Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xDa6tTT-Zl3UGaKGbtqEgEXwu8U.roa
File: xDa6tTT-Zl3UGaKGbtqEgEXwu8U.roa (raw, json)
Hash identifier: B82ijnnfnExzlaPEXcmWjwwFlbBSM8oeCyn3ESFNIV0=
Subject key identifier: C4:36:BA:B5:34:FE:66:5D:D4:19:A2:86:6E:DA:84:80:45:F0:BB:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DD7D04B00BC7C0697639F436EC8ACD6FB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xDa6tTT-Zl3UGaKGbtqEgEXwu8U.roa
Signing time: Fri 23 Feb 2024 21:12:48 +0000
ROA not before: Fri 23 Feb 2024 21:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216289
IP address blocks: 93.123.39.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d7:d0:4b:00:bc:7c:06:97:63:9f:43:6e:c8:ac:d6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 23 21:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c436bab534fe665dd419a2866eda848045f0bbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:b9:dd:82:f6:3f:02:07:5c:7a:f5:f6:5c:
3b:ad:64:0f:a0:4c:75:cf:22:8f:34:9f:c0:65:30:
85:df:4c:2b:0c:ea:3c:b0:2f:87:5c:ee:e4:5f:d5:
2d:fc:4d:04:f6:64:11:4f:bf:7d:a5:93:b7:73:d7:
8a:d1:fc:1d:87:88:9d:ac:ba:43:75:15:e8:40:cd:
9e:32:d5:d2:e6:bf:25:c6:61:3c:da:1e:1e:d8:eb:
84:35:c9:63:57:99:3d:6e:05:ad:44:92:45:7d:9b:
85:f6:a5:c2:71:22:c4:da:80:5e:2a:61:bb:ad:a7:
13:46:e3:2f:24:7a:bc:b4:2d:f7:6b:f0:d9:fd:cc:
c4:7a:d8:8a:f3:51:24:80:80:a8:47:d6:11:51:68:
a0:e2:18:c3:52:0d:24:5a:4e:24:76:4c:a6:ac:04:
c3:49:a7:be:bc:8b:8a:4f:67:43:c2:1b:bc:b5:c5:
ba:fd:58:b4:e3:83:9d:66:47:0c:f1:10:7f:e4:b7:
54:97:ad:ae:c2:0c:25:64:49:67:83:10:22:4b:a5:
5c:60:00:59:58:e1:b4:c9:36:e0:84:2f:b3:cc:45:
69:a0:0d:ae:24:fc:03:4d:d6:06:3b:18:bd:87:6f:
4f:e8:3a:53:05:34:34:8b:db:ac:d6:50:6a:a9:53:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:BA:B5:34:FE:66:5D:D4:19:A2:86:6E:DA:84:80:45:F0:BB:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xDa6tTT-Zl3UGaKGbtqEgEXwu8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
94.156.8.0/24
147.78.103.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7e:43:5d:83:aa:b6:b0:d3:71:5f:e7:6d:48:72:99:77:33:
57:f3:62:f6:a3:71:4d:b2:e1:09:b9:ae:2f:1c:9d:32:6d:3a:
25:07:57:e7:5b:2f:9f:0f:92:75:ad:34:a2:49:44:c1:0b:c3:
d9:b1:31:07:ac:6d:23:a2:a6:a8:09:ac:05:f3:4f:9b:f6:80:
d8:04:af:04:23:7c:35:7a:77:3e:6f:84:09:5e:3c:40:f3:fc:
4e:11:7b:db:3f:0d:81:9d:15:82:f5:cc:25:cb:ce:69:b1:fe:
63:2e:38:c6:a2:1c:f9:4e:e2:7e:a8:51:f9:cf:c7:69:85:17:
92:23:65:d0:1f:79:f9:71:d7:c0:9b:fa:49:5f:f3:a9:4b:d3:
e5:fc:0e:13:d8:82:17:16:66:cf:61:11:25:0a:5b:2c:f5:0f:
36:65:ff:15:ea:7e:55:86:88:33:73:8c:7b:0a:c6:27:b1:6e:
12:7f:03:af:35:c1:c8:5e:b9:28:c5:30:d0:5e:cf:04:9b:0b:
df:4f:9e:86:a9:b9:15:18:5a:a8:8f:9d:c2:ad:86:02:c0:96:
78:01:3f:0f:47:2f:f8:ac:13:72:1c:e8:a7:84:f4:f1:f8:78:
48:75:40:25:09:f6:20:9b:30:63:a9:1c:45:8b:c5:6a:48:f5:
97:f0:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 08:30:32 2024 by rpki-client on console-fra.rpki-client.org