Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m4ZPn3EK2Y0_aQMJQXU0q-DzmKk.roa
File: m4ZPn3EK2Y0_aQMJQXU0q-DzmKk.roa (raw, json)
Hash identifier: kFMQuezNyGmNQT8upWpYNwzy5qW+bM7hAxec1h5V9+4=
Subject key identifier: 9B:86:4F:9F:71:0A:D9:8D:3F:69:03:09:41:75:34:AB:E0:F3:98:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187280F3086C06664638899D140D91E5A7C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m4ZPn3EK2Y0_aQMJQXU0q-DzmKk.roa
Signing time: Tue 28 Mar 2023 11:51:36 +0000
ROA not before: Tue 28 Mar 2023 11:51:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 94.103.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:0f:30:86:c0:66:64:63:88:99:d1:40:d9:1e:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 28 11:51:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b864f9f710ad98d3f690309417534abe0f398a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:af:5f:d9:d6:be:b3:51:5e:74:ea:2f:2e:
b7:92:22:51:1f:19:0a:bd:2a:3b:1a:b1:29:f2:ce:
d0:ef:e0:3a:94:d7:62:19:c9:ee:bf:5c:56:0d:9d:
21:2b:52:0c:14:f3:2f:c9:25:ab:d8:b6:f8:0d:86:
a8:09:f2:b5:22:2e:be:86:89:04:97:6d:0b:01:1e:
7f:ba:52:2c:18:27:6a:90:97:de:63:88:1f:20:09:
ca:dd:dd:87:42:1b:07:75:26:f8:9b:65:61:1d:8b:
26:57:f6:85:1f:ce:a0:59:84:b2:c4:c7:91:d0:3a:
f6:4d:6f:6b:af:b7:16:c3:d0:16:dc:95:21:db:26:
e3:db:af:36:78:75:21:52:9f:2d:63:8e:1f:3a:9e:
39:e0:d8:29:e2:7c:b0:b8:bb:b7:68:2a:f8:9f:a1:
0d:fd:4a:7b:af:b2:79:f0:1a:d4:ed:c6:10:d0:5a:
e4:a8:f7:03:b7:88:a4:1a:35:da:29:5d:34:7e:16:
cd:08:d8:60:f5:25:7c:98:ec:5e:39:a6:fb:fb:f3:
b7:50:b8:93:f9:38:2c:f8:b9:33:c0:f3:fd:7a:2e:
b5:22:d5:03:05:c3:cb:c0:09:cb:01:6f:af:6a:2b:
ed:d9:58:ed:bd:0a:fb:74:58:1d:3d:a9:68:58:ac:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:4F:9F:71:0A:D9:8D:3F:69:03:09:41:75:34:AB:E0:F3:98:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m4ZPn3EK2Y0_aQMJQXU0q-DzmKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
Signature Algorithm: sha256WithRSAEncryption
84:08:b5:9e:d2:8e:4b:cf:0e:6b:da:9c:33:90:d3:d5:5c:17:
9b:cf:8f:ef:a2:dc:22:89:af:9a:6a:3a:e1:e2:9b:ce:90:7a:
f9:22:b0:b5:6f:2f:7b:1d:aa:20:61:90:07:5d:10:c7:49:c2:
b4:a0:67:2a:7b:f4:89:3b:33:07:34:db:9b:72:9e:75:b0:ac:
39:d6:64:80:f6:8d:91:06:f1:ec:66:b9:d0:be:91:b8:36:c6:
d5:3d:d0:87:29:09:25:80:fb:04:cf:f5:73:a4:7a:be:cb:77:
70:ab:01:c5:86:18:99:d1:c9:0a:16:9f:48:90:5b:3a:9e:57:
aa:a3:6d:e6:9d:84:74:74:8f:3e:14:15:43:8d:70:2e:f7:37:
5d:5e:ea:26:3f:b1:e8:8e:44:c0:40:64:87:c1:5a:00:b8:07:
7f:43:46:03:f0:06:8f:85:5b:14:ca:53:ca:2e:a5:cd:62:27:
6e:06:fa:e5:55:62:73:b8:fa:fe:bc:af:61:be:11:95:16:b7:
90:09:fb:f9:46:fc:66:77:72:b8:d9:ce:e3:f5:8d:0a:b9:db:
56:ec:9f:24:95:33:bc:52:d7:a5:da:3c:3c:5d:7e:ea:2a:5b:
7a:3b:43:c4:38:00:e1:39:db:a8:0f:55:a6:0a:98:72:7f:c2:
f5:6c:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org