Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t99ln1NGRSGYDezwDV6jJKC8ZL4.roa
File: t99ln1NGRSGYDezwDV6jJKC8ZL4.roa (raw, json)
Hash identifier: xsMQ/m4/W1s2V5NUJCxNsJ+UQvoJCrXpgFqKCmm/DZo=
Subject key identifier: B7:DF:65:9F:53:46:45:21:98:0D:EC:F0:0D:5E:A3:24:A0:BC:64:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BB0959FC66645F2A66FD9AFA3B1455A4B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t99ln1NGRSGYDezwDV6jJKC8ZL4.roa
Signing time: Wed 08 Nov 2023 20:17:57 +0000
ROA not before: Wed 08 Nov 2023 20:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 94.156.14.0/24 maxlen: 24
87.120.158.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:95:9f:c6:66:45:f2:a6:6f:d9:af:a3:b1:45:5a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 8 20:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7df659f53464521980decf00d5ea324a0bc64be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:cc:a2:58:9d:42:c3:e9:6b:2b:ff:84:17:
c9:3f:b5:d7:62:0a:3d:00:08:f3:e3:63:fc:71:a1:
78:97:4e:b8:13:69:db:83:de:da:14:0c:6e:2d:b1:
ea:4b:4f:2e:51:63:b0:c4:53:70:08:8e:8a:c5:f1:
d8:1f:19:82:1b:d1:fc:bb:11:76:30:55:93:f2:8d:
3d:db:ec:83:60:16:07:08:0a:67:3c:3c:85:cc:bf:
f9:2e:e7:45:e4:08:99:74:c9:84:0e:60:3e:da:94:
17:f6:1f:b3:d3:53:8a:99:b0:ec:f2:7e:2b:ac:75:
0b:82:f6:33:4e:6e:66:e1:2c:11:fe:69:58:58:73:
d6:bc:0d:cc:9b:af:8d:42:19:b8:90:9e:4f:6f:8d:
b7:73:76:92:1e:2c:f2:8c:63:8f:43:4c:41:7e:f6:
b1:1a:4a:94:66:32:7d:a1:99:df:70:ce:94:9b:39:
91:08:42:db:8a:e5:dc:6c:7b:54:c1:62:18:bc:8a:
70:0d:8b:03:38:8a:34:d5:62:ca:97:28:fa:0b:8a:
a2:37:85:36:ff:d5:1c:f1:b2:08:ae:a7:4f:3f:64:
9b:0f:ef:52:b5:83:ba:d0:b1:40:50:d4:2f:cb:49:
64:f8:72:4e:57:e4:c0:e0:8f:5e:88:75:8b:fc:c4:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:65:9F:53:46:45:21:98:0D:EC:F0:0D:5E:A3:24:A0:BC:64:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t99ln1NGRSGYDezwDV6jJKC8ZL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.158.0/23
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
75:88:89:f5:46:d6:88:e2:e2:bf:f2:7c:9f:0c:5f:56:51:0d:
7d:40:25:30:f1:1f:de:5b:07:b1:38:c9:8e:7e:fe:b3:1b:35:
87:d3:38:6b:3d:86:f4:c1:27:eb:67:26:bd:0c:aa:b2:56:fc:
bf:c4:09:64:eb:ec:1c:bf:73:a0:17:11:ad:f9:fd:db:82:73:
65:a4:1c:15:df:26:66:7a:bf:df:a8:7d:20:2a:a8:75:5a:ac:
b0:9a:f8:42:d5:eb:bf:ac:7e:ef:5d:14:b5:06:fe:48:bd:14:
b5:1d:ee:3c:ff:67:67:cc:e3:4b:78:ea:4c:19:6a:e6:c5:19:
20:20:e6:46:23:10:cd:7f:82:94:1e:4f:2e:98:a1:6e:0c:e2:
f3:e0:91:9e:29:a9:86:e7:47:8a:f0:0a:18:32:17:b5:95:10:
72:f3:0d:56:20:5d:13:43:99:10:e8:aa:d3:d7:b6:05:51:06:
95:71:00:a0:88:28:0f:20:2d:c0:5a:e9:9a:55:7c:20:75:16:
2d:33:39:b9:62:82:fa:13:9b:1b:02:8d:88:91:4d:2d:0c:d3:
0f:6e:5a:e9:c1:ac:25:c7:bd:96:66:2e:7b:90:12:b2:f2:96:
db:50:a8:67:74:9f:a7:e9:19:48:7f:53:14:46:74:b7:ae:a6:
72:23:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 21:31:58 2023 by rpki-client on console-ams.rpki-client.org