Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tMTWUH9xrqc3jjtbE7UNueHUJzY.roa
File: tMTWUH9xrqc3jjtbE7UNueHUJzY.roa (raw, json)
Hash identifier: DEC+ehWR3w0ibGPXmuPMkQTKuXoKxTBLqE5vO5yue3g=
Subject key identifier: B4:C4:D6:50:7F:71:AE:A7:37:8E:3B:5B:13:B5:0D:B9:E1:D4:27:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AF49F40B05D604C27ABF0ECCFB20772CF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tMTWUH9xrqc3jjtbE7UNueHUJzY.roa
Signing time: Tue 03 Oct 2023 08:19:51 +0000
ROA not before: Tue 03 Oct 2023 08:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 94.103.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:9f:40:b0:5d:60:4c:27:ab:f0:ec:cf:b2:07:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 3 08:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c4d6507f71aea7378e3b5b13b50db9e1d42736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:cb:7f:d1:34:dc:81:b4:c3:c1:cd:39:0f:
0c:a4:c9:5c:a0:a5:20:dc:b8:56:cd:88:98:a0:08:
5a:6b:a6:c0:3b:63:09:23:4a:a5:e4:cc:9c:06:a9:
c1:dc:bf:70:62:14:7c:db:5a:4a:49:18:9d:d0:c6:
a1:bd:f7:e0:06:28:52:ab:e4:77:23:e5:9c:3c:88:
69:b7:64:77:f9:72:b0:2d:4c:cc:e9:97:22:f7:cd:
b7:e5:60:0e:2c:1a:77:ea:af:1f:5f:b8:24:40:de:
27:b4:8c:a5:fa:d3:0c:70:da:13:c9:b8:dc:5e:c8:
53:d5:0e:36:0f:cb:0a:38:42:7a:1d:3d:69:f4:64:
65:cd:b2:9a:3d:49:79:fe:52:c3:c2:db:90:93:a6:
60:7c:63:bb:89:d5:7c:44:6e:11:c3:53:75:8f:64:
d7:82:fd:0c:da:30:89:da:1f:78:1c:ce:c4:93:cd:
93:99:45:d5:9e:86:9f:64:13:cb:5e:22:bc:a3:7a:
48:28:a0:b3:46:d1:97:64:7b:b0:81:4c:be:50:a4:
09:45:90:cf:ed:f8:7a:f2:f9:e6:6c:14:b8:ab:21:
b4:44:ca:20:03:85:fd:b2:45:9d:e8:c0:3e:fe:67:
5c:ba:97:00:b4:30:1f:e1:63:be:39:e3:18:50:35:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C4:D6:50:7F:71:AE:A7:37:8E:3B:5B:13:B5:0D:B9:E1:D4:27:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tMTWUH9xrqc3jjtbE7UNueHUJzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3f:bc:fe:ed:b8:3d:d3:d9:fa:26:bb:95:33:7b:c3:52:cd:
be:82:89:04:a5:79:ff:c2:77:54:5a:b4:9e:fb:d3:6d:44:3e:
a4:a5:2d:9d:d2:ba:3e:00:81:28:a7:6a:ed:0d:bf:0b:0a:78:
05:fe:53:51:0d:28:06:d1:76:ff:d2:83:47:a3:80:c0:b6:c8:
c2:98:b0:a1:fd:a1:c8:ac:7e:17:32:40:65:da:1a:42:29:36:
d4:b1:2a:37:6a:72:38:f4:3f:c9:73:74:ab:e1:02:3c:e5:9c:
ed:28:1b:03:92:12:30:3b:6c:98:4a:04:bf:d5:2d:81:43:27:
29:ce:17:dd:83:fc:9d:83:1f:d8:f2:5e:4c:02:3b:bd:8d:eb:
5b:9c:fa:95:a8:69:08:3e:ae:ea:78:81:9b:58:f2:33:46:b7:
83:e1:ed:15:3b:0b:fd:cf:db:31:d5:17:0d:0d:7d:0c:dc:50:
56:bb:ee:69:7d:46:08:8e:a6:5d:da:8b:93:7a:cb:d2:c8:7a:
97:64:25:db:71:f0:42:2a:86:91:e5:67:0e:fc:3a:21:83:7c:
7a:e2:7f:98:b3:29:65:7d:08:52:ad:74:4c:ee:e9:ce:c2:d0:
47:52:68:6f:22:9c:19:39:23:c2:64:56:c8:9f:f7:69:61:db:
82:7e:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org