Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kT5bwp2i-l0TV_4-CraQ3c6kHkM.roa
File: kT5bwp2i-l0TV_4-CraQ3c6kHkM.roa (raw, json)
Hash identifier: 3RxnuN0IC6zDtU87THk5HCFYvlVvCVDLQoATOqxwC00=
Subject key identifier: 91:3E:5B:C2:9D:A2:FA:5D:13:57:FE:3E:0A:B6:90:DD:CE:A4:1E:43
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018906691A7E6AA14BB38FB962A1521A606B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kT5bwp2i-l0TV_4-CraQ3c6kHkM.roa
Signing time: Thu 29 Jun 2023 09:08:18 +0000
ROA not before: Thu 29 Jun 2023 09:08:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 94.156.10.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
195.178.121.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:69:1a:7e:6a:a1:4b:b3:8f:b9:62:a1:52:1a:60:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 29 09:08:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=913e5bc29da2fa5d1357fe3e0ab690ddcea41e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:33:28:13:8b:7e:75:63:51:0e:f4:96:43:
51:15:59:a9:ca:f9:e2:9e:12:2f:2e:a3:fb:c4:2a:
fc:78:67:eb:83:10:8f:67:b4:62:29:65:ee:3e:1b:
74:e4:f2:5b:5c:e6:0f:70:21:71:fa:ba:fd:cc:33:
17:72:17:dd:86:98:0f:a1:ee:f8:73:16:a9:a4:f5:
d7:a4:30:66:76:47:17:ab:6d:46:0d:60:c2:28:9e:
2b:99:45:8d:82:5f:3f:2e:79:d1:ed:d7:b3:9a:a9:
98:06:92:5c:82:34:9b:ab:74:e3:8b:6b:b5:20:70:
aa:47:e8:83:9a:d1:d2:d0:7b:68:02:dd:79:29:b9:
aa:4d:09:39:5d:d3:c1:7d:ad:31:5a:ee:18:6b:9f:
f9:d1:d7:0d:68:43:bf:86:d7:00:a3:46:f7:62:43:
5a:0c:4d:d4:f9:04:28:36:f4:7d:7a:4b:e4:95:6b:
e4:93:ff:f7:4d:d3:98:72:4a:3c:35:a2:1a:88:83:
2c:99:f7:10:1d:d5:6d:97:99:a0:83:92:bf:91:43:
d4:17:31:42:18:07:49:85:4f:99:3e:97:23:6a:0a:
97:04:db:3a:61:b9:73:88:d7:07:a5:b4:2d:f4:97:
eb:11:e5:36:98:fb:40:75:8a:d1:79:ca:49:d7:83:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:5B:C2:9D:A2:FA:5D:13:57:FE:3E:0A:B6:90:DD:CE:A4:1E:43
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kT5bwp2i-l0TV_4-CraQ3c6kHkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.126.0/24
94.156.10.0/24
141.98.4.0/24
194.169.173.0/24
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6d:7e:7a:c3:dc:84:1c:11:0b:18:b0:88:4b:cc:c8:68:5d:
c2:df:aa:a4:64:46:80:37:2a:55:81:83:08:ac:10:55:32:77:
7e:3c:c6:1b:a8:4a:01:47:60:d2:4d:12:d3:91:1c:81:0f:1d:
15:37:08:9b:d5:b2:c5:5e:a3:1a:f7:ce:04:11:28:dc:68:41:
6a:d7:9b:05:1a:7a:64:af:93:4a:d5:d6:3b:a2:02:24:85:d3:
fb:af:92:91:6b:92:c1:75:14:f1:c0:df:e3:59:f0:f0:b6:53:
e0:64:4e:00:84:ba:1c:70:c3:25:33:af:00:6e:a2:e4:16:65:
28:bc:7a:00:d2:65:52:93:c0:90:3a:ac:7b:24:49:9b:fb:4f:
c4:19:34:a4:98:f0:9d:43:8a:78:25:39:99:a2:e4:29:2d:c3:
88:32:c9:78:f2:4d:8f:44:36:b0:c2:f3:5e:0d:66:b6:0c:eb:
e7:0c:63:50:69:c9:88:4b:f1:03:55:fd:a3:82:9e:c3:16:6a:
ad:9c:d1:e5:ec:49:30:29:d9:5e:24:27:35:dd:1b:b1:b1:d1:
1a:d8:d0:8f:95:d0:7d:c1:46:ef:4a:a6:19:83:af:85:81:42:
07:60:fb:5e:88:a8:d9:2b:e7:b0:87:4d:7a:6d:c5:f7:0d:4e:
8f:41:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 12:48:15 2023 by rpki-client on console-ams.rpki-client.org