Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r0PMo4i6rNxm8QEMO4o2_UOk7vM.roa
File: r0PMo4i6rNxm8QEMO4o2_UOk7vM.roa (raw, json)
Hash identifier: 9PkQtxCFeWuVqIeFDN+xfw2VXOKSjKspd5P0EuABJ9o=
Subject key identifier: AF:43:CC:A3:88:BA:AC:DC:66:F1:01:0C:3B:8A:36:FD:43:A4:EE:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DF23976D1AD8C56F997F7509B46414D8E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r0PMo4i6rNxm8QEMO4o2_UOk7vM.roa
Signing time: Thu 29 Feb 2024 00:17:48 +0000
ROA not before: Thu 29 Feb 2024 00:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 93.123.75.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:39:76:d1:ad:8c:56:f9:97:f7:50:9b:46:41:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 29 00:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af43cca388baacdc66f1010c3b8a36fd43a4eef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:95:71:97:8e:c7:05:a7:43:87:91:5f:69:
26:a9:2d:b2:56:a3:89:66:83:4c:36:18:d0:78:1a:
ea:aa:62:d3:55:8e:52:b9:95:03:1e:6d:f8:d8:35:
ec:b8:f2:cf:8f:32:7e:00:c6:e5:58:1f:a5:b8:7b:
a5:a3:bc:c1:77:f4:0d:66:d3:0d:11:3c:3b:cf:38:
48:03:4d:c3:35:f6:75:4e:33:53:be:8f:9b:4e:8f:
4d:4b:e2:76:d2:97:99:36:54:d4:92:97:f5:0c:33:
96:2b:8d:f4:0a:55:04:82:35:3b:fc:2b:24:7c:48:
49:17:8e:ae:cd:73:f3:31:ec:7e:fb:3f:77:9f:f9:
5a:31:77:3d:a6:3a:5b:8b:3e:af:3b:be:2d:86:b3:
8a:36:bd:2c:56:c7:90:a2:31:e9:7d:a1:04:54:e7:
56:01:61:51:d0:39:bd:2b:7c:b5:1c:4e:f1:fe:62:
f0:50:c4:6e:a0:f8:2c:88:b8:ad:e1:c8:b5:da:98:
5a:97:b1:62:1c:f4:95:1a:31:33:d2:77:f7:71:05:
e9:a4:08:25:03:df:66:1e:c0:5d:98:5b:40:30:b0:
35:70:e9:9e:23:a7:7c:3c:5e:2a:f8:fa:1d:33:51:
13:da:ca:83:c9:a8:f1:5b:5e:58:64:3a:cc:93:85:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:CC:A3:88:BA:AC:DC:66:F1:01:0C:3B:8A:36:FD:43:A4:EE:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r0PMo4i6rNxm8QEMO4o2_UOk7vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.75.0/24
93.123.119.0/24
185.252.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:37:3c:f9:75:bc:d4:a7:c0:8b:72:ca:08:f5:cf:f6:19:87:
36:bd:bc:fe:dd:81:e0:76:50:2f:95:73:12:40:87:fd:08:14:
21:64:28:75:c6:67:f5:df:a2:f0:64:7d:12:cf:c6:42:fc:85:
db:d3:25:92:97:4f:44:78:1f:79:e9:32:c3:6c:29:36:0d:d7:
8c:9a:40:9d:10:51:77:ad:02:7f:4a:66:7e:78:25:81:64:0b:
29:3e:28:5c:80:1f:11:09:00:63:c3:a1:94:55:3c:48:c2:fc:
b5:e7:7d:3d:d4:8c:1e:5a:c6:eb:f8:9e:f8:67:2a:0b:c0:31:
50:6c:71:59:17:3c:87:13:24:47:0a:3b:e0:46:96:ba:24:87:
b0:cd:e3:4b:aa:81:58:c4:32:22:d0:88:c7:a8:7c:50:32:f4:
08:d1:64:12:11:96:0d:d0:0e:2a:2d:d5:6d:1b:bd:17:a8:98:
99:e7:82:f2:14:c4:f8:a2:9a:2a:11:06:3e:43:0b:41:35:e6:
45:fe:3b:2d:55:30:76:33:bf:97:5c:95:85:88:03:1a:95:2f:
4e:9f:72:6f:37:b6:22:8a:2e:e2:b0:62:7f:63:a8:76:93:b3:
78:a1:7a:79:ea:67:3a:21:bd:61:4b:84:22:41:39:26:04:21:
5a:e0:fa:cd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY3yOXbRrYxW+Zf3UJtGQU2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjI5MDAxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjQzY2NhMzg4YmFhY2RjNjZmMTAxMGMzYjhhMzZmZDQzYTRlZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1OVcZeOxwWnQ4eRX2kmqS2yVqOJ
ZoNMNhjQeBrqqmLTVY5SuZUDHm342DXsuPLPjzJ+AMblWB+luHulo7zBd/QNZtMN
ETw7zzhIA03DNfZ1TjNTvo+bTo9NS+J20peZNlTUkpf1DDOWK430ClUEgjU7/Csk
fEhJF46uzXPzMex++z93n/laMXc9pjpbiz6vO74thrOKNr0sVseQojHpfaEEVOdW
AWFR0Dm9K3y1HE7x/mLwUMRuoPgsiLit4ci12phal7FiHPSVGjEz0nf3cQXppAgl
A99mHsBdmFtAMLA1cOmeI6d8PF4q+PodM1ET2sqDyajxW15YZDrMk4XL4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK9DzKOIuqzcZvEBDDuKNv1DpO7zMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcjBQTW80aTZyTnhtOFFFTU80bzJfVU9rN3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXXtLAwQA
XXt3AwQAufyjMA0GCSqGSIb3DQEBCwUAA4IBAQAaNzz5dbzUp8CLcsoI9c/2GYc2
vbz+3YHgdlAvlXMSQIf9CBQhZCh1xmf136LwZH0Sz8ZC/IXb0yWSl09EeB956TLD
bCk2DdeMmkCdEFF3rQJ/SmZ+eCWBZAspPihcgB8RCQBjw6GUVTxIwvy153091Iwe
Wsbr+J74ZyoLwDFQbHFZFzyHEyRHCjvgRpa6JIewzeNLqoFYxDIi0IjHqHxQMvQI
0WQSEZYN0A4qLdVtG70XqJiZ54LyFMT4opoqEQY+QwtBNeZF/jstVTB2M7+XXJWF
iAMalS9On3JvN7Yiii7isGJ/Y6h2k7N4oXp56mc6Ib1hS4QiQTkmBCFa4PrN
-----END CERTIFICATE-----
Generated at Sat Mar 9 04:34:28 2024 by rpki-client on console-ams.rpki-client.org