Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xWySu6vMNWFj_v8cLlBVPD_Jrfs.roa
File: xWySu6vMNWFj_v8cLlBVPD_Jrfs.roa (raw, json)
Hash identifier: VPQDS0XkFMsiEiAi7NG4gag8+Z02vU3uueTzPq3984c=
Subject key identifier: C5:6C:92:BB:AB:CC:35:61:63:FE:FF:1C:2E:50:55:3C:3F:C9:AD:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01916FBED5098DF8B99806884F2C259BF2D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xWySu6vMNWFj_v8cLlBVPD_Jrfs.roa
Signing time: Tue 20 Aug 2024 12:24:22 +0000
ROA not before: Tue 20 Aug 2024 12:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.222.161.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 06:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:be:d5:09:8d:f8:b9:98:06:88:4f:2c:25:9b:f2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 20 12:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c56c92bbabcc356163feff1c2e50553c3fc9adfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:b9:7c:37:4e:d2:a4:58:f8:af:55:84:4e:
d4:de:74:2a:d3:d5:ac:6e:52:bc:dd:ee:53:c8:31:
52:21:76:93:4d:e7:57:5c:93:35:8b:8a:fd:17:ad:
65:c3:20:dd:df:58:4d:64:8f:85:4b:7c:55:59:27:
99:1d:06:2f:95:f7:71:ea:16:ce:52:5d:83:72:29:
17:dd:64:4a:fb:b7:af:f4:f6:a9:a9:b3:a7:ba:33:
b8:d8:94:64:a8:23:8d:89:64:6b:02:40:90:97:56:
9d:68:bf:84:8b:2d:89:c7:d7:f6:45:34:ee:33:55:
56:a6:bb:f7:cd:ef:3e:ee:80:71:43:34:38:bb:28:
b7:b1:c3:2b:7f:13:b2:f2:65:43:ac:11:87:04:00:
58:65:ed:12:af:90:d7:3f:cf:ed:ef:44:ff:53:29:
3b:93:fc:d6:96:28:d1:60:68:03:15:a2:8e:10:c6:
16:a9:32:6c:f9:73:9b:eb:39:ce:73:66:15:82:3f:
98:26:3d:a9:3a:4a:67:4f:46:85:a9:3a:25:02:e0:
e9:7d:0e:ec:80:72:cb:20:89:6e:0c:bd:4c:48:de:
9d:8e:ca:b6:9e:58:96:bc:dc:62:bc:08:85:7e:07:
31:84:7a:17:88:02:41:64:8e:26:00:23:ac:67:b8:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:92:BB:AB:CC:35:61:63:FE:FF:1C:2E:50:55:3C:3F:C9:AD:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xWySu6vMNWFj_v8cLlBVPD_Jrfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
185.222.161.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
08:90:46:de:e8:3a:f2:3b:36:59:24:a4:4a:3f:6d:7a:20:84:
e3:b2:bd:61:ee:30:c4:1a:5d:a2:e9:12:18:6b:20:6a:05:16:
15:7d:09:99:3c:3c:9a:a3:0e:cc:c2:35:2a:e3:4a:cd:c4:89:
05:db:1a:9a:6e:d1:c7:ce:0b:75:2b:7b:5a:ae:60:cd:a8:9a:
d0:df:93:94:86:c3:66:19:a2:2e:9f:3e:81:c4:2e:12:8f:f1:
5d:c0:41:08:28:9a:a9:51:53:70:7c:e7:d8:aa:85:e4:04:4c:
c1:e6:e3:9d:f2:21:92:b4:a2:44:28:35:28:05:89:26:1d:1a:
6c:27:d0:1e:43:2f:c5:6a:bf:2e:a3:9c:88:8a:e3:0f:f2:de:
ee:ba:6e:75:d0:e4:ff:3d:a4:b1:f1:cd:b1:af:fb:2b:85:23:
53:fd:a8:f6:8b:d6:4c:6f:ae:f4:83:51:05:12:d5:5c:f6:ee:
64:2a:d0:b8:5f:ae:4e:19:49:bf:70:3b:f8:fd:c3:e8:7d:3b:
60:df:ae:46:01:24:3b:9e:1e:8e:f9:06:83:88:2a:8d:aa:2c:
b7:c2:0f:cc:98:61:bc:aa:0e:76:57:21:e8:94:38:16:69:4e:
ee:20:78:13:1d:7e:61:07:ee:19:76:c1:28:e7:44:91:23:a6:
50:d3:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:30:53 2024 by rpki-client on console-fra.rpki-client.org