Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2p8bzvJ0WOjKlFO4M0Orjqknd_M.roa
File: 2p8bzvJ0WOjKlFO4M0Orjqknd_M.roa (raw, json)
Hash identifier: xLiNPQPpe9KS+BrgQE8rTuqHiMTJ3zr93M4Q30JQK48=
Subject key identifier: DA:9F:1B:CE:F2:74:58:E8:CA:94:53:B8:33:43:AB:8E:A9:27:77:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F7EC927C678A924E43E806493058
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2p8bzvJ0WOjKlFO4M0Orjqknd_M.roa
Signing time: Sun 01 Jan 2023 13:25:12 +0000
ROA not before: Sun 01 Jan 2023 13:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60784
IP address blocks: 37.60.136.0/24 maxlen: 24
31.13.227.0/24 maxlen: 24
87.121.78.0/24 maxlen: 24
87.121.76.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f7:ec:92:7c:67:8a:92:4e:43:e8:06:49:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9f1bcef27458e8ca9453b83343ab8ea92777f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:ec:11:da:cc:af:4d:a0:28:c0:9f:6a:b0:
4f:d2:e9:e5:eb:8b:5e:aa:31:c8:da:87:6d:e4:cb:
c8:6d:d8:3d:7d:17:f6:93:86:44:03:8e:c1:31:87:
db:b3:c6:a6:df:4d:9a:27:89:8f:38:9c:33:40:2e:
04:c8:f9:ba:07:71:15:e6:28:5a:dd:f9:0b:8c:65:
d9:96:90:af:b0:2c:10:30:eb:f9:23:78:e8:3a:ae:
de:23:a8:66:67:9c:1c:f0:3d:e9:3b:e3:57:b9:36:
06:44:38:39:84:55:b4:0f:27:c2:08:0c:39:d8:df:
21:b4:13:be:88:52:f8:e3:d8:0c:70:31:6b:d5:32:
27:1c:19:d3:35:ba:a9:45:98:4a:6f:1e:76:9f:df:
d0:64:3e:ed:69:63:cb:83:b6:f2:fe:6b:f3:7b:23:
ed:ad:d6:6e:4e:36:fc:52:4c:0d:da:76:94:4f:89:
a6:30:d0:f6:0d:e8:29:38:49:a6:86:b3:ef:02:b3:
6d:21:b0:10:e9:82:b2:10:12:71:05:6c:9b:3b:92:
d4:fd:d2:ad:78:32:74:9a:cb:4f:38:4d:5f:d0:30:
26:15:1d:1b:30:40:05:72:a8:8d:70:15:35:b5:78:
10:f6:f4:75:04:3d:9a:fe:67:62:e6:ff:b6:53:37:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:1B:CE:F2:74:58:E8:CA:94:53:B8:33:43:AB:8E:A9:27:77:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2p8bzvJ0WOjKlFO4M0Orjqknd_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.227.0/24
37.60.136.0/24
87.121.76.0-87.121.78.255
Signature Algorithm: sha256WithRSAEncryption
6f:a0:5d:07:60:f3:34:70:9c:01:15:74:30:d1:2f:b5:d7:30:
7a:c5:17:19:bf:13:2b:21:4b:37:51:38:64:a5:ea:67:6f:64:
62:ae:e5:bf:eb:0c:b0:01:1a:f3:e3:14:47:40:20:5c:04:69:
39:d5:26:be:8c:97:6e:59:6d:92:79:54:6d:73:d1:62:0e:50:
eb:17:ed:88:b9:34:7d:b7:85:9c:5e:ed:f7:a0:51:48:4f:32:
22:20:38:1a:f0:36:82:8b:e6:8b:c7:fc:14:41:2e:0c:b9:11:
51:be:11:d5:6d:2c:40:48:cf:2c:a5:7b:8d:5f:20:02:91:a0:
bf:69:b6:59:e0:d0:8a:0c:aa:46:1a:ad:77:bf:26:ea:e6:44:
9e:8f:20:ca:f1:cb:6f:c8:7f:ee:12:69:fe:54:2f:93:57:49:
fc:ae:0f:50:20:ec:78:5a:1f:5a:ce:34:d8:20:a8:0a:ff:d5:
5a:b7:1a:6d:6d:82:72:a4:ce:51:69:bd:b8:c9:c0:73:16:18:
84:1c:1a:f5:aa:4c:aa:b9:25:b3:94:5b:47:97:88:99:32:38:
ec:7b:36:26:82:de:c1:2c:d0:2c:e0:9f:45:b2:ec:c6:53:b8:
46:43:93:6a:d1:47:43:7b:aa:dd:df:9a:c2:64:04:a4:ac:d2:
61:a1:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:46 2024 by rpki-client on console-fra.rpki-client.org