Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l-H7ATNQMoCAxuV-qBIOWzmsSBc.roa
File: l-H7ATNQMoCAxuV-qBIOWzmsSBc.roa (raw, json)
Hash identifier: zJr2ptnEsoi3n0pGu46kCOK57aLor2GgV3MFKtvrIXc=
Subject key identifier: 97:E1:FB:01:33:50:32:80:80:C6:E5:7E:A8:12:0E:5B:39:AC:48:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1A4DE48430854DC08F86D57053E1A21D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l-H7ATNQMoCAxuV-qBIOWzmsSBc.roa
Signing time: Wed 29 Nov 2023 08:59:21 +0000
ROA not before: Wed 29 Nov 2023 08:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34577
IP address blocks: 93.123.40.0/21 maxlen: 21
87.120.178.0/23 maxlen: 23
87.120.180.0/22 maxlen: 22
87.120.184.0/22 maxlen: 22
93.123.67.0/24 maxlen: 24
212.73.149.0/24 maxlen: 24
93.123.66.0/24 maxlen: 24
87.120.190.0/23 maxlen: 23
87.121.88.0/23 maxlen: 23
87.120.45.119/32 maxlen: 32
94.156.123.0/24 maxlen: 24
37.60.141.0/24 maxlen: 24
87.121.48.0/22 maxlen: 22
87.120.0.0/22 maxlen: 22
93.123.96.0/22 maxlen: 22
87.120.12.0/24 maxlen: 24
87.120.14.0/23 maxlen: 23
87.120.44.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:4d:e4:84:30:85:4d:c0:8f:86:d5:70:53:e1:a2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 08:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97e1fb013350328080c6e57ea8120e5b39ac4817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:af:e6:3f:76:90:84:6f:42:6d:81:5b:dd:
cf:2d:8e:39:ae:bd:50:1d:7e:8f:d7:e5:29:23:20:
fb:24:13:39:e8:6f:40:4e:2e:2f:6a:6d:48:c0:e9:
f9:c4:8a:71:df:47:54:7f:3e:0c:e4:6f:6f:ee:d9:
05:85:51:6d:a1:2e:94:e1:43:fb:c4:c3:7d:b2:7b:
56:e1:73:0c:a1:28:3e:00:7e:c1:7e:f0:10:72:c8:
ce:d1:f9:80:1b:31:79:47:99:9d:36:ef:38:12:f2:
30:46:dd:f8:48:c6:40:4a:c4:a6:48:c8:50:d7:29:
c6:d9:82:46:51:3b:cd:8b:5c:2b:8e:4a:3b:5d:f5:
90:cb:ef:3c:0c:7c:d6:53:14:a3:d1:5b:10:85:23:
16:5f:e7:99:61:5c:3c:19:4c:64:f7:3e:36:83:9a:
7e:11:7c:44:e1:51:48:b1:6b:7f:0a:50:de:a5:62:
d3:15:3f:f9:d7:20:54:21:81:68:36:b4:63:09:3a:
a8:03:b7:6e:2f:4a:48:94:65:e0:4e:28:b5:00:48:
39:cd:44:b9:4f:4e:d3:5b:77:51:69:13:36:60:4c:
57:ca:3a:42:fa:f9:cf:dd:58:48:76:fd:5b:32:a9:
95:a2:58:e8:2f:3a:28:68:5e:95:bf:14:4e:54:75:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:FB:01:33:50:32:80:80:C6:E5:7E:A8:12:0E:5B:39:AC:48:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l-H7ATNQMoCAxuV-qBIOWzmsSBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.187.255
87.120.190.0/23
87.121.48.0/22
87.121.88.0/23
93.123.40.0/21
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8d:f2:1f:02:dc:c1:d1:83:9d:6b:dd:f1:d5:2a:b7:5a:a1:
63:44:fb:06:56:32:cf:3b:2c:4a:38:a2:a1:95:91:d1:3b:de:
e7:60:0c:28:f5:e5:dd:32:c2:08:4c:e9:ff:05:e1:85:54:ca:
29:b9:a8:31:91:24:7a:c3:ef:81:f2:de:06:0d:2b:94:7d:da:
dc:d7:be:ec:57:cf:a8:28:7c:6b:f7:5e:f0:54:89:a7:1d:39:
21:6c:9c:48:05:8b:93:69:8e:d6:c7:4d:e8:1d:73:f0:1b:31:
2c:60:79:2b:22:b4:81:27:84:ad:fe:09:0d:da:0a:a8:03:44:
3b:54:f1:86:33:99:d1:69:d7:04:31:8d:a0:aa:ae:08:65:bc:
22:18:42:8a:cc:1b:fc:76:e1:49:36:43:7b:a4:5e:f0:ea:4e:
5e:bd:a8:57:16:1f:49:a7:44:0e:7d:ae:9b:eb:91:65:96:7e:
43:7f:cb:14:5f:9e:5a:2e:ea:9e:07:71:93:2d:ac:da:de:6d:
ce:db:55:f7:87:07:b6:6b:ea:ee:eb:e9:91:8e:61:87:82:ec:
45:d2:4d:85:44:36:89:c5:7f:53:b0:3e:a4:57:95:6b:9a:4e:
78:0b:bd:a1:9c:ad:4a:2a:d7:83:fa:b4:df:75:f1:5b:4f:38:
51:b0:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org