Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3FZwH5J56VHAng3PFHq31nH7tUg.roa
File: 3FZwH5J56VHAng3PFHq31nH7tUg.roa (raw, json)
Hash identifier: /xwEHtSoKe/V0w0ZneLfFTY8WpyHKdXmZv7S+v+Yrvs=
Subject key identifier: DC:56:70:1F:92:79:E9:51:C0:9E:0D:CF:14:7A:B7:D6:71:FB:B5:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD6F65C98F77462E53C2D8951985A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3FZwH5J56VHAng3PFHq31nH7tUg.roa
Signing time: Tue 02 Jan 2024 06:29:25 +0000
ROA not before: Tue 02 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 87.121.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 10:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d6:f6:5c:98:f7:74:62:e5:3c:2d:89:51:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc56701f9279e951c09e0dcf147ab7d671fbb548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:a7:10:c4:d2:a0:7e:5c:47:ea:cf:51:5c:
88:ef:45:da:02:79:e8:74:6d:17:00:40:b0:b0:92:
87:09:93:9b:3d:ee:54:8e:53:0c:2f:5d:58:b3:50:
69:c4:14:12:44:38:36:68:6d:50:a6:24:7d:ec:a2:
cf:db:9c:4a:00:63:a6:45:61:c3:f8:cd:40:47:e5:
66:7e:97:74:cf:7c:ff:c7:40:b1:9f:cf:e5:89:e2:
c6:86:6d:cc:7f:54:d3:7a:fe:a6:a8:6a:d5:4d:19:
e2:77:ea:85:df:5e:9b:be:7e:b8:93:ca:46:1c:3b:
3f:ee:11:b6:54:66:c9:14:24:d1:5d:dd:62:c7:fc:
0c:94:47:a2:02:b8:7b:86:60:39:a1:f0:c9:42:4e:
d4:ca:fa:50:20:f7:9e:29:9c:94:dd:50:3d:bd:d2:
d9:c5:d7:ed:6f:2b:2c:5b:e8:99:d8:53:56:d7:1e:
1a:e8:d4:c7:f6:ab:ba:05:af:86:58:16:17:94:08:
ec:27:3d:c1:3e:b8:2b:6d:e3:78:0a:f5:6e:b6:85:
27:16:77:c4:37:4c:ea:bd:f5:de:8a:f6:5d:51:39:
c4:4c:d7:45:9f:af:21:31:0b:ca:2f:0c:24:42:6b:
8b:3c:3e:e6:4e:1a:3f:92:ed:a9:58:a5:a8:26:74:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:56:70:1F:92:79:E9:51:C0:9E:0D:CF:14:7A:B7:D6:71:FB:B5:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3FZwH5J56VHAng3PFHq31nH7tUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:36:1a:35:fc:17:b5:92:fc:e6:d8:79:16:85:58:c2:75:84:
7e:57:70:88:ad:e7:60:38:15:7b:39:c1:a1:a9:73:d6:fa:07:
f7:75:8f:c6:f8:33:61:b0:26:e5:c2:fc:af:a2:da:05:46:e8:
54:46:f8:a1:54:7b:78:0c:cc:06:d8:fe:53:73:d3:42:2e:59:
83:4d:60:6b:51:62:12:b1:5a:47:f3:29:43:60:8e:be:80:e0:
c3:d7:84:af:c7:ab:5c:02:c2:be:43:5c:a0:ec:6f:cc:d7:02:
38:f8:e5:70:09:6a:e4:d5:cb:34:64:9d:d1:21:ae:47:bd:fa:
1a:e1:32:52:8c:18:dc:d0:c6:c8:c6:dd:33:1d:28:b5:e8:97:
dd:55:38:12:d5:17:cc:a9:f9:e8:96:26:6c:27:00:18:be:39:
49:c0:d6:3a:c7:b9:fa:86:f6:11:7a:03:85:f8:9c:c0:d7:d8:
47:39:25:fc:57:16:35:55:46:08:89:cd:d3:13:de:69:6e:56:
1e:22:53:a2:77:be:8f:cb:b4:30:49:8c:a9:71:8a:b5:39:3d:
4a:39:a5:e0:52:66:5d:0b:43:8c:1f:a3:db:28:ea:56:a1:f1:
fe:47:21:bc:b9:7f:03:91:8c:37:e3:fa:6d:09:b3:fa:66:89:
79:ca:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:41 2024 by rpki-client on console-ams.rpki-client.org