Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PtUsDQ2gJZajoEGSP7Up-3G9Qr4.roa
File: PtUsDQ2gJZajoEGSP7Up-3G9Qr4.roa (raw, json)
Hash identifier: qMEY2EnurY5YVPs3CaOcqkMdc5M0P4jhJ/LoMxCgwgg=
Subject key identifier: 3E:D5:2C:0D:0D:A0:25:96:A3:A0:41:92:3F:B5:29:FB:71:BD:42:BE
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0186EB6FF625456B116FC3C62ED80CDAF521
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PtUsDQ2gJZajoEGSP7Up-3G9Qr4.roa
Signing time: Thu 16 Mar 2023 17:20:28 +0000
ROA not before: Thu 16 Mar 2023 17:20:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 93.120.120.0/22 maxlen: 22
93.120.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 Jun 2023 13:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:6f:f6:25:45:6b:11:6f:c3:c6:2e:d8:0c:da:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 16 17:20:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed52c0d0da02596a3a041923fb529fb71bd42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:b6:ea:7b:cd:00:00:22:10:51:ac:df:a3:
0c:c7:11:4a:7e:e7:f0:21:a2:19:8e:78:56:a8:e2:
f6:b5:e6:9a:c4:f4:ee:4f:2e:3b:e6:61:0f:7b:3e:
00:e7:e1:33:14:cb:bc:e2:e0:f1:aa:53:5c:79:ac:
e3:68:1a:31:6b:4f:ef:59:9c:c3:fe:10:7c:e8:76:
30:3f:7b:e7:93:f5:a1:50:51:11:ac:5b:d1:e2:55:
81:61:97:a2:99:df:48:40:0f:62:26:ac:b0:2e:6e:
d9:12:14:2c:da:bc:55:01:1c:9a:3e:89:9c:ef:db:
e8:29:bf:dd:07:f6:ff:7d:07:ff:c8:a2:3f:e0:f3:
54:9d:34:53:1c:15:dd:db:7c:ee:e6:87:99:cb:dc:
01:59:d9:dd:e2:70:30:0d:8a:06:7f:14:92:21:13:
8f:d3:4c:17:7a:61:20:6f:83:3a:1c:65:b3:39:00:
a9:6e:a0:21:1a:b5:62:c4:47:7f:59:32:73:fa:b5:
fc:8b:9a:fe:b9:20:0c:e1:ce:eb:3f:f3:ed:d1:fd:
5e:22:e1:c6:32:72:66:a7:52:3f:3e:c5:bb:10:2a:
9a:bb:14:60:0c:07:55:5e:7e:65:ce:01:be:f1:f8:
4d:26:f2:9c:a2:e8:92:19:89:74:0d:3e:3c:cb:45:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:2C:0D:0D:A0:25:96:A3:A0:41:92:3F:B5:29:FB:71:BD:42:BE
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/PtUsDQ2gJZajoEGSP7Up-3G9Qr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.12.0/22
93.120.120.0/22
Signature Algorithm: sha256WithRSAEncryption
28:22:02:02:84:18:8e:4e:39:a2:f2:1f:1f:77:ad:66:8b:8b:
ed:f6:35:bf:0b:d5:62:c8:fb:a1:e3:39:2d:fa:b2:c7:cb:97:
7b:46:e3:97:85:c8:9e:76:7f:a5:97:eb:61:91:fb:0e:d3:7f:
00:7f:b7:0f:40:9c:30:39:b5:12:62:12:08:0e:ec:b9:4f:82:
42:fb:35:79:b9:4b:52:fa:93:f6:a6:6d:5e:6b:9b:33:1b:53:
e2:b6:93:dc:14:07:c6:fd:19:b7:aa:54:22:b4:3f:31:3c:21:
6c:28:75:8e:04:f4:35:d0:c6:bb:f7:b8:6c:9e:89:e3:15:f8:
ee:93:6a:31:a7:f3:26:7e:2a:44:94:6f:9e:8a:aa:9f:a3:bc:
a4:dd:1d:90:03:81:7b:1c:99:a2:5b:51:d4:a3:1a:0c:3c:c8:
3f:b9:56:4e:3c:7b:5e:ba:09:95:09:08:7d:18:e2:32:73:66:
ce:75:18:15:a1:ca:c2:9b:aa:2e:43:6c:81:f3:bf:b2:9b:ff:
4d:8a:51:c5:4a:27:e8:f1:48:00:b7:01:9c:df:d8:5f:29:80:
05:bb:b3:98:c4:86:c6:07:92:5f:a8:81:b2:2b:b4:1c:52:ff:
2c:11:47:70:82:80:6a:ee:a2:dc:a8:59:5c:a4:0c:11:47:11:
48:f2:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org