Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v6KipVYZ97zrpRSycg0_jbfwtXQ.roa
File: v6KipVYZ97zrpRSycg0_jbfwtXQ.roa (raw, json)
Hash identifier: DMnJWqsokvS6LSILw0LDZREOIOmotyP+/BlD567eNH8=
Subject key identifier: BF:A2:A2:A5:56:19:F7:BC:EB:A5:14:B2:72:0D:3F:8D:B7:F0:B5:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B5BB5B1CE9C5C12F881D38C93C80FD63C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v6KipVYZ97zrpRSycg0_jbfwtXQ.roa
Signing time: Mon 23 Oct 2023 08:45:16 +0000
ROA not before: Mon 23 Oct 2023 08:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.120.69.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:b5:b1:ce:9c:5c:12:f8:81:d3:8c:93:c8:0f:d6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 08:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfa2a2a55619f7bceba514b2720d3f8db7f0b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:66:e0:42:b1:47:68:d8:5d:04:5c:45:0d:00:
2b:96:2b:cb:8e:cd:aa:f2:b8:c3:83:a9:a2:4a:46:
b5:f8:7b:f4:5b:d8:95:73:d3:8d:32:8c:f2:18:16:
4e:c5:28:7b:7c:50:e3:c5:37:2d:f8:39:88:00:45:
49:5d:de:40:4b:2b:51:b8:0f:2c:99:e3:7f:6a:99:
c8:37:ac:bc:b1:6c:f1:64:64:2c:ef:a2:a0:ab:52:
8c:de:fb:df:e6:07:1b:89:2d:cb:21:bd:b4:77:2c:
92:6b:e0:1f:02:6f:e1:a1:6c:9e:33:80:24:61:7c:
a4:f2:85:8f:0d:41:36:9d:6b:80:91:b0:d2:fa:33:
6a:55:76:05:26:b4:5e:e0:40:ab:91:ab:fd:34:3d:
ca:94:22:13:ab:28:1e:16:6d:36:1f:83:b6:a7:77:
74:f2:13:bc:a9:e8:1a:28:30:c1:2c:7a:67:dc:b5:
cc:04:2f:b3:db:5d:43:eb:4e:6e:72:2a:8b:7c:9c:
c5:ff:b1:92:29:36:60:08:9e:f5:b8:64:38:70:4f:
c5:10:55:6f:f2:8a:7b:36:da:2c:82:50:fa:c1:a1:
be:9a:13:70:1b:13:5a:df:3e:3e:df:ec:07:2e:0c:
5d:36:b2:64:49:5d:46:6b:0f:e2:3f:37:95:26:c1:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:A2:A5:56:19:F7:BC:EB:A5:14:B2:72:0D:3F:8D:B7:F0:B5:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v6KipVYZ97zrpRSycg0_jbfwtXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3b:66:23:1f:a8:77:90:38:e0:0b:3d:01:71:60:c8:f2:00:
56:49:23:f5:fe:34:17:df:1a:c8:9d:d3:5c:32:fd:df:3a:9c:
e2:a5:bd:13:3b:31:27:6f:98:03:a4:dd:2b:3f:a2:8a:a3:2e:
da:e9:5f:c0:eb:5a:c5:93:e2:fb:56:83:f8:40:2b:0f:06:6e:
ce:27:6a:4a:5f:58:86:43:cf:f2:6b:eb:18:ba:08:07:de:74:
3f:9a:ef:d3:6e:2a:bb:53:80:e9:5c:c4:a1:62:f5:48:8a:39:
e8:3c:7e:68:c7:23:93:46:e7:07:fb:f5:b8:49:33:24:7f:9f:
bb:37:3b:4a:ee:10:82:d7:03:b4:43:fc:5b:53:18:d2:47:be:
41:71:fd:ae:7f:14:b6:34:3f:fd:22:97:1d:bd:9d:c2:16:16:
21:d6:56:d3:55:7b:f0:76:a0:10:71:2b:f5:8b:10:11:d5:2f:
95:b8:18:f1:46:16:32:6d:6b:f4:6a:e9:67:25:2f:ee:10:c9:
99:6a:e3:10:d7:c1:20:8e:85:f0:97:ca:c0:ce:22:9c:45:c5:
ee:29:12:98:ad:e0:bd:8c:cc:ea:7a:de:be:04:e9:d9:65:e7:
75:7a:90:ad:12:7f:14:e1:92:df:9c:46:15:60:0c:3e:b6:ca:
28:a4:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 17:00:19 2023 by rpki-client on console-ams.rpki-client.org