Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p04aGYs8Mh2bCmI73LyVUPea4oM.roa
File: p04aGYs8Mh2bCmI73LyVUPea4oM.roa (raw, json)
Hash identifier: NijpaXiBj6TQQTwaTFuxSCn4hwHIlJ665sWwiQYrU5s=
Subject key identifier: A7:4E:1A:19:8B:3C:32:1D:9B:0A:62:3B:DC:BC:95:50:F7:9A:E2:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81EE9DDD958EEDC05FE1CF7150DE3B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p04aGYs8Mh2bCmI73LyVUPea4oM.roa
Signing time: Sun 01 Jan 2023 13:25:09 +0000
ROA not before: Sun 01 Jan 2023 13:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48057
IP address blocks: 93.123.75.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ee:9d:dd:95:8e:ed:c0:5f:e1:cf:71:50:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a74e1a198b3c321d9b0a623bdcbc9550f79ae283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:d7:04:fc:50:3b:28:ed:4f:3d:00:2a:0f:
df:79:4f:ee:7f:17:ed:3c:a7:c0:e0:bd:3b:da:e7:
17:1d:67:04:f2:56:eb:61:17:7c:ad:e6:de:20:19:
f7:5c:a3:1c:23:b6:ab:e2:0f:37:78:db:45:0d:18:
80:22:06:a8:11:3c:9b:fb:3e:c0:80:05:90:ef:85:
71:82:9c:26:c6:2a:e4:bd:57:cd:9c:09:34:5b:60:
70:eb:8d:ce:f1:bc:e0:ac:25:6e:fc:ac:40:44:da:
75:59:c8:0c:3f:80:45:3e:d6:58:9f:ae:b9:a7:cd:
c3:21:19:04:15:0d:c2:c1:9c:9e:04:89:2d:20:95:
88:f7:25:e6:94:84:a7:a5:8d:95:84:6b:41:14:fc:
52:c0:dd:78:3a:4e:88:1e:5b:c0:e5:05:70:4f:c9:
77:33:a6:fd:3f:af:d5:af:fb:14:1d:28:48:bc:15:
2a:f6:a1:5b:06:b6:c7:d5:04:16:25:94:ba:0b:99:
3f:aa:00:dd:02:7b:b5:b9:bc:18:74:bb:d1:55:67:
a2:1a:03:43:d6:d5:9f:25:ed:a9:c1:83:95:e9:a5:
6d:7b:12:62:90:b0:73:b3:6a:5e:3e:13:b2:02:4c:
87:13:75:80:fd:a2:ac:df:7e:28:c2:9c:43:f4:3c:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:1A:19:8B:3C:32:1D:9B:0A:62:3B:DC:BC:95:50:F7:9A:E2:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p04aGYs8Mh2bCmI73LyVUPea4oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
87:dc:5c:05:6f:8b:07:b8:b9:62:6b:5c:84:d0:9a:bc:6d:b8:
6b:b9:c3:5e:1b:06:91:d8:60:dd:a6:46:76:a8:40:ab:76:2d:
19:58:8a:12:c7:07:01:92:40:96:b5:28:0f:88:d6:10:98:77:
d2:fd:54:70:84:6d:82:ef:94:52:ec:9f:36:41:2d:81:e2:50:
cc:5d:85:f5:78:8f:64:9f:d4:72:7f:64:0f:4a:97:9c:ee:a9:
dd:74:94:2f:ce:bd:a0:ce:53:a4:fa:c9:19:eb:fe:f6:aa:69:
91:0c:77:e7:b1:1c:28:63:8a:c2:30:1e:0a:ea:3c:8c:54:70:
98:b4:5f:8d:12:fd:e3:57:f1:7e:e9:33:7a:aa:5b:d8:c7:76:
9f:07:84:5b:c4:8e:1e:a2:4d:51:40:d7:a0:f6:84:b7:a3:2b:
21:f3:b6:8d:51:dd:1f:b7:ea:d0:85:65:a7:c5:79:b7:cc:8b:
9c:af:80:0e:1e:fd:58:b4:f6:4b:82:44:20:19:b4:df:bf:d3:
25:5e:95:df:f4:13:74:d6:db:de:ae:b7:7c:36:6f:98:d2:3a:
ee:84:c3:9c:3d:5c:af:4b:57:fd:d8:f1:ab:71:c8:ec:27:e1:
45:18:69:d7:38:e6:14:8c:6f:fa:61:8d:c6:e6:67:e8:8e:11:
28:28:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org