Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Dly--L1LKlpGmdnASJ1H0WQBDg.roa
File: 2Dly--L1LKlpGmdnASJ1H0WQBDg.roa (raw, json)
Hash identifier: C4Cyc6lGU6oQX8PRMjpHsC/AgmSB5Ms1PKDDc67QIZU=
Subject key identifier: D8:39:72:FB:E2:F5:2C:A9:69:1A:67:67:01:22:75:1F:45:90:04:38
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D31E3D7B028E8E2C7170419FB27D8B4DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Dly--L1LKlpGmdnASJ1H0WQBDg.roa
Signing time: Mon 22 Jan 2024 15:57:11 +0000
ROA not before: Mon 22 Jan 2024 15:57:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 26 Jan 2024 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:e3:d7:b0:28:e8:e2:c7:17:04:19:fb:27:d8:b4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 15:57:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83972fbe2f52ca9691a67670122751f45900438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:64:4f:c6:5d:81:c7:1a:68:cd:30:4a:a4:
36:b2:4d:2f:71:68:24:01:d0:a8:8f:08:3d:f5:45:
9d:fc:3e:25:51:da:b2:4d:96:98:25:05:1e:1e:62:
60:ee:c2:b5:18:1c:dd:a4:3f:14:dc:3e:55:fa:e3:
0f:57:ca:e4:57:20:2d:7c:7f:02:86:1a:81:74:a3:
01:74:6d:fd:84:2b:11:d4:6d:9c:b6:b2:f5:d4:c5:
b7:b0:f7:43:9a:c5:09:da:5e:ef:b4:cf:5c:29:d1:
b9:59:9f:f8:e3:7d:27:aa:2f:80:7c:5f:e7:4b:7a:
3f:3f:e1:cb:2e:52:4c:0c:64:c2:91:f0:04:2d:51:
35:75:99:d5:e1:5f:31:ef:93:b8:47:88:b2:f0:2f:
a8:6e:01:0e:56:a2:b1:57:c0:49:64:07:ec:8c:15:
4d:f1:6f:ed:2e:67:ec:5c:ce:8e:aa:d1:f9:c6:8f:
4a:df:82:65:53:f9:90:f0:8c:2d:df:98:0c:91:cd:
53:94:d1:c9:a3:84:b7:a9:dd:09:a1:73:18:53:16:
d3:ef:e9:7f:1a:c0:6f:86:01:ee:f2:0f:03:5a:cf:
ca:63:e0:2e:fd:86:87:f5:a9:c5:c6:2a:68:69:eb:
84:81:19:77:a9:29:44:98:3b:fd:e0:cf:0f:21:92:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:39:72:FB:E2:F5:2C:A9:69:1A:67:67:01:22:75:1F:45:90:04:38
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Dly--L1LKlpGmdnASJ1H0WQBDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:fc:57:8d:1a:04:25:8d:a7:e8:a3:57:6b:d2:0f:6f:ae:74:
50:c1:47:90:6c:4c:c1:c8:fc:96:ea:a5:2a:dd:65:c2:98:2b:
ca:a4:91:3b:1d:11:f2:85:fa:de:02:cf:92:1a:19:93:04:c8:
82:04:46:46:61:93:b2:d5:43:ec:71:60:68:c5:21:fa:7f:87:
11:5c:d2:56:01:11:a3:d2:bc:b8:50:8a:ed:8e:e6:d8:f8:c3:
0a:e0:53:d6:35:d1:d3:df:86:5a:fd:f5:5e:4d:5b:1a:7b:a1:
e9:4a:5b:4a:5b:00:58:17:c2:d8:35:36:a1:69:54:90:2c:fa:
c9:99:fa:f6:f1:1a:da:04:69:c2:4c:a6:17:47:31:fd:db:b8:
a2:10:ab:3b:cc:15:74:da:1e:82:e1:60:18:90:f7:a9:8a:e6:
30:1c:f6:db:28:23:c8:ea:6f:bc:91:46:1d:4b:a3:a5:80:0f:
26:b6:96:dc:b6:5d:e1:47:42:f5:da:b4:9a:54:3e:cd:11:04:
1c:bf:92:31:5a:b5:fe:eb:3b:02:6d:a9:9b:11:c2:d8:41:72:
4d:85:9a:8b:2a:1a:cb:fc:ba:cf:9a:ed:49:d3:49:ea:2d:67:
50:70:5b:33:3d:f4:48:4e:45:1f:13:11:6f:88:71:65:30:89:
a0:72:15:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY0x49ewKOjixxcEGfsn2LTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTIyMTU1NzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODM5NzJmYmUyZjUyY2E5NjkxYTY3NjcwMTIyNzUxZjQ1OTAwNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLpkT8ZdgccaaM0wSqQ2sk0vcWgk
AdCojwg99UWd/D4lUdqyTZaYJQUeHmJg7sK1GBzdpD8U3D5V+uMPV8rkVyAtfH8C
hhqBdKMBdG39hCsR1G2ctrL11MW3sPdDmsUJ2l7vtM9cKdG5WZ/4430nqi+AfF/n
S3o/P+HLLlJMDGTCkfAELVE1dZnV4V8x75O4R4iy8C+obgEOVqKxV8BJZAfsjBVN
8W/tLmfsXM6OqtH5xo9K34JlU/mQ8Iwt35gMkc1TlNHJo4S3qd0JoXMYUxbT7+l/
GsBvhgHu8g8DWs/KY+Au/YaH9anFxipoaeuEgRl3qSlEmDv94M8PIZIh2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNg5cvvi9SypaRpnZwEidR9FkAQ4MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMkRseS0tTDFMS2xwR21kbkFTSjFIMFdRQkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3hEAwQB
XXtKMA0GCSqGSIb3DQEBCwUAA4IBAQCs/FeNGgQljafoo1dr0g9vrnRQwUeQbEzB
yPyW6qUq3WXCmCvKpJE7HRHyhfreAs+SGhmTBMiCBEZGYZOy1UPscWBoxSH6f4cR
XNJWARGj0ry4UIrtjubY+MMK4FPWNdHT34Za/fVeTVsae6HpSltKWwBYF8LYNTah
aVSQLPrJmfr28RraBGnCTKYXRzH927iiEKs7zBV02h6C4WAYkPepiuYwHPbbKCPI
6m+8kUYdS6OlgA8mtpbctl3hR0L12rSaVD7NEQQcv5IxWrX+6zsCbambEcLYQXJN
hZqLKhrL/LrPmu1J00nqLWdQcFszPfRITkUfExFviHFlMImgchW4
-----END CERTIFICATE-----
Generated at Fri Jan 26 15:52:01 2024 by rpki-client on console-ams.rpki-client.org