Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j9V57NZfb6RRNgcwO3X4WCFh4K4.roa
File: j9V57NZfb6RRNgcwO3X4WCFh4K4.roa (raw, json)
Hash identifier: BNDlyUZMUwHVoKbR/+tM3O07/85OpBaLZS/XVRx2PB0=
Subject key identifier: 8F:D5:79:EC:D6:5F:6F:A4:51:36:07:30:3B:75:F8:58:21:61:E0:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F5470E9C3771548CE959E0B6716AF041C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j9V57NZfb6RRNgcwO3X4WCFh4K4.roa
Signing time: Tue 07 May 2024 19:03:57 +0000
ROA not before: Tue 07 May 2024 19:03:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 03:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:70:e9:c3:77:15:48:ce:95:9e:0b:67:16:af:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 7 19:03:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fd579ecd65f6fa4513607303b75f8582161e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:e7:d4:50:d7:72:f7:da:bf:7d:35:7f:22:
fc:4a:6b:8b:e5:b0:0b:45:e4:3f:70:27:61:7f:4c:
59:de:13:e7:db:89:02:56:8d:da:bb:3b:27:41:48:
ac:48:4f:8b:5d:27:60:6e:b7:c0:1d:47:ff:80:ac:
c8:08:e4:fc:e5:33:8c:9a:9b:8a:57:8f:a4:70:4d:
b0:ff:41:16:cf:97:71:98:6a:25:76:8d:34:99:12:
97:7d:b6:0a:4f:de:b8:3f:43:06:92:5c:2f:ff:27:
13:63:06:0a:11:c7:b0:de:20:7a:ed:9b:84:d2:66:
da:10:87:c3:29:e0:c7:8e:09:94:19:db:1f:c3:9f:
d6:2e:a1:7d:0a:13:fe:60:be:fb:a1:65:6e:31:0a:
53:d8:05:24:0b:7d:47:e2:1b:c3:16:d7:dd:ea:ed:
3c:25:34:05:8c:12:95:74:6a:57:d6:1a:9c:41:b6:
c5:02:60:72:7b:b8:e0:e7:f1:5c:c0:f0:d9:55:02:
9d:06:89:c3:0b:22:1c:50:56:5b:73:54:e4:f4:d3:
bb:fa:62:5f:ec:c2:d4:81:b6:38:76:73:50:9b:0a:
c6:d6:0d:d9:e2:23:9c:35:29:01:63:16:10:79:34:
96:0a:50:73:85:ad:4f:d6:47:fa:48:20:d1:c6:f2:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:79:EC:D6:5F:6F:A4:51:36:07:30:3B:75:F8:58:21:61:E0:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j9V57NZfb6RRNgcwO3X4WCFh4K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/24
185.252.160.0/23
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ac:d0:a3:10:42:60:3d:45:bc:bd:c4:8e:45:27:4d:ad:4f:
90:ae:a5:5a:11:85:c0:40:81:a8:3e:f1:b2:c8:c9:e9:81:43:
b0:42:10:81:68:e2:36:86:93:ea:e9:ca:c8:63:ed:d5:af:ab:
7f:70:9e:8e:ce:50:06:5a:2a:85:df:35:9c:2c:2b:7f:59:e7:
73:66:83:2f:cf:53:78:98:b9:fe:76:72:74:8e:49:09:54:20:
2e:3b:4d:62:8c:da:ed:b3:57:a9:33:6e:b5:c9:92:02:62:89:
81:42:79:5e:82:d8:9d:9c:e9:4e:ee:20:65:3f:ff:21:e2:db:
c5:66:a9:e7:b2:70:54:7f:cf:20:0b:f5:14:fc:04:96:97:3e:
37:58:0e:34:89:a7:eb:9e:85:37:cf:03:b5:90:df:8f:e9:d4:
30:e6:42:15:ad:17:25:02:eb:3b:b5:0a:85:be:f6:7b:77:a7:
50:49:e2:eb:1f:e5:47:f9:89:b4:15:77:f3:7e:c4:63:43:59:
5e:78:20:fa:6a:24:b9:eb:e0:bc:00:d4:39:a8:f1:9d:ee:94:
3f:b4:21:04:87:67:4a:dc:bd:22:5a:7f:ed:2a:e6:c5:b7:ba:
f5:ec:a1:03:77:df:a9:ff:1e:48:80:f0:21:af:6a:a6:e0:52:
3d:f3:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:58:40 2024 by rpki-client on console-ams.rpki-client.org