Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k1exkJrxw2b8jOMEWai3hY3aKsU.roa
File: k1exkJrxw2b8jOMEWai3hY3aKsU.roa (raw, json)
Hash identifier: eExWMzUp62xcgeM3l2wrZdRlCAXMi0015GnbSKIx4BQ=
Subject key identifier: 93:57:B1:90:9A:F1:C3:66:FC:8C:E3:04:59:A8:B7:85:8D:DA:2A:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D87B3FB207C0EAC53C741FA10CFF51302
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k1exkJrxw2b8jOMEWai3hY3aKsU.roa
Signing time: Thu 08 Feb 2024 07:52:15 +0000
ROA not before: Thu 08 Feb 2024 07:52:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216289
IP address blocks: 93.123.39.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 21:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:b3:fb:20:7c:0e:ac:53:c7:41:fa:10:cf:f5:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 8 07:52:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9357b1909af1c366fc8ce30459a8b7858dda2ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:3d:e3:a0:08:56:03:8e:52:4c:10:ae:9d:
9b:d6:af:f1:73:44:e6:95:3e:e3:ce:1e:25:9c:13:
4e:ae:6f:d4:ce:83:6b:80:cd:e5:51:72:5c:91:e6:
42:4f:27:fd:e4:fa:5a:18:3f:c1:80:59:72:41:4f:
06:15:06:83:8a:96:0c:73:14:44:6a:b6:65:83:b4:
1d:6d:af:79:5b:f9:9b:36:08:6e:9f:e7:1c:a3:31:
84:49:66:18:58:e0:22:30:fd:a3:30:8c:a5:aa:af:
88:fb:4b:06:66:b5:a2:ca:e9:06:52:50:c4:e4:12:
8b:d6:ff:0d:ae:c7:12:a7:e0:4a:9e:86:c5:fd:84:
ec:1e:b5:d2:8a:21:47:ec:75:71:0b:1d:57:c9:50:
05:9c:d3:ac:7f:51:21:8c:d8:a3:fd:46:0c:e1:f5:
58:0b:c1:ca:23:0e:e4:60:8e:56:7d:f0:d1:92:57:
73:ae:84:9f:f4:4c:90:b1:b4:70:33:17:ac:58:ce:
3e:67:76:7e:5f:b7:ec:28:17:0b:61:6b:e7:be:b1:
5b:d8:1c:75:05:b0:05:b4:55:e0:89:68:c1:4c:ce:
a5:73:09:5c:ad:df:66:b1:93:95:6d:9d:d1:e6:0d:
73:fe:8f:59:d7:30:78:29:86:c7:cc:00:10:03:5c:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:57:B1:90:9A:F1:C3:66:FC:8C:E3:04:59:A8:B7:85:8D:DA:2A:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k1exkJrxw2b8jOMEWai3hY3aKsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
94.156.8.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e7:25:0e:9c:13:0c:33:58:28:7b:0a:5e:b1:c0:7e:7a:23:
4d:18:dd:c4:78:b6:2e:ba:62:50:a4:4f:0c:14:5f:51:96:7c:
4e:23:d4:02:7f:be:0a:34:5a:80:6b:76:bc:5d:79:d1:24:ea:
0d:ff:59:18:58:c9:a8:00:7e:a0:74:fe:bb:f4:d1:80:8a:7e:
a5:d9:75:37:43:5b:ac:ac:cd:23:73:c0:7a:20:3c:aa:f4:bc:
0a:62:61:e0:1b:f1:6b:37:0c:b1:be:b2:1a:56:ef:98:e3:11:
02:e1:3b:e0:c1:be:24:96:50:a0:c7:c1:49:1f:cb:9a:a0:54:
f9:5b:8b:31:1a:a0:53:4e:f2:9a:5a:ac:17:a4:f9:9c:0c:d9:
1f:81:61:fa:d8:21:67:31:06:22:9f:02:c0:ff:f0:1c:7f:bb:
c8:02:dd:d7:bc:01:7e:38:2c:a2:55:86:3f:62:32:b7:0d:42:
6d:aa:d0:f6:b3:05:40:35:69:80:6a:b3:8e:64:d0:11:c5:c0:
25:f3:31:52:8f:74:0f:56:f0:38:ee:9e:a2:5d:95:90:4f:58:
6a:2b:0e:f2:fc:c2:49:f9:b2:57:70:ff:a7:a6:4f:06:b8:6c:
76:8e:d5:84:32:24:7d:57:77:81:76:01:10:86:b0:e2:6e:10:
b8:20:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org