Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nMFaxo8RlumX5-uixNUApgGOGiE.roa
File: nMFaxo8RlumX5-uixNUApgGOGiE.roa (raw, json)
Hash identifier: CpGGsa8bC4FUhHjlCh7OQEVEjdUm/FWJr07ne0A/pLk=
Subject key identifier: 9C:C1:5A:C6:8F:11:96:E9:97:E7:EB:A2:C4:D5:00:A6:01:8E:1A:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191FC8C7552880FC8EB3161BE52D3BE5FCB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nMFaxo8RlumX5-uixNUApgGOGiE.roa
Signing time: Mon 16 Sep 2024 20:35:49 +0000
ROA not before: Mon 16 Sep 2024 20:35:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.86.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 10:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fc:8c:75:52:88:0f:c8:eb:31:61:be:52:d3:be:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 16 20:35:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cc15ac68f1196e997e7eba2c4d500a6018e1a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:ef:04:e7:21:dc:87:18:80:7d:8f:4b:90:
06:3d:1c:b9:cc:39:78:c3:57:61:66:cf:8a:30:2a:
16:18:ca:e0:91:81:e9:24:86:48:3f:7b:38:52:bf:
5e:91:ee:35:1a:17:77:30:72:3a:40:1b:29:87:0d:
61:7d:de:0b:98:28:c5:5a:01:2c:80:bc:9a:01:84:
5b:55:13:0c:e6:af:2b:d5:e9:cc:3d:0e:10:2f:83:
9b:90:86:05:35:16:1c:8c:25:d8:f4:66:df:76:32:
9a:2b:ad:79:d1:2f:4e:a6:e1:85:69:9a:e6:63:ad:
85:7f:d2:92:52:88:7f:51:75:8c:a6:14:a3:37:1d:
20:0e:f5:11:bf:30:d7:14:57:4d:df:5a:8d:c0:4a:
27:6e:a3:96:91:39:8b:dd:d5:73:9e:b5:34:c9:8e:
24:61:37:cc:69:31:62:63:cf:3d:9b:47:29:ab:df:
1e:f9:59:26:cb:29:9d:91:51:bc:5f:77:a0:85:c1:
4e:35:bf:22:8e:fe:e7:35:8a:9d:a7:0c:76:32:e3:
ea:f0:ed:02:19:49:36:b8:84:33:c6:9d:b0:6f:81:
eb:3a:cc:ae:ea:d0:e0:12:3f:76:21:b5:b0:12:0e:
68:1f:c8:2a:ef:7c:55:fa:8c:3f:89:fe:4c:ff:f9:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:5A:C6:8F:11:96:E9:97:E7:EB:A2:C4:D5:00:A6:01:8E:1A:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nMFaxo8RlumX5-uixNUApgGOGiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.86.0/24
93.123.74.0/23
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
73:f9:aa:b8:a2:a5:2a:c3:5e:8b:fb:c9:89:df:08:c0:13:45:
95:a6:41:40:b2:60:bb:6f:a2:ea:80:11:89:28:de:a6:10:f4:
f5:65:e5:0f:c6:ea:cd:db:c8:f1:ad:52:0b:d9:68:21:12:60:
fe:15:9b:4a:57:c7:af:37:54:01:73:8d:c9:43:9d:20:db:db:
ea:5a:18:39:31:6e:36:ae:ed:f3:85:1a:c8:10:36:78:40:71:
ba:9a:28:8b:45:a4:26:db:8b:26:5f:01:62:85:ee:10:f3:7e:
89:f6:4b:d6:06:4b:5c:85:88:89:6d:87:31:e4:14:43:01:72:
2f:03:06:c9:54:65:2d:da:87:f4:fc:ba:8a:a5:7e:b9:37:f0:
ea:86:48:01:39:3d:2c:72:d0:19:22:d6:c7:bf:56:8c:4c:86:
e5:80:12:d2:d6:4b:55:a9:f9:8c:20:28:bb:c6:52:06:0e:13:
ec:bd:78:6d:99:1f:54:6d:9a:a4:2e:44:e6:3a:37:68:af:83:
ca:a8:45:be:84:c0:a7:94:da:ae:81:f3:61:e5:57:3a:a4:bc:
b2:96:db:a0:d9:40:58:39:f0:11:ac:8f:f7:13:97:cb:42:44:
20:5b:6a:8e:b2:ec:60:89:3c:89:96:37:93:d1:1b:61:21:a0:
b5:42:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 14:49:15 2024 by rpki-client on console-ams.rpki-client.org