Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jGRA_iu4g8Hmi0Wz1cmhNrEjgXc.roa
File: jGRA_iu4g8Hmi0Wz1cmhNrEjgXc.roa (raw, json)
Hash identifier: 34FpcInLzyRuimGNq/LQv21tj9HOESggDPhrLZvW+Wo=
Subject key identifier: 8C:64:40:FE:2B:B8:83:C1:E6:8B:45:B3:D5:C9:A1:36:B1:23:81:77
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1026B6F5936CC7D91EA0E9751E7817EA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jGRA_iu4g8Hmi0Wz1cmhNrEjgXc.roa
Signing time: Mon 27 Nov 2023 09:40:21 +0000
ROA not before: Mon 27 Nov 2023 09:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:26:b6:f5:93:6c:c7:d9:1e:a0:e9:75:1e:78:17:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 27 09:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6440fe2bb883c1e68b45b3d5c9a136b1238177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:f3:f3:2a:a4:c6:03:cd:4f:5c:05:b9:4e:
2c:1a:45:49:c9:f4:f6:78:58:68:91:e8:f1:c0:d6:
1d:78:16:4d:ec:1b:d7:04:3c:55:9c:9d:31:a7:03:
d4:5a:fc:95:cb:12:8e:ea:2f:4d:67:53:ff:79:d9:
ff:c3:f0:39:87:01:b6:5d:c5:01:a7:32:88:38:ad:
2d:87:bd:0a:8d:40:61:50:d8:6c:43:3d:23:a6:f2:
8b:8e:55:57:d9:a3:8a:fb:51:d8:36:5e:d2:d9:15:
c5:ac:a7:e4:85:b0:91:04:a1:4e:a8:17:f6:7d:ec:
63:13:f7:71:c3:81:0c:aa:fe:28:7e:52:51:71:c6:
a2:68:68:16:2c:61:b3:83:1a:44:0a:f4:8d:10:8c:
7b:db:f9:f0:cd:3d:08:33:a1:0f:7b:ab:96:56:6d:
95:9f:d6:2e:98:5e:20:6e:61:ff:5c:45:31:02:d3:
07:69:d6:f3:4a:bf:06:90:da:50:65:bd:14:51:23:
b4:43:c6:cf:24:ca:13:53:da:2d:ee:7b:bc:83:55:
be:49:30:26:fc:cf:00:b9:d6:e7:2b:87:43:cd:42:
86:b9:e4:78:24:d5:cc:b3:84:a0:5c:b9:9d:35:5e:
11:92:cf:68:44:21:1e:e9:e0:f2:ac:4c:25:1c:84:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:64:40:FE:2B:B8:83:C1:E6:8B:45:B3:D5:C9:A1:36:B1:23:81:77
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jGRA_iu4g8Hmi0Wz1cmhNrEjgXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9e:c4:a3:35:c3:44:4f:3f:b8:10:f4:fb:3a:d1:d7:38:50:
68:2d:f7:fa:0b:ca:af:8a:47:20:b4:fc:39:ec:27:53:56:6c:
a8:33:03:79:e9:fb:ef:1c:cf:73:62:9f:df:91:16:cb:0d:50:
bf:0b:bb:d1:e7:fd:9a:37:f7:65:41:04:aa:f1:d9:33:ae:f7:
d8:29:71:e7:f6:0e:ae:51:a9:de:9d:10:70:0b:c0:a0:5f:2d:
f1:1d:8c:4b:ca:d3:63:d5:6d:74:23:69:01:94:63:7a:5d:eb:
61:1c:24:1d:22:ce:6b:27:aa:4f:9e:64:e1:38:da:0a:52:16:
72:c3:e7:26:4b:9a:bc:6c:c4:03:ef:9b:7d:56:31:19:5e:85:
ab:59:4d:c3:5f:1b:05:c9:f3:b8:9d:04:ba:03:5a:f3:a5:ae:
c2:90:ad:4e:74:22:70:d8:37:19:00:f8:53:8a:29:ef:0b:94:
3b:ae:59:f0:a4:e0:b6:8e:ba:6f:03:88:d3:57:f9:f2:36:f2:
39:99:0f:91:6d:4e:b8:fb:2a:40:00:d5:00:7d:3f:71:d4:c7:
24:99:0f:1a:96:2e:72:ed:48:2d:e7:0b:00:85:e7:7c:11:78:
3b:8d:4d:7d:5a:73:85:fb:fc:48:2c:bf:a6:0b:ad:9d:04:23:
28:70:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:21 2023 by rpki-client on console-ams.rpki-client.org