:83:84:4b:ff:ae:34:07:
0e:36:52:7d:83:d1:d7:d4:36:e4:03:1b:0f:a1:06:a0:1b:9b:
96:a0:08:88:8b:92:19:8d:19:45:c7:bb:f1:bc:da:df:cd:92:
22:f4:9f:71:0a:5a:02:45:9b:9f:2e:6a:49:94:82:3b:ce:1c:
6b:66:3b:8a:48:27:b1:46:5d:e4:1b:7b:c9:d7:67:f5:62:13:
d8:08:af:ae:bd:c4:a5:a5:ce:e2:96:cc:00:d3:ad:46:62:54:
2d:8e:be:97:a9:e4:e0:ea:64:de:a0:b3:c4:3b:4b:c2:e7:30:
89:fa:6c:ec:b3:9c:ed:11:1a:c8:73:1e:18:23:e5:da:5f:2b:
37:4e:37:ff:26:9b:9a:57:d9:c6:e0:ea:84:26:49:22:a2:10:
b0:0e:94:94:85:e4:a7:dd:8e:19:f3:dc:15:77:ae:f1:1a:4b:
ec:b6:49:44:fe:32:fe:d6:fc:33:fd:eb:12:8a:cd:f2:4a:52:
21:0b:41:5b:5f:84:bd:59:39:8e:06:22:e2:99:5d:5c:99:43:
b0:c7:13:3a:f6:78:19:f9:dc:31:11:f0:04:fa:d6:54:0b:62:
ea:b1:93:fb:46:40:e4:96:c6:b8:01:a0:41:8f:43:d8:9a:1d:
d7:95:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 08:47:21 2024 by rpki-client on console-ams.rpki-client.org