Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n5L2of6-CNVZqXklIXEIbGhRNME.roa
File: n5L2of6-CNVZqXklIXEIbGhRNME.roa (raw, json)
Hash identifier: tToq1jXrZkNUebuiK/vvZQ1+xI8kGkWM/U+9PCXy94M=
Subject key identifier: 9F:92:F6:A1:FE:BE:08:D5:59:A9:79:25:21:71:08:6C:68:51:34:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B5D5BE9E0F8DC683379258C444C0CA3D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n5L2of6-CNVZqXklIXEIbGhRNME.roa
Signing time: Mon 23 Oct 2023 16:26:26 +0000
ROA not before: Mon 23 Oct 2023 16:26:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:5b:e9:e0:f8:dc:68:33:79:25:8c:44:4c:0c:a3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 16:26:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f92f6a1febe08d559a979252171086c685134c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:e0:f2:f2:51:67:cc:2d:77:ae:e0:6f:87:
ab:86:ce:a6:55:95:7e:1d:d4:5a:3c:94:71:fd:8f:
4b:40:da:d4:b7:b9:6e:a6:f4:72:9e:8d:11:52:24:
76:7c:80:b7:06:e2:57:3d:b6:0a:65:8e:86:4f:a7:
7f:d2:be:ed:5e:14:33:f9:7f:66:9a:24:a1:78:73:
44:8f:af:4d:aa:71:43:78:93:cc:27:4c:7a:96:82:
53:35:90:85:8f:6b:63:2c:c4:bd:97:e6:09:3b:de:
aa:05:4e:89:b0:cb:97:33:49:19:98:d5:56:f2:d8:
5e:cb:46:f0:8a:f4:ce:cc:f1:0c:44:b4:0c:e4:40:
23:32:f1:a1:d4:92:98:ef:66:53:75:f5:86:26:a9:
9a:50:8d:7d:55:8c:b3:5e:18:0d:b9:be:7f:3a:81:
39:44:f6:e9:68:ee:09:05:cc:ca:5c:ab:44:6f:20:
e1:d1:96:e7:46:01:57:4c:a2:46:0c:dc:82:b8:c2:
29:f6:7e:07:81:60:9d:87:30:f1:9b:a7:d9:24:87:
c5:e1:7b:8b:c7:06:8b:b9:f8:5c:1d:42:d7:fe:ba:
04:80:78:b4:a8:e5:b9:01:36:58:55:a1:fe:22:14:
7c:f3:c3:3e:b7:65:43:76:81:d0:74:b9:81:08:5e:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:F6:A1:FE:BE:08:D5:59:A9:79:25:21:71:08:6C:68:51:34:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n5L2of6-CNVZqXklIXEIbGhRNME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a5:09:5f:1e:03:d6:1e:55:51:ce:ee:d1:f6:02:2b:de:b5:
45:aa:bb:42:de:06:8a:a0:b7:d3:30:af:ff:71:6b:58:a0:8d:
86:a0:bd:7b:dc:a6:ac:62:1b:4a:d5:45:77:d9:14:c9:60:d3:
a7:52:25:a1:25:5c:94:44:41:5e:b9:b8:b2:44:6b:db:ba:64:
c9:1f:c2:15:ba:55:94:f9:a6:ce:e6:2d:a0:5e:84:5c:b2:7d:
47:34:8f:6b:a1:17:4f:2d:f8:c5:37:23:da:10:d9:15:2a:a0:
fc:17:a8:d2:1e:1c:d0:13:3b:b1:58:f9:f4:e1:e8:84:59:51:
97:e7:ec:18:3d:a6:b5:65:90:50:96:1b:53:c2:7a:fc:0e:fc:
f8:16:fc:f8:b5:52:4a:4b:d6:91:32:45:9d:10:e6:0d:9f:92:
aa:c2:a1:f7:98:23:74:52:c1:ec:38:ce:57:71:a9:55:ea:fe:
65:42:3c:d7:49:34:0e:17:7b:b4:4d:de:90:f3:f1:03:e3:c5:
75:10:ac:d7:aa:bf:4d:29:67:84:82:8e:3e:f1:1f:8d:08:88:
c8:a2:6b:e2:38:8d:9b:d4:e3:ff:66:22:2f:97:13:df:3d:d8:
08:ab:40:2d:ed:d9:58:36:b1:bc:40:39:a9:3e:12:0f:29:f1:
d9:d4:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 07:27:24 2023 by rpki-client on console-ams.rpki-client.org