Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j13Yj0wmzCFxcy6yVmzG7t8o5nY.roa
File: j13Yj0wmzCFxcy6yVmzG7t8o5nY.roa (raw, json)
Hash identifier: oHP0MPvBKNBwCjq2gAX4ut0MrkvVeROpUb8eh+Fvctw=
Subject key identifier: 8F:5D:D8:8F:4C:26:CC:21:71:73:2E:B2:56:6C:C6:EE:DF:28:E6:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F9DA8A01F3196D9AB03C49F4DFB837B04
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j13Yj0wmzCFxcy6yVmzG7t8o5nY.roa
Signing time: Wed 22 May 2024 00:17:04 +0000
ROA not before: Wed 22 May 2024 00:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 08:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9d:a8:a0:1f:31:96:d9:ab:03:c4:9f:4d:fb:83:7b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 22 00:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f5dd88f4c26cc2171732eb2566cc6eedf28e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:24:4f:bb:0b:be:65:b3:0f:c6:9c:52:de:
26:b8:19:e0:b8:d1:6f:f6:c5:a1:db:b7:d8:26:57:
72:16:da:53:02:73:b6:45:de:7f:2e:a2:2e:91:29:
cf:2a:9e:e0:a6:3c:a4:a3:fe:bd:c4:78:0d:a4:b6:
a0:de:05:83:dc:07:09:ee:4e:18:19:62:bb:3f:e6:
d6:aa:29:6b:a5:a7:7f:fe:99:32:7f:d8:f5:e8:e6:
02:75:4a:1f:4c:ce:19:1a:70:f3:a0:2f:df:42:bf:
3b:37:14:75:2c:31:32:2a:6c:e2:49:17:61:1c:a8:
1b:86:79:a0:52:04:54:c3:9e:2e:99:85:c2:bc:af:
de:77:ff:16:75:cf:13:01:86:5c:a9:bd:4d:04:31:
38:9f:e4:83:db:84:41:3c:e0:e0:db:87:bc:15:2b:
8c:3f:45:1e:a0:e1:a6:f4:e9:7f:3e:71:e1:d0:51:
5c:db:02:9d:8e:7d:66:25:05:d8:b2:b5:93:a0:95:
aa:33:e4:0f:d0:ce:12:32:39:e5:f6:64:27:d4:e6:
d1:f2:32:5b:41:ce:6d:02:2a:57:96:24:ca:cb:97:
18:ed:07:17:da:bb:0f:6e:83:ab:d7:4b:6a:34:02:
d0:27:c9:8d:15:5b:af:cd:5f:83:70:9d:1d:75:fa:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:D8:8F:4C:26:CC:21:71:73:2E:B2:56:6C:C6:EE:DF:28:E6:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j13Yj0wmzCFxcy6yVmzG7t8o5nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
93.123.119.0/24
185.252.160.0/23
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
24:dd:37:23:81:13:c7:59:0c:64:e1:1f:04:d9:fb:14:8c:cc:
48:ab:5e:68:01:90:b3:6e:98:59:e0:87:c9:6f:95:06:01:8e:
c2:de:ac:c0:75:04:cc:fd:06:bd:bf:34:ef:dd:42:ce:95:66:
9a:af:31:c0:5f:e5:8d:22:5a:c4:c7:fa:30:8e:40:2a:5a:4f:
9f:3a:ad:3a:a6:c6:61:c7:a6:b0:3b:19:8b:66:ce:1b:ee:54:
b3:c0:fe:d7:43:ed:2a:23:ef:81:23:8a:89:aa:6c:7e:b3:94:
27:02:79:36:9d:3a:b5:3a:31:fb:e4:53:8c:d1:fd:78:8b:5f:
3d:5a:69:cb:a5:d8:36:df:f0:c0:c2:18:8a:c7:18:81:cd:c0:
be:41:bb:25:8f:7d:9b:ba:46:38:35:4b:bf:64:a9:03:58:a0:
12:8a:42:cd:e5:d5:63:66:4a:6b:9f:41:7b:67:5d:77:86:00:
3b:a3:af:5b:12:19:fa:92:ad:17:83:e2:dc:9f:7c:97:01:3f:
f8:8e:a8:00:aa:60:f6:e8:3c:e0:6c:69:c6:90:f5:66:bf:14:
1e:b1:26:5f:bf:f1:e9:8b:ea:90:3d:70:ca:bc:29:a2:d9:68:
65:63:f3:9c:30:e3:86:f6:1b:c6:26:54:ab:a9:06:3d:c5:c2:
f1:22:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org