Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x0yR-FfG6mhO39jrJP3XG9Milww.roa
File: x0yR-FfG6mhO39jrJP3XG9Milww.roa (raw, json)
Hash identifier: dHoctwqYBluC1moTAZVYlxf1yUZB6MvN0zckQolRVOg=
Subject key identifier: C7:4C:91:F8:57:C6:EA:68:4E:DF:D8:EB:24:FD:D7:1B:D3:22:97:0C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01894F78E9FD127EF03E966E7FD707A815A7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x0yR-FfG6mhO39jrJP3XG9Milww.roa
Signing time: Thu 13 Jul 2023 13:37:51 +0000
ROA not before: Thu 13 Jul 2023 13:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 193.168.196.0/22 maxlen: 24
45.91.193.0/24 maxlen: 24
88.218.76.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 06:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:78:e9:fd:12:7e:f0:3e:96:6e:7f:d7:07:a8:15:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 13 13:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c74c91f857c6ea684edfd8eb24fdd71bd322970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:bc:ef:86:70:f8:4d:61:81:4f:d9:c3:f5:
e4:84:71:8f:1c:c9:0f:30:a0:01:b4:f2:14:4c:4e:
75:1d:8a:71:65:52:5c:5d:8b:05:80:15:7d:2e:4d:
9b:09:8a:d2:ff:e0:52:49:68:b2:74:55:64:7c:d2:
54:21:6b:ec:32:2a:a8:d6:04:83:1c:d3:90:5d:cb:
44:3f:c4:fa:fe:68:e2:c0:dc:a0:e9:be:31:32:ea:
48:64:a9:a5:09:f1:75:78:60:b7:08:1e:f8:b4:6a:
c7:29:8f:c6:85:81:67:77:2d:65:5a:ef:ca:2e:a4:
0b:a8:14:b8:f8:35:67:ea:82:62:d3:1c:8a:48:d5:
ce:54:a4:f0:8a:41:f8:da:1f:e5:d6:e6:5c:c8:3d:
f5:59:cc:d1:b9:a6:9d:4d:93:4d:19:04:57:f1:e3:
12:b3:5f:96:86:66:50:d1:74:8f:e4:57:1b:4b:e9:
7b:b9:72:3d:a1:60:d4:f6:77:00:5c:e6:a2:a0:c8:
01:9d:9a:29:40:91:52:1d:f3:de:7b:43:f3:a2:33:
14:c0:4e:39:c0:85:e3:d6:ac:70:d4:5c:1d:0e:a8:
19:5b:86:03:5d:34:68:ab:fc:4e:ef:cb:46:4b:64:
a5:22:ea:9b:83:68:c1:82:b7:85:2b:20:a7:a4:0f:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:91:F8:57:C6:EA:68:4E:DF:D8:EB:24:FD:D7:1B:D3:22:97:0C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x0yR-FfG6mhO39jrJP3XG9Milww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.193.0/24
88.218.76.0/22
185.221.64.0/24
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:6a:51:03:38:45:c1:57:e5:c6:49:d7:dd:1e:46:ab:cf:92:
45:16:7a:5f:ef:05:cc:2b:60:61:d1:26:4e:dd:88:d7:47:21:
bf:a0:5e:5f:cb:e3:97:e1:3f:e8:22:3f:dc:63:b1:81:3f:ea:
62:f6:08:4a:0b:ae:24:bf:ef:b6:0f:d3:cd:11:19:4a:12:d3:
b6:ec:75:72:e7:85:3b:2c:9b:ae:a6:e8:ad:6e:20:25:24:6e:
b5:24:c5:8f:02:21:a6:43:90:b2:a6:48:65:2e:5d:a2:bf:60:
3e:10:5a:4a:96:9a:54:07:f5:88:07:ed:00:b2:30:28:d0:eb:
df:94:cf:55:d4:95:99:3a:61:08:f7:d6:52:d5:91:ff:5c:23:
33:53:f7:f4:8e:a2:74:61:c4:b9:89:8e:3b:74:5f:57:0c:86:
ea:e3:de:46:60:07:07:51:87:88:13:44:13:be:75:b3:d6:a3:
fb:20:31:c6:f1:0e:2d:27:40:88:8f:7b:e3:c0:b1:db:11:22:
b1:c0:42:1f:34:d0:c5:a6:23:52:55:26:92:06:fc:06:b3:c9:
b3:8d:c2:2d:bd:46:7f:5b:96:18:8c:3a:45:ca:87:03:ac:10:
ce:45:72:4e:ad:40:d8:5e:af:bf:e5:30:bd:54:da:46:d4:40:
ce:02:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:21 2024 by rpki-client on console-fra.rpki-client.org