Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0NniUyhucNaQR2xIbZFuRb1uFug.roa
File: 0NniUyhucNaQR2xIbZFuRb1uFug.roa (raw, json)
Hash identifier: A+MgfUt1x0c55STF6vd5mxlRSljnrcWbSssE5+jFdtQ=
Subject key identifier: D0:D9:E2:53:28:6E:70:D6:90:47:6C:48:6D:91:6E:45:BD:6E:16:E8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD5442304D5AE5F37055F18A8ECBD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0NniUyhucNaQR2xIbZFuRb1uFug.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 87.120.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 06:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d5:44:23:04:d5:ae:5f:37:05:5f:18:a8:ec:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d9e253286e70d690476c486d916e45bd6e16e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:be:3a:b4:74:8f:c0:c7:3f:e6:0f:01:96:
de:68:08:e8:a8:d6:5e:b8:c3:c7:e2:34:cb:c8:98:
34:46:30:67:ef:d0:01:99:41:b8:06:d5:ab:a0:1b:
9d:5e:99:6a:37:13:1c:2a:5e:75:eb:db:b1:ac:b8:
98:8a:a8:ab:94:f2:91:93:97:44:9d:8a:d4:13:bd:
b5:d6:44:ea:26:0e:bf:f9:78:fd:a7:f3:b6:10:06:
ef:d2:83:e2:32:74:01:9b:1e:05:56:39:42:6b:bf:
67:bd:00:0e:3a:12:87:b3:00:40:c4:55:f9:e1:91:
c2:3c:8e:54:1e:b1:a9:27:8a:2a:cc:3e:7f:7a:ea:
1a:12:fb:4d:0b:22:74:79:6e:9d:d4:f7:86:e6:a4:
66:9c:ea:25:42:26:2d:eb:34:e3:94:19:d3:70:5c:
bd:5f:18:58:16:d7:11:7a:84:d4:ab:d2:9c:f2:80:
95:17:f3:45:b5:b1:4d:48:8c:70:aa:b3:43:5a:3e:
f7:b5:7d:cf:15:cd:72:f3:4a:e9:53:5e:42:ee:47:
c9:b0:ac:c7:d0:47:21:26:af:b2:36:50:ac:12:23:
c5:3b:36:49:66:14:7b:f0:7f:3c:5c:39:b0:3a:1a:
b8:e5:62:2a:b7:f1:61:94:3f:9a:74:a0:3a:b6:40:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D9:E2:53:28:6E:70:D6:90:47:6C:48:6D:91:6E:45:BD:6E:16:E8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0NniUyhucNaQR2xIbZFuRb1uFug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1e:29:03:dd:7b:c5:a1:5e:47:73:64:a4:45:bf:35:e3:6a:
20:5a:2f:64:ab:ca:ea:db:20:d4:d9:1d:af:ae:01:5a:33:f9:
6a:e3:10:a6:a8:9f:83:df:7f:3d:dd:51:a5:33:1c:38:4a:8e:
cb:f7:a9:41:b2:e2:89:2c:16:9e:84:95:b1:3f:09:ff:f4:57:
bb:9a:d1:fb:32:ff:af:37:9e:7d:3c:70:8f:7b:b2:d1:e2:e9:
3b:28:08:75:7d:72:b5:2c:08:0d:5f:ab:f1:39:a4:d3:95:b5:
64:7e:45:c5:a6:bb:1a:b3:8e:11:71:1e:1f:82:6d:54:d6:52:
6d:d2:a3:2b:4b:e6:8c:2e:69:f3:53:c4:38:9c:64:f8:1c:b8:
24:75:68:e5:7d:cf:d8:ad:d0:60:d1:f4:77:69:85:b7:d6:38:
63:20:4a:18:d1:8a:6c:6f:dd:ae:07:b9:83:89:f6:12:54:20:
3d:b7:ec:40:c2:8c:0b:88:88:81:f9:4c:37:f6:90:2e:b2:91:
56:85:3c:3c:e7:8f:a9:a5:36:91:8b:d9:98:87:23:c2:51:43:
1f:e3:d3:57:3a:33:20:7d:bc:d8:4e:ba:3a:6d:a4:f8:e7:3c:
d3:1f:dc:c5:06:79:be:d6:74:d5:e9:ba:7f:72:db:a9:32:12:
44:1f:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 07:31:53 2024 by rpki-client on console-ams.rpki-client.org