Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j7PYFegrKVvwddzq601QwV2tXL8.roa
File: j7PYFegrKVvwddzq601QwV2tXL8.roa (raw, json)
Hash identifier: S4c3LvQ+/rk/E5HniUqVah4IWVvSmWNWAmN/6nc+puQ=
Subject key identifier: 8F:B3:D8:15:E8:2B:29:5B:F0:75:DC:EA:EB:4D:50:C1:5D:AD:5C:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AE09FBF4C907DB322A1B4237B8980241D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j7PYFegrKVvwddzq601QwV2tXL8.roa
Signing time: Fri 29 Sep 2023 11:08:00 +0000
ROA not before: Fri 29 Sep 2023 11:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50236
IP address blocks: 93.123.116.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:9f:bf:4c:90:7d:b3:22:a1:b4:23:7b:89:80:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 11:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb3d815e82b295bf075dceaeb4d50c15dad5cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:ff:b1:e5:17:78:09:bd:6c:89:4f:ff:78:
ee:9b:62:b1:e6:b5:fd:a7:18:e6:a5:e1:b2:29:d4:
71:92:1a:68:a5:04:ef:a3:99:c8:16:2e:d8:2b:28:
dc:ab:42:02:cc:ed:57:65:c8:db:7c:3a:17:b3:03:
a9:b5:a6:e0:5a:16:8d:92:34:75:22:27:d2:bd:72:
a0:0d:fa:c4:27:de:30:0a:1d:06:87:f7:64:02:0c:
bd:aa:e5:39:6b:19:33:52:97:18:df:1d:18:bc:a5:
12:5e:c8:50:26:de:59:c9:c5:e8:27:10:31:34:df:
e0:d9:c1:83:bc:73:8a:d2:39:16:19:72:c1:5d:61:
3f:26:73:cc:c5:45:12:69:86:8c:f9:85:c7:e0:21:
a8:30:7f:6c:e0:6e:bb:d5:91:f8:54:23:30:4b:9d:
1c:82:4d:69:94:8f:b5:18:89:a9:21:7a:9b:eb:41:
9d:d8:40:a9:a3:7e:39:1e:f0:3c:2a:36:c7:f9:bf:
83:3f:dc:40:ce:3a:5b:67:53:74:75:01:dc:4c:53:
b4:a2:fc:2d:1a:25:95:0f:50:0c:34:3d:91:a6:84:
0f:41:86:47:ce:df:60:23:83:e4:18:3a:45:df:8b:
3a:2d:f1:a9:dc:dc:a2:67:b9:e3:13:71:cd:b2:7d:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:D8:15:E8:2B:29:5B:F0:75:DC:EA:EB:4D:50:C1:5D:AD:5C:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j7PYFegrKVvwddzq601QwV2tXL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.116.0/24
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ba:de:24:ae:34:d8:a2:07:60:0e:64:f1:40:58:e3:78:de:
29:70:64:24:ea:ce:7f:af:5c:a8:33:71:40:c3:01:0e:4e:d6:
a5:bf:b8:13:de:c6:e1:47:9a:a0:ba:f1:1b:df:87:aa:fa:82:
7c:3a:4e:d0:e8:45:42:b2:bf:2b:11:d1:28:f2:18:6b:ad:70:
49:47:0f:56:0a:3b:b4:97:b3:37:26:ba:70:c5:6e:e1:d4:1c:
39:d4:f2:24:c4:e8:ec:ac:5e:57:ba:cf:65:9d:62:21:af:40:
ee:5f:0b:88:28:d3:08:c1:5e:aa:36:61:45:21:3c:d6:b1:7b:
32:28:4e:2e:7e:3f:e3:79:e4:d8:ea:24:e5:8c:f0:c0:20:04:
34:05:83:c1:5d:dc:6b:7f:39:73:e7:66:41:e5:c7:b0:75:08:
52:bd:9e:b2:b4:46:c6:35:41:b0:ab:cb:22:22:63:e9:1f:5d:
0a:25:23:0c:64:07:a2:77:e2:d5:78:70:be:08:70:c8:e1:90:
3f:d6:5e:f5:ff:7c:c0:61:7a:a7:66:95:20:32:72:95:2b:db:
f3:f3:c2:4f:54:44:aa:d3:1a:95:95:f9:cd:aa:db:9e:34:63:
b9:76:e0:99:b4:93:8e:af:fe:18:b0:4d:b8:e7:c0:ea:6c:dc:
03:c1:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 14:46:43 2023 by rpki-client on console-ams.rpki-client.org