Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oMajM2WV22mlCIPIuLD2p4qyXsE.roa
File: oMajM2WV22mlCIPIuLD2p4qyXsE.roa (raw, json)
Hash identifier: EmLP+szvO63CefuOQ021XZuPoV7InAs8znTBAIbrBy4=
Subject key identifier: A0:C6:A3:33:65:95:DB:69:A5:08:83:C8:B8:B0:F6:A7:8A:B2:5E:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DC7A0A3211E958F4C53E2FFCAF5A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oMajM2WV22mlCIPIuLD2p4qyXsE.roa
Signing time: Sun 01 Jan 2023 13:25:05 +0000
ROA not before: Sun 01 Jan 2023 13:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 91.92.195.0/24 maxlen: 24
87.121.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:dc:7a:0a:32:11:e9:58:f4:c5:3e:2f:fc:af:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0c6a3336595db69a50883c8b8b0f6a78ab25ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:32:cc:bf:53:93:75:23:d8:7d:18:19:ea:
1b:b7:47:ad:e1:70:d6:d0:6a:d0:b4:d6:01:f9:0e:
99:cd:e0:61:9e:08:a3:03:09:a6:7b:5e:b4:c2:bc:
a8:45:b9:5b:37:64:9b:d2:e8:67:10:14:ba:9c:b4:
57:df:b3:4f:75:87:fb:3a:e2:99:17:8f:bc:8f:d3:
32:dc:0e:ac:70:ea:a6:31:1a:9d:b5:0a:6d:53:b7:
2e:80:7b:2e:05:c7:f4:ac:3b:37:c2:5a:fa:f4:09:
1e:6b:be:4c:b2:61:ff:f6:04:9e:97:3e:4e:dd:c0:
68:0a:2d:9d:5b:21:40:53:f9:41:39:32:f7:cd:4b:
ce:a9:6c:00:0a:07:79:12:5b:af:e4:45:93:8d:82:
8f:14:b3:5b:89:48:e2:a5:ae:bd:fc:c0:7d:6a:ae:
7a:15:f2:63:97:bb:a9:15:dd:a6:30:a2:43:76:aa:
1b:2d:9f:87:7f:27:0e:fa:e5:93:30:24:e8:9e:6d:
ef:7a:74:95:8b:02:e6:38:28:49:fe:84:20:28:fe:
3e:1b:81:ab:ef:24:66:dd:74:cc:32:b4:be:7d:aa:
26:19:9d:f7:92:07:18:53:94:96:dc:a5:14:22:59:
7c:55:63:94:e2:49:91:d8:2b:6b:37:46:59:29:94:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:A3:33:65:95:DB:69:A5:08:83:C8:B8:B0:F6:A7:8A:B2:5E:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oMajM2WV22mlCIPIuLD2p4qyXsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
91.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
15:86:98:aa:60:5a:fc:4f:40:10:35:c2:0d:e4:02:57:15:64:
f6:15:d5:fb:c8:1c:9b:16:05:e3:d6:5b:74:56:c7:2d:36:a0:
1b:a8:9b:8c:b2:1d:22:24:35:fc:09:2f:58:ea:3b:53:9c:43:
21:d9:d0:cc:20:4c:f0:40:3c:47:63:5a:a6:07:bf:ec:66:05:
58:3e:14:40:1c:ce:c6:2c:a7:e7:f3:9e:98:af:89:4e:5f:ae:
d4:2d:66:96:ef:4f:a6:7e:69:ad:91:ba:3f:2b:66:aa:6b:39:
de:fe:21:49:70:f7:88:99:aa:83:0a:67:7e:c2:8f:55:f6:9a:
20:77:77:34:68:b3:df:10:a5:a2:e4:24:e0:aa:b5:e5:f5:93:
70:84:48:8b:2b:d9:f2:ba:d1:5d:0f:e1:4d:8f:54:62:39:57:
0e:4a:c4:ee:5b:b7:4b:c6:13:13:d8:16:8d:14:e9:17:e1:b2:
75:4d:05:ed:30:17:01:23:70:52:53:48:ea:e5:5d:22:ac:1d:
e5:f0:78:e5:e0:91:56:f6:bc:d0:ec:f1:f2:6c:dc:39:8d:57:
34:6d:03:dc:b2:4a:a6:7a:15:db:97:ea:c5:98:5d:3a:f6:63:
a5:18:7a:4a:48:6d:41:6a:03:15:70:35:89:9e:ae:21:54:e6:
69:6f:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org