Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-qXXacDpNmvLIvByh7I73E5VpSM.roa
File: 1-qXXacDpNmvLIvByh7I73E5VpSM.roa (raw, json)
Hash identifier: Kl/jGe7eFMFTbTxZJfX2MVkMWOa6eo9d+sCWs9Ru3ho=
Subject key identifier: FA:A5:D7:69:C0:E9:36:6B:CB:22:F0:72:87:B2:3B:DC:4E:55:A5:23
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FB8D0CDDE272E6595B801F77820AF7306
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-qXXacDpNmvLIvByh7I73E5VpSM.roa
Signing time: Mon 27 May 2024 06:50:42 +0000
ROA not before: Mon 27 May 2024 06:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214905
IP address blocks: 87.121.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 10:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:d0:cd:de:27:2e:65:95:b8:01:f7:78:20:af:73:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 27 06:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa5d769c0e9366bcb22f07287b23bdc4e55a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:01:78:9e:54:eb:08:8b:be:4e:a2:1c:16:
8e:fa:f5:5b:c3:80:94:30:6a:2c:59:aa:68:f8:cc:
db:1e:28:08:d7:58:a9:84:9e:47:81:04:c2:e9:13:
25:63:f5:fc:ea:b8:e6:ad:3e:98:21:8c:53:85:b3:
33:a0:e1:8f:fb:ed:be:01:97:a1:d8:a6:2d:af:92:
b1:89:61:08:97:65:00:f9:31:24:50:4d:23:20:11:
da:25:c8:16:be:24:b3:34:7d:f0:df:b7:16:f4:e8:
e5:bb:78:f0:7b:87:0b:b4:ec:07:95:0d:e9:db:4e:
7d:20:86:db:cf:8b:cc:ae:3e:af:29:da:3f:be:af:
dd:6b:f5:87:f6:f7:4b:de:8a:ac:9d:c5:ef:2c:33:
ef:b0:c0:84:d9:f0:c7:f4:ca:4f:5c:f9:43:04:a1:
ea:83:99:49:cf:43:ce:20:89:ee:75:1e:c5:99:3e:
c1:94:b6:88:0f:5a:1e:7f:1c:9d:ec:c6:5a:2a:36:
7c:1b:f1:f1:f7:4e:65:61:c4:53:6e:97:88:eb:71:
df:c1:53:17:55:88:d5:6b:77:62:fe:e7:d5:28:1e:
c7:f2:76:02:11:b7:e6:6d:62:89:07:78:0e:42:62:
18:e6:06:54:e0:e7:99:02:46:83:1f:45:30:5c:4f:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:D7:69:C0:E9:36:6B:CB:22:F0:72:87:B2:3B:DC:4E:55:A5:23
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-qXXacDpNmvLIvByh7I73E5VpSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.103.0/24
Signature Algorithm: sha256WithRSAEncryption
20:aa:29:46:a4:9a:86:a7:8e:7d:d8:c4:3a:27:52:15:b7:dc:
3d:b5:58:37:d1:bc:6a:1d:b8:11:3a:af:30:7c:f7:69:72:bc:
bd:49:6e:9d:a1:27:a2:4b:e9:f2:f9:83:2f:15:06:3b:79:4a:
5c:6d:32:46:9f:c6:ff:fd:4d:79:95:87:c0:a4:a6:2a:8a:b9:
16:a6:e6:a7:c1:75:02:63:05:c4:09:aa:18:e6:a0:19:8d:32:
34:42:48:41:e9:7b:1a:0e:e1:6c:68:75:b4:22:0b:c4:b3:21:
f7:fa:8b:e9:dd:9f:25:25:d2:6e:7c:3f:de:0f:4e:d9:21:e0:
e8:33:05:77:0e:94:cc:38:6a:67:6f:56:bf:ca:cd:21:6c:8c:
5d:f4:cf:aa:ad:b4:f3:c5:91:d3:d4:57:90:18:ce:e9:81:2b:
67:d6:6d:3a:88:e2:88:11:51:9a:d9:7c:57:11:8c:32:51:43:
cd:7a:8a:40:e6:16:03:63:66:0d:0d:d2:4e:eb:61:c0:37:45:
d9:7a:2e:f0:56:53:7a:d4:d7:ff:e3:e3:4d:3f:f2:09:bb:58:
9d:e5:88:f3:b8:c0:98:31:c9:c9:19:35:b1:b3:85:1c:4d:f6:
79:ba:86:b3:b3:2a:e9:2e:37:b7:85:f5:35:bc:a1:e1:83:a9:
ae:57:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 12:13:07 2024 by rpki-client on console-fra.rpki-client.org