Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ru5dskjnHmuFKub_s-XolzpKFBk.roa
File: ru5dskjnHmuFKub_s-XolzpKFBk.roa (raw, json)
Hash identifier: d90kpVuDDT5w9QaxJhfp5VpjIYEDDOEuOnbtNnmxMjg=
Subject key identifier: AE:EE:5D:B2:48:E7:1E:6B:85:2A:E6:FF:B3:E5:E8:97:3A:4A:14:19
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCCE53F8F588DCCE544A692FF607EA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ru5dskjnHmuFKub_s-XolzpKFBk.roa
Signing time: Tue 02 Jan 2024 06:29:22 +0000
ROA not before: Tue 02 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 07 Jan 2024 00:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ce:53:f8:f5:88:dc:ce:54:4a:69:2f:f6:07:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeee5db248e71e6b852ae6ffb3e5e8973a4a1419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:a8:09:22:90:93:c8:05:37:41:1a:20:c0:
77:6f:d6:b1:9b:97:8c:48:e5:31:70:d5:b4:6e:69:
1d:83:3a:26:d3:1f:a7:a4:ff:c6:c5:77:52:70:62:
a1:3d:d7:08:09:af:16:04:9d:07:6e:cc:98:2e:6d:
0b:a3:13:42:8f:18:a4:e9:10:69:38:80:88:91:51:
29:4e:c5:8d:03:69:b4:a0:d1:0a:29:85:3e:54:f7:
71:48:20:58:43:3b:25:ab:43:e2:bc:ca:95:6a:fa:
22:bc:88:8c:03:79:30:da:76:74:6d:8a:83:3e:73:
2e:41:24:37:6b:96:fc:c2:8b:25:a5:10:aa:03:0b:
9d:33:8a:85:9b:c9:a6:9d:04:70:5d:d3:fd:34:f1:
19:92:ef:7a:6d:a3:66:a0:f7:4a:94:67:5f:c0:46:
92:e8:fc:b2:9f:c8:7d:dc:75:bd:11:41:bb:97:5e:
d4:5d:5c:d6:1f:5e:7f:55:f7:2e:d4:d9:e9:e4:0a:
ef:bc:00:59:d6:22:60:73:3f:d9:ac:54:de:c8:eb:
cb:2d:27:ff:f9:2e:a8:f8:f7:86:83:be:12:9b:e1:
9d:94:f8:bf:48:15:57:5d:05:8e:eb:a5:60:6a:f7:
a8:31:43:07:33:69:d3:9c:52:59:b1:4f:e3:b5:1e:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:5D:B2:48:E7:1E:6B:85:2A:E6:FF:B3:E5:E8:97:3A:4A:14:19
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ru5dskjnHmuFKub_s-XolzpKFBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:32:7b:7e:c7:43:3c:f9:c4:80:65:30:d6:62:7b:77:c9:1c:
ff:a6:91:17:46:0f:0c:c2:af:31:96:57:9f:7d:0f:f6:0f:1c:
6c:bf:07:b0:20:45:57:a6:aa:1d:32:50:58:67:5f:07:64:62:
9e:fb:ee:85:e4:fb:85:06:04:3c:05:06:78:03:63:b4:a4:53:
b4:f5:c9:e7:9b:a1:be:63:17:cf:e9:54:69:a2:c9:e6:c8:f1:
15:11:8b:7f:88:88:f3:2c:97:5c:2d:37:83:8d:0a:3c:86:c9:
60:71:04:5c:b3:a8:f9:02:4a:67:0f:35:59:df:e5:5f:ab:0d:
75:4a:f6:53:89:a0:2f:35:83:92:d8:19:a6:46:17:8e:a5:13:
57:03:c1:a9:4b:32:a5:af:01:db:54:b8:32:12:10:8f:1f:2e:
48:f4:da:40:51:38:1f:8e:62:ff:1f:b4:40:97:40:2c:d1:ab:
97:2a:dc:df:ec:e7:f5:99:6f:8e:f9:4d:c4:6c:63:9d:27:0c:
27:bd:2c:fd:74:97:21:7d:0f:a9:fa:b5:73:33:92:b5:21:88:
43:eb:07:5d:03:2a:31:9d:96:1a:4e:fc:ea:6b:12:7f:f0:d4:
24:d5:73:4d:8e:9c:63:b1:f2:d5:27:e2:ed:cb:bb:81:8e:a5:
60:09:43:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 01:53:09 2024 by rpki-client on console-ams.rpki-client.org