Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qkMr38g6EWrZ406dDYSEgtRWE_s.roa
File: qkMr38g6EWrZ406dDYSEgtRWE_s.roa (raw, json)
Hash identifier: pbPBUHYLM1M/WKkFzA89t1lmyU+waFgCfkV70Un17tE=
Subject key identifier: AA:43:2B:DF:C8:3A:11:6A:D9:E3:4E:9D:0D:84:84:82:D4:56:13:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189B8B72C76495C17C92F6728EC287F8273
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qkMr38g6EWrZ406dDYSEgtRWE_s.roa
Signing time: Thu 03 Aug 2023 00:05:59 +0000
ROA not before: Thu 03 Aug 2023 00:05:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
45.14.166.0/24 maxlen: 24
45.14.167.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:b7:2c:76:49:5c:17:c9:2f:67:28:ec:28:7f:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 00:05:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa432bdfc83a116ad9e34e9d0d848482d45613fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:f0:dc:e6:79:1a:99:da:8c:ed:83:28:a1:
06:86:09:92:80:5e:e6:5d:31:46:99:34:8c:81:ac:
af:5d:f0:13:c8:3d:6d:86:f9:39:c3:87:a8:52:8f:
f8:a3:1c:f4:49:8c:81:fa:96:77:df:b4:70:9e:8d:
94:5b:42:f2:16:c4:d3:d7:b5:f7:94:8c:1b:fc:85:
10:33:c1:56:df:ce:18:d3:ba:18:f3:8b:6d:ae:04:
99:2b:25:2c:2c:d3:a2:5e:48:89:88:18:ca:94:da:
15:de:ce:17:45:dc:2d:1c:47:02:5c:7e:9d:1f:3b:
9a:ac:df:e0:ee:f4:d1:7d:70:91:bb:34:c7:6e:1b:
b5:65:3d:d9:fa:0d:cb:7e:f2:79:a0:0c:4d:0d:61:
a3:01:49:b9:37:7e:1c:ef:6b:b4:d2:6b:41:6d:54:
70:36:3a:e3:b4:2a:a5:e1:ac:5a:a7:62:ef:e0:23:
cc:8d:5b:62:49:d0:60:28:29:7b:58:0f:13:c1:95:
50:af:a3:6a:2f:cb:59:a4:1b:7f:04:2e:cc:d8:80:
70:37:97:43:dd:ab:0d:05:6f:01:41:ee:d0:67:f1:
e7:49:17:99:2c:c2:46:37:ba:71:92:58:84:20:a9:
e5:62:74:b3:5a:d9:ca:70:c4:f8:3f:f6:c8:4f:6f:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:2B:DF:C8:3A:11:6A:D9:E3:4E:9D:0D:84:84:82:D4:56:13:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qkMr38g6EWrZ406dDYSEgtRWE_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/23
45.129.85.0/24
83.219.96.0/24
83.219.99.0/24
87.120.68.0/23
93.123.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8d:34:f8:d4:d8:71:ee:8e:5d:7d:1c:e2:5c:9d:df:78:b9:
d0:08:02:5c:2e:77:8e:ad:78:9d:15:9f:c2:af:27:18:40:d4:
ea:ae:2d:5e:8d:e1:f0:78:17:9f:9a:19:fb:3f:fb:22:87:20:
a6:5b:14:c2:c7:b5:d3:05:1e:ec:23:2a:96:25:42:f9:00:28:
cb:f1:fa:b3:7f:9f:23:43:75:64:4f:37:fb:e9:00:b6:e7:36:
d5:0d:bb:80:e8:f2:74:dd:66:63:17:89:04:f1:7c:c3:70:98:
e6:a9:89:4f:66:49:f5:30:d1:e5:ab:d4:8c:1a:8e:88:f4:48:
fb:79:e1:19:e6:4f:7a:24:cf:3a:f9:2a:e5:62:0b:1c:17:dc:
93:b0:f5:1a:fa:4c:04:17:32:17:cc:d7:00:7e:b5:07:7b:07:
3a:36:66:86:a7:3c:00:4e:da:2c:aa:09:75:31:af:d5:8d:cf:
52:2c:63:9d:2b:d3:38:08:dd:f2:3a:6e:2a:61:f6:ec:4f:58:
e4:f2:ce:29:7a:62:05:58:d5:89:68:a8:73:ae:d0:e6:b4:c1:
91:ab:3d:39:38:bc:b9:5d:05:90:54:32:0b:9e:38:47:0a:b2:
13:2d:f6:b5:b8:46:e7:7b:1b:6d:04:61:21:cf:20:02:ec:b6:
a6:31:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:49:41 2023 by rpki-client on console-ams.rpki-client.org