Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/rQjrdiMBbP1L1Yhukz5F9uAQGOM.roa
File: rQjrdiMBbP1L1Yhukz5F9uAQGOM.roa (raw, json)
Hash identifier: ooznVfnMJBldyc/3sATa2TMKtdkSxcytxNk+Mtzp2Ow=
Subject key identifier: AD:08:EB:76:23:01:6C:FD:4B:D5:88:6E:93:3E:45:F6:E0:10:18:E3
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 01856D8AF05DB4EF834CD0D72B7B7B1B8820
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/rQjrdiMBbP1L1Yhukz5F9uAQGOM.roa
Signing time: Sun 01 Jan 2023 13:35:00 +0000
ROA not before: Sun 01 Jan 2023 13:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24594
IP address blocks: 185.120.52.0/22 maxlen: 22
93.95.123.0/24 maxlen: 24
93.95.125.0/24 maxlen: 24
93.95.120.0/21 maxlen: 21
93.95.126.0/24 maxlen: 24
2a00:d68::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f0:5d:b4:ef:83:4c:d0:d7:2b:7b:7b:1b:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Jan 1 13:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad08eb7623016cfd4bd5886e933e45f6e01018e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:6c:a9:7a:56:d1:3e:f2:57:e2:5f:1f:82:
c9:db:44:03:b9:06:3d:bf:31:89:55:a2:27:64:97:
0f:4f:88:9f:76:f1:6c:6f:5b:b9:cb:54:2d:78:17:
cd:c1:da:50:1c:60:84:8b:12:a8:a2:6a:8b:b2:a4:
12:dd:65:f3:cb:90:4f:e5:6c:68:4c:d5:e6:6e:c5:
1b:6b:d5:ea:9d:9d:64:95:0b:e4:49:03:e0:15:0a:
35:77:64:06:ee:b5:36:2d:3c:7b:cd:b9:07:34:55:
1a:04:36:16:aa:1b:0c:00:8c:9f:c7:4c:1d:14:55:
e3:dc:43:e9:f4:81:bd:a7:50:fe:ff:71:10:f8:9c:
7e:a5:2d:73:27:79:fd:f6:b3:0e:fc:a6:64:08:3b:
80:42:ed:c0:b2:a8:2f:fb:80:de:4f:cd:32:e0:20:
a7:08:89:aa:cc:0e:15:ca:17:c3:f3:17:9b:11:55:
87:b4:57:ed:44:e9:8a:8b:7b:c8:13:14:39:dd:0a:
44:98:67:33:a1:ff:6e:1f:dc:9e:61:1c:b5:98:12:
07:8c:65:75:d3:12:92:8e:f2:ff:70:61:90:d8:ef:
6f:5d:46:fc:ad:4a:03:e4:29:59:30:af:49:63:a2:
e3:dd:80:8f:56:4b:31:39:1d:cf:32:53:d3:2a:bb:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:EB:76:23:01:6C:FD:4B:D5:88:6E:93:3E:45:F6:E0:10:18:E3
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/rQjrdiMBbP1L1Yhukz5F9uAQGOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.120.0/21
185.120.52.0/22
IPv6:
2a00:d68::/32
Signature Algorithm: sha256WithRSAEncryption
95:11:20:48:91:1c:47:c3:bf:21:8a:15:b6:10:b0:4b:92:3e:
8e:23:15:fa:70:08:12:73:f4:58:85:85:19:0b:5c:61:25:7f:
0a:10:3d:68:be:50:2f:32:23:ac:17:59:64:4a:1c:ed:8f:5a:
e2:70:f4:62:b0:89:4a:41:e8:d9:a3:11:4f:76:c6:94:5f:d9:
b6:19:ef:f5:ab:33:8c:9c:88:6d:c8:90:f4:8d:cd:23:2e:66:
fa:16:7e:93:2c:cd:18:f2:50:aa:eb:12:a8:d9:e6:b6:d4:bc:
a3:dc:e4:78:70:31:cb:19:30:29:e9:fa:ea:42:0a:43:4e:a2:
82:29:19:9e:e4:23:85:7b:f9:ad:70:af:4a:56:89:a0:3b:14:
44:44:60:2a:33:3c:ec:21:b9:89:f4:49:ba:e9:5b:86:f3:21:
e5:26:01:6a:a9:a8:f5:67:81:29:49:f1:05:ea:58:33:bd:4b:
0a:23:a4:c1:66:44:cc:52:23:68:12:49:c7:4a:d2:8f:ec:46:
f5:6b:00:dc:7f:0f:77:a6:84:41:34:d4:d2:70:07:dc:5c:f9:
c0:dc:1c:a4:bf:07:48:b0:72:55:5a:3c:ec:64:2f:af:ff:6e:
09:2f:af:c4:75:76:a6:85:a6:37:20:3c:a7:b8:e7:8d:ef:03:
6d:ed:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:33 2024 by rpki-client on console-fra.rpki-client.org