Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tI1MjPKg3SULlaLbdj5GMgG9r9w.roa
File: tI1MjPKg3SULlaLbdj5GMgG9r9w.roa (raw, json)
Hash identifier: pviH/6WpnANl54C0JYjt1n1H5HQ9l3PmQD9da6aXrmc=
Subject key identifier: B4:8D:4C:8C:F2:A0:DD:25:0B:95:A2:DB:76:3E:46:32:01:BD:AF:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019086A1F37DB5DD3FE7BA26C3934990E214
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tI1MjPKg3SULlaLbdj5GMgG9r9w.roa
Signing time: Sat 06 Jul 2024 06:01:18 +0000
ROA not before: Sat 06 Jul 2024 06:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 03:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:86:a1:f3:7d:b5:dd:3f:e7:ba:26:c3:93:49:90:e2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 6 06:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b48d4c8cf2a0dd250b95a2db763e463201bdafdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:a5:6a:38:92:2d:3d:27:f4:90:e9:e1:99:
41:c4:8a:7a:f1:96:b1:fe:c8:9d:90:f3:ce:ae:7e:
36:56:bd:26:d4:57:d9:71:0e:7e:95:59:ce:10:8f:
3d:39:96:67:37:8b:34:f6:4c:ce:4d:02:ae:d4:99:
0b:21:b1:b5:c5:52:a7:56:8d:b3:ed:2e:74:c2:fc:
71:e2:b5:98:4b:d5:5e:ca:31:b4:8d:c4:be:cf:a5:
83:76:92:4b:7e:f0:77:9f:3c:b1:d7:d7:a9:79:1a:
0e:ca:09:b7:52:e6:4c:1b:f0:9e:62:19:fa:85:bc:
c0:23:44:9a:0f:dc:25:50:9c:f1:43:bf:5b:2f:49:
16:59:44:18:0c:45:13:e2:6c:db:f1:61:ee:70:67:
f4:ba:a3:9a:49:e7:4c:5c:f2:43:aa:7a:0d:92:3b:
a9:d5:e7:5d:45:45:f8:23:08:de:9e:19:bf:2c:9d:
8f:ed:45:c5:35:3e:b6:9a:ae:82:de:de:d5:9c:b3:
bd:24:b9:9b:33:5e:44:38:72:9e:9d:d3:18:bd:16:
2e:e5:d5:6e:4d:62:24:82:41:51:d7:f1:57:6b:6a:
18:ef:68:a5:af:1a:de:a8:c9:f5:2c:d4:32:41:26:
12:0d:8a:8f:61:29:a3:f6:9a:49:74:64:f7:35:f7:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:4C:8C:F2:A0:DD:25:0B:95:A2:DB:76:3E:46:32:01:BD:AF:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tI1MjPKg3SULlaLbdj5GMgG9r9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
96:44:57:36:48:f5:a5:f7:3b:c4:d6:16:59:f4:c5:9e:f8:ba:
84:fe:9e:73:40:eb:66:6a:ee:dc:ad:f3:d5:cd:5c:66:58:67:
f3:32:6c:6b:33:2f:86:2a:8c:b0:ce:e3:02:d5:e9:61:0a:47:
0d:03:ef:7d:4b:52:1d:3c:65:6b:5c:96:27:09:21:9e:cd:f2:
7d:34:b8:e1:4a:8d:28:e6:66:a4:1e:17:09:d8:3a:c6:b4:bd:
0a:65:a2:08:35:9d:c7:d7:d1:88:d7:8f:42:c2:7b:21:07:e6:
a4:18:6d:b2:61:20:ca:42:a5:ef:1e:91:1e:0e:c7:ae:89:38:
c4:fe:c4:1d:92:d8:ed:dc:49:70:66:62:df:92:14:92:90:22:
1a:f1:71:a4:9f:4d:82:48:2e:14:29:97:20:4d:74:3a:a6:15:
12:f6:d6:b7:51:e3:ec:44:04:95:9f:a3:8d:a2:a6:e6:7b:02:
37:74:7f:57:ad:d0:2f:4b:c0:77:52:5a:e6:fe:36:83:90:87:
6b:a4:15:e5:31:ba:7d:1d:0b:28:75:4a:21:5f:0f:c2:09:c8:
78:75:03:a7:da:bf:d2:dd:17:07:7c:a9:d4:41:2e:05:ce:50:
33:a2:1e:b2:83:e9:d4:72:86:27:da:b8:16:58:30:4e:6e:bc:
63:c2:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 05:26:03 2024 by rpki-client on console-ams.rpki-client.org