Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0TnEJpqJ6-1pAPx2xXZKSXh_Jd8.roa
File: 0TnEJpqJ6-1pAPx2xXZKSXh_Jd8.roa (raw, json)
Hash identifier: 6e6pkYhxLxRPulThLDEJD/DPxSpXDDGHGezE3Sm8iCA=
Subject key identifier: D1:39:C4:26:9A:89:EB:ED:69:00:FC:76:C5:76:4A:49:78:7F:25:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193A1A0622791E855661F70F6A6670C8908
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0TnEJpqJ6-1pAPx2xXZKSXh_Jd8.roa
Signing time: Sat 07 Dec 2024 14:57:42 +0000
ROA not before: Sat 07 Dec 2024 14:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215411
IP address blocks: 87.121.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:a0:62:27:91:e8:55:66:1f:70:f6:a6:67:0c:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 7 14:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d139c4269a89ebed6900fc76c5764a49787f25df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:2e:06:ee:8a:f7:20:3c:76:cf:a1:4b:64:
a6:cf:60:84:1f:62:e0:ab:c7:2a:57:62:07:99:fb:
1f:1d:b5:ab:30:2d:47:05:5a:d0:01:ec:d4:a3:5d:
ff:85:e6:df:d3:6a:ed:2c:ad:ff:09:14:38:bb:9b:
0f:d2:b6:0c:ca:1b:ce:1e:ab:c0:2c:a9:1d:92:30:
29:19:4b:79:db:2f:bd:26:15:00:8c:54:b5:c1:e7:
c1:93:78:d5:64:37:88:58:5d:e5:52:f2:5a:61:d6:
cb:ca:00:f2:a6:3a:fe:94:1b:2f:fa:ab:cd:c1:23:
c2:ac:36:7e:56:98:49:1f:68:f7:e0:c1:ae:2a:01:
57:94:d0:91:3e:5e:f4:70:33:94:73:fe:8c:9c:ec:
29:ac:84:fe:70:4d:b3:c3:20:0f:f6:c6:c2:9b:56:
ce:e6:d5:b5:09:4c:4b:cb:88:fa:1e:31:85:00:e5:
b9:29:7b:26:d1:40:f5:95:a0:29:90:32:1f:cc:cf:
6d:16:84:14:99:65:e5:12:8e:25:cb:4e:26:6e:aa:
ff:5f:b5:44:74:1c:1d:24:57:3c:68:c1:39:24:b3:
62:7f:72:65:a0:07:62:2d:f5:82:4a:2d:1f:fa:e2:
90:9f:29:17:64:1b:1a:cc:41:40:70:9f:d4:fe:8e:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:C4:26:9A:89:EB:ED:69:00:FC:76:C5:76:4A:49:78:7F:25:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0TnEJpqJ6-1pAPx2xXZKSXh_Jd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.104.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f2:65:f4:17:b7:96:ff:a4:c3:3a:fc:37:8b:e1:6c:ed:f0:
eb:4d:38:18:d3:f6:e4:02:b7:30:bf:e1:a3:18:fb:cc:7a:4e:
7b:35:95:48:0d:77:f6:2e:4d:e1:17:fe:f3:53:24:a4:11:db:
c2:c2:8c:c2:5d:0c:10:da:f9:8c:2c:1a:8d:16:37:bd:09:07:
32:a2:f7:7d:e3:a6:f7:b2:15:ee:fc:56:98:98:32:cc:a4:c8:
87:ca:8d:3e:03:36:c6:26:58:63:88:65:b6:2f:0d:c0:57:25:
36:f2:19:7d:e9:6c:94:35:83:d8:d8:a7:89:3b:d5:e1:94:e7:
7a:d8:01:d0:8c:12:fc:a8:23:5b:06:5f:2f:50:df:de:3a:2e:
f1:f8:c8:64:0f:f7:de:3c:f0:93:35:40:54:78:2b:fd:64:8c:
fa:f7:22:bc:53:2c:1e:9e:fa:30:6c:1f:39:7c:41:84:fd:c9:
ed:f7:3d:b3:88:12:7e:1e:cd:54:ac:58:c5:fb:58:21:87:45:
b4:70:04:a1:17:57:94:db:d9:a9:83:2c:5d:3b:5e:53:5b:61:
70:b2:d0:18:1c:c3:27:4c:c4:bf:fa:7e:dc:76:d4:dd:cd:b9:
33:8f:96:92:e0:be:eb:8c:a6:22:0f:44:d6:c8:70:ee:4a:d0:
0d:ef:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:33:25 2025 by rpki-client