Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wL7dlLW7gTPuLyVYa19ftB2spIc.roa
File: wL7dlLW7gTPuLyVYa19ftB2spIc.roa (raw, json)
Hash identifier: 4ATFXtPkx/h08F62tBAZRT2P55N3lFVi/xHnwWIWeJw=
Subject key identifier: C0:BE:DD:94:B5:BB:81:33:EE:2F:25:58:6B:5F:5F:B4:1D:AC:A4:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D721EB4457264892D7315A9880E9E42A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wL7dlLW7gTPuLyVYa19ftB2spIc.roa
Signing time: Tue 29 Oct 2024 07:16:17 +0000
ROA not before: Tue 29 Oct 2024 07:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 93.123.30.0/24 maxlen: 24
192.145.28.0/22 maxlen: 24
193.168.198.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 06:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:21:eb:44:57:26:48:92:d7:31:5a:98:80:e9:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 07:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0bedd94b5bb8133ee2f25586b5f5fb41daca487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:ef:61:55:86:3f:a6:0c:11:87:61:f1:5a:
57:7b:67:4d:ef:3b:15:9c:c4:a5:b1:30:cb:1c:25:
7f:3e:43:ed:3f:8f:c6:b8:b7:4e:11:5e:18:7a:0a:
92:d8:ee:85:00:c9:60:27:60:95:2b:ab:29:0a:03:
dc:8e:b5:d9:6e:26:78:cc:eb:48:99:13:c2:fe:82:
11:bb:13:1d:e7:1d:46:ec:e2:6c:9d:67:82:8a:e9:
87:e6:46:f6:4c:a8:3a:c1:fa:ce:e7:15:93:50:ba:
42:fc:98:7b:3a:0e:1c:52:8a:51:26:40:a4:0f:f0:
c0:99:a7:db:b4:da:6b:58:48:38:cb:f8:5a:0f:10:
45:20:47:3b:8a:f9:43:2a:b8:21:7f:e6:0f:e7:b9:
14:be:2c:18:28:9f:3e:20:a7:12:19:49:0d:5b:ed:
64:62:59:d9:ae:2d:63:96:af:39:48:b3:42:dd:0c:
04:26:63:fa:d9:ba:06:2b:07:21:d0:e9:62:36:75:
04:96:5b:10:35:b7:49:7b:06:1a:8b:07:71:f3:7f:
8d:02:a2:ee:7e:e2:5a:d4:56:00:59:4d:d0:72:0d:
72:31:3c:cf:7a:05:ed:ee:5c:fc:45:ed:3f:8a:df:
69:5a:a4:bf:3a:3b:a4:d5:23:83:5b:50:2f:e8:23:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:DD:94:B5:BB:81:33:EE:2F:25:58:6B:5F:5F:B4:1D:AC:A4:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wL7dlLW7gTPuLyVYa19ftB2spIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.30.0/24
192.145.28.0/22
193.168.198.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ee:46:54:d8:b8:58:12:d3:4c:5c:c8:e4:c8:a0:ac:bb:39:
98:93:38:9b:69:cb:89:4d:92:2f:37:3f:6a:98:f6:63:5d:1f:
fd:00:2c:40:43:6a:fa:b9:b5:dc:d0:2d:82:2c:ce:13:20:c9:
7c:be:b8:85:e5:ab:3e:da:e2:cb:fc:95:9a:59:1f:b4:4e:ad:
cc:fb:19:84:8b:7a:55:14:36:6b:e3:d6:e3:75:60:f4:c5:0c:
6b:93:8a:f7:69:5f:ad:3a:a8:d7:19:72:b4:c6:6a:f8:ea:19:
1a:64:50:4c:4a:da:6d:e4:b6:29:f7:87:be:25:85:f1:15:9e:
6c:7c:ff:13:38:b6:55:c2:68:ff:52:7a:7b:82:53:ab:dc:b4:
e1:fa:1f:66:f1:be:4d:cd:07:b6:f7:5a:30:cc:ab:92:47:c7:
36:d5:e6:d2:a2:55:29:78:58:90:2e:7a:2f:41:9c:4a:c1:af:
c0:e5:d8:88:df:b2:5a:7f:dc:47:53:b3:ce:a8:d4:a1:23:75:
36:d2:05:ea:4b:b2:db:64:be:10:c1:4a:e4:f1:54:52:e0:18:
ff:86:c3:b3:03:96:89:4e:10:6e:6e:86:64:5b:09:ca:d1:6e:
b9:97:88:7f:f9:93:82:d2:56:d2:ca:cd:86:ff:f1:4e:d2:50:
ce:03:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:41 2024 by rpki-client on console-ams.rpki-client.org