Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/seHmUEF-4X8x79DNJnzU4wtTBIM.roa
File: seHmUEF-4X8x79DNJnzU4wtTBIM.roa (raw, json)
Hash identifier: Rf7KdqWBkq9hsMPgDgl2ASlJ6iyXMzVrJUnFjIqPWaI=
Subject key identifier: B1:E1:E6:50:41:7E:E1:7F:31:EF:D0:CD:26:7C:D4:E3:0B:53:04:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CE158E516DD6FDF742ED8A47D99344EA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/seHmUEF-4X8x79DNJnzU4wtTBIM.roa
Signing time: Sun 07 Jan 2024 00:35:48 +0000
ROA not before: Sun 07 Jan 2024 00:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
93.123.101.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 10:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e1:58:e5:16:dd:6f:df:74:2e:d8:a4:7d:99:34:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 7 00:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1e1e650417ee17f31efd0cd267cd4e30b530483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:d5:30:b9:53:bd:a1:71:57:69:c9:c3:d3:
e8:a6:37:6b:c0:42:30:17:0c:4d:c5:26:bf:9f:5c:
50:66:0f:ba:49:77:8b:6c:3c:bd:8e:37:15:3a:fc:
80:9a:83:95:29:8b:ea:70:c7:12:af:85:ce:2b:b1:
6c:fc:d2:5a:96:85:3f:20:62:c8:50:e4:33:de:69:
e5:c7:45:c4:17:d2:52:53:4b:5c:1c:35:9c:f6:e5:
7d:84:e8:d0:91:53:53:41:1d:5c:b6:42:33:dc:14:
c8:95:28:08:79:80:e6:0d:b6:eb:d4:cf:6c:af:5a:
6a:9f:ee:86:d7:a3:96:9c:91:e4:bb:63:72:32:a3:
1c:fd:e9:e0:04:1a:56:6d:52:30:25:d3:99:be:28:
a8:df:7d:5f:49:1d:de:8e:26:30:a1:3a:c1:e6:7c:
b4:63:cc:9b:f1:d3:4f:15:73:d6:1c:8b:2f:03:70:
58:c5:a5:48:f9:6b:aa:5a:c9:29:f0:0a:9f:5b:04:
fe:e9:8a:59:4a:d3:71:2d:da:66:22:ec:2b:ea:70:
b3:41:ae:4b:79:ea:3e:62:c9:39:1c:1b:b0:88:fa:
19:df:d4:d2:bc:12:09:27:4c:e2:6c:ac:5e:0e:77:
fe:0b:fd:55:42:dd:ac:00:43:76:5b:36:e3:e1:03:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:E6:50:41:7E:E1:7F:31:EF:D0:CD:26:7C:D4:E3:0B:53:04:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/seHmUEF-4X8x79DNJnzU4wtTBIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/24
93.123.100.0/23
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f0:44:7d:ce:8d:5f:1c:7b:3d:36:c9:0d:3b:0b:91:03:ec:
4a:8f:02:e2:01:cf:30:78:56:69:85:43:91:a7:bb:a3:0b:8e:
e3:42:d1:56:74:0d:e4:e6:76:0b:1f:87:ab:3c:4a:60:2e:42:
5f:61:ac:a1:fb:d4:dc:68:e8:a2:34:c8:e2:de:42:aa:b5:5f:
33:44:d1:10:0d:a5:39:09:2c:c6:e0:0a:fd:86:6b:a7:0c:76:
b2:a5:40:a2:84:ea:21:6a:2d:7c:8d:c3:02:fd:13:72:bf:83:
47:4d:f6:7a:85:33:63:3c:13:52:3e:f9:31:c7:b6:a7:0c:32:
22:37:34:08:67:f7:91:c8:70:d2:4e:74:3a:b1:dc:62:2d:c0:
ec:de:ea:c7:ba:ea:5c:a2:0c:a5:6c:c6:b5:bf:92:c2:4e:78:
5e:3d:a7:35:ff:f2:2e:b2:dd:44:44:6b:62:64:61:60:53:28:
bb:10:07:b4:57:19:e2:be:6e:88:70:9c:04:75:a5:2d:1e:b0:
48:0c:9d:25:09:bd:b6:de:98:27:45:f3:37:60:78:34:91:5f:
1e:f6:af:d5:4e:98:c5:91:c7:cc:dc:b5:4e:8c:6b:84:1f:06:
f9:61:0a:f2:e3:d7:dd:c7:32:8b:f0:f3:1a:a1:6f:16:1f:21:
78:b2:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:56:03 2024 by rpki-client on console-ams.rpki-client.org