Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yIbg9dyPwYBpft3yBQrXlgY9ahY.roa
File: yIbg9dyPwYBpft3yBQrXlgY9ahY.roa (raw, json)
Hash identifier: pmESosC3W+z514G58lb+6vs43Nk9VNpak91t9vStDwg=
Subject key identifier: C8:86:E0:F5:DC:8F:C1:80:69:7E:DD:F2:05:0A:D7:96:06:3D:6A:16
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192243115433C131B85D84EECAE2025B0DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yIbg9dyPwYBpft3yBQrXlgY9ahY.roa
Signing time: Tue 24 Sep 2024 13:20:49 +0000
ROA not before: Tue 24 Sep 2024 13:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200785
IP address blocks: 93.123.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 06:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:31:15:43:3c:13:1b:85:d8:4e:ec:ae:20:25:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 24 13:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c886e0f5dc8fc180697eddf2050ad796063d6a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:f3:1d:03:81:c4:b0:3a:8f:d4:8c:fc:c9:
cb:89:c8:e1:ac:8b:58:91:ad:97:5f:dc:f5:ba:e9:
f3:f4:90:5e:62:bc:b2:4c:06:ef:63:bd:79:67:8b:
0f:2c:cc:c9:c7:8a:29:1a:bb:05:22:cf:6c:66:0d:
4d:39:bc:45:00:56:23:f9:8e:3f:2f:a8:f7:2f:c8:
b2:3b:8f:0e:93:22:9b:1c:e4:36:9f:20:cc:b4:d0:
7b:3f:b8:ee:84:8a:7f:6c:c8:44:81:11:d2:ae:e0:
91:a2:2e:79:12:f1:3c:38:a4:4d:3c:d9:7d:4f:e6:
a0:73:6b:95:f8:3b:85:6c:49:60:bf:06:1d:19:67:
a7:41:77:b9:ed:60:29:f3:fe:36:0b:a8:0f:36:d4:
a3:51:23:56:06:a7:14:05:82:c3:7d:b1:13:6f:95:
c9:d5:63:68:15:f6:97:34:cf:71:f6:ca:76:85:79:
95:b4:76:76:33:61:c1:69:c5:52:f4:2a:33:0b:1a:
35:f6:e4:7f:6c:45:5a:02:52:4f:b6:49:15:b8:87:
f5:61:13:c7:24:e3:39:0b:a5:46:a3:c2:1c:1c:5d:
b2:94:d8:f5:44:57:95:8f:dc:6f:55:08:f4:10:ca:
ac:f9:1f:84:30:24:1b:56:bc:e9:0c:da:3c:ce:38:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:E0:F5:DC:8F:C1:80:69:7E:DD:F2:05:0A:D7:96:06:3D:6A:16
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yIbg9dyPwYBpft3yBQrXlgY9ahY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.84.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3c:c1:79:f0:4d:98:cc:e2:2e:b5:e7:3e:35:e4:f4:ce:03:
6c:86:0c:f4:92:fc:60:55:67:72:6a:81:6b:87:99:f9:4c:33:
3e:ad:91:e3:14:9a:8e:fd:97:a2:7a:13:2b:3b:d3:60:bb:32:
dd:05:83:06:d6:8b:12:a1:03:ec:73:a1:2e:80:d0:2e:15:ba:
6c:03:95:c9:5f:d6:cc:a2:d3:7e:ba:e9:79:66:25:37:df:f6:
87:e8:f7:07:18:93:d6:4e:23:b4:1d:85:52:27:5e:a2:70:b4:
1c:53:5c:7d:53:c4:87:9f:61:c1:7d:58:c6:ec:18:94:cb:6a:
ec:ea:6d:36:2b:a3:8d:ae:d9:9b:4b:ca:13:f6:40:f1:90:3c:
83:88:c6:d7:7c:68:96:4d:97:ef:4a:d7:67:0a:43:43:23:5d:
e5:f2:1e:2f:3b:6b:d2:4a:52:41:e1:a4:96:33:45:5d:ed:3c:
ae:9a:47:42:a0:2c:b2:f2:18:84:eb:a2:b2:fe:bd:f4:74:6a:
be:9e:d3:ce:ef:f0:ce:1f:ff:8e:88:61:65:7a:ad:0b:47:d7:
5f:f0:8a:11:67:a3:cb:4f:5a:15:13:e1:08:64:a8:76:80:f7:
ee:fe:ac:da:1f:cc:17:f7:46:ca:14:ad:19:61:3f:7c:d1:e8:
19:a3:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 08:29:27 2024 by rpki-client on console-ams.rpki-client.org