Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-UQcKT1CdpNOvpqqGzbfGkimyv4.roa
File: 1-UQcKT1CdpNOvpqqGzbfGkimyv4.roa (raw, json)
Hash identifier: WkmsRbwCUsCob5qjY3ztg91deUL5JpKpP/oUf960ZL8=
Subject key identifier: F9:44:1C:29:3D:42:76:93:4E:BE:9A:AA:1B:36:DF:1A:48:A6:CA:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0F5AFEEBBC3FBBB8EF9A9DD56FB0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-UQcKT1CdpNOvpqqGzbfGkimyv4.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215862
IP address blocks: 193.42.32.0/23 maxlen: 24
87.121.86.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 13:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0f:5a:fe:eb:bc:3f:bb:b8:ef:9a:9d:d5:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9441c293d4276934ebe9aaa1b36df1a48a6cafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:c3:1d:7e:9d:fb:fb:07:1d:d6:e6:b9:87:
c6:9d:bc:9d:3c:a2:f3:08:92:f5:fc:cd:64:40:29:
d6:81:da:6b:61:18:6f:35:59:3a:da:63:36:81:5a:
3c:68:30:aa:ad:6d:12:1e:31:6a:cd:11:9f:a9:c6:
9e:91:a5:7f:8f:60:6d:22:c2:0b:7e:25:d7:5f:89:
51:26:6a:72:d2:f8:81:89:ef:e4:f0:13:67:5c:78:
10:7c:3a:48:b5:83:47:55:e9:ca:1e:21:83:3d:94:
35:73:9d:6e:17:6d:61:12:06:fc:72:27:51:2c:31:
db:ca:b9:9b:41:30:dd:3e:f1:12:bf:f2:47:34:d3:
d5:e6:6b:81:78:f5:b7:5b:d1:f6:02:0a:70:35:07:
00:ce:2e:8f:34:fb:17:1b:c6:eb:0b:45:4a:4b:61:
20:ad:04:19:8e:38:df:2d:ee:82:5f:3d:e4:27:89:
1e:fa:e4:fe:ba:9b:9a:3d:f7:eb:89:d6:61:00:70:
16:09:ad:0f:dd:3d:35:8a:dc:5d:2e:51:c0:c2:06:
e4:e7:1a:10:a2:27:85:12:fe:84:d6:6a:71:d9:9f:
4d:60:a7:10:07:0a:ac:48:a7:41:c1:7b:61:d4:e3:
da:3e:ed:33:29:6b:4d:97:1b:96:32:b6:79:65:db:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:1C:29:3D:42:76:93:4E:BE:9A:AA:1B:36:DF:1A:48:A6:CA:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-UQcKT1CdpNOvpqqGzbfGkimyv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.86.0/23
193.42.32.0/23
Signature Algorithm: sha256WithRSAEncryption
95:7c:85:70:06:7f:25:30:c4:cc:50:a8:bc:8f:49:dc:64:b9:
81:69:b8:52:a4:bc:72:f3:08:43:fc:3a:db:1a:1b:7e:45:cf:
e5:f1:a6:6c:a5:87:f9:76:c2:f7:09:27:a3:93:2f:f0:39:d8:
d7:a4:3b:cd:42:11:d2:4e:bc:a8:00:3a:7b:9b:9d:32:38:2a:
fe:4a:d4:42:8e:96:02:63:a6:5e:ff:5f:ab:f6:d3:ec:20:e4:
9c:b7:7d:30:92:1e:41:f1:3f:57:fb:71:81:76:73:3c:cb:66:
ea:38:c8:78:bf:02:73:bb:70:8d:b9:4a:ec:0b:a1:50:86:b0:
f5:e5:44:76:c5:6f:90:cb:71:e2:70:b6:ff:04:a8:d1:65:f7:
2c:33:18:43:11:e0:38:e7:27:d2:ee:80:32:7e:a1:81:58:a6:
49:76:5e:e2:0f:90:d5:b5:d2:59:da:f4:f4:18:59:40:f6:37:
c1:72:66:93:3c:ff:a6:cc:b1:f7:27:41:7b:74:3a:05:d5:37:
31:3d:10:21:90:6e:4e:c5:f6:e1:3a:4f:31:db:cb:0a:32:08:
3d:ba:dd:5b:7a:b3:f3:98:66:bc:a9:a7:10:70:3c:47:f7:aa:
59:fd:f2:78:4b:d1:0d:44:0f:3f:0c:ce:13:1c:92:dd:47:8c:
dd:5d:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 17:26:15 2024 by rpki-client on console-ams.rpki-client.org