Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Uvi7nosT2XIsvbXbx_Es6wD604.roa
File: 3Uvi7nosT2XIsvbXbx_Es6wD604.roa (raw, json)
Hash identifier: fRWZzbyHhjYoFh3qliJn1F5ZmNwdBJ4y/ndX2wOjSNg=
Subject key identifier: DD:4B:E2:EE:7A:2C:4F:65:C8:B2:F6:D7:6F:1F:C4:B3:AC:03:EB:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01875610FC514B529EC1A1FEB20E1BAAAF8E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Uvi7nosT2XIsvbXbx_Es6wD604.roa
Signing time: Thu 06 Apr 2023 10:16:06 +0000
ROA not before: Thu 06 Apr 2023 10:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38377
IP address blocks: 87.121.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:10:fc:51:4b:52:9e:c1:a1:fe:b2:0e:1b:aa:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 10:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4be2ee7a2c4f65c8b2f6d76f1fc4b3ac03eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:c8:f0:cc:33:dc:78:70:84:b7:b0:63:cb:
b6:36:03:fb:74:b1:a4:4b:3f:00:df:48:1a:fa:22:
4c:63:1f:9a:a9:7c:13:00:a4:70:56:d1:e0:85:cc:
60:70:75:b0:78:d1:ef:df:15:e1:93:2e:6f:05:eb:
a3:53:e6:7e:db:20:66:c9:c1:1b:ae:f1:04:b9:7b:
6a:b0:c5:47:7a:10:27:8b:e2:8f:f0:07:04:1d:08:
77:99:ee:c6:92:67:9c:06:49:0a:88:ec:28:49:cd:
c4:22:b5:eb:9a:64:3a:46:82:8c:59:b6:a2:5b:c9:
55:ae:67:26:f9:2b:c1:8b:1b:01:9f:91:9f:e3:84:
a6:8b:98:9f:34:79:6d:9f:16:3d:4b:b0:a4:8e:60:
53:70:4c:a2:d6:47:2a:2d:2b:06:66:ef:b6:9d:23:
74:0b:41:bd:b5:ca:6e:05:ff:fb:06:8b:5f:44:d5:
1f:f1:4f:a9:ef:bc:5e:13:14:dc:6f:23:cd:80:ad:
1d:46:95:20:8f:dc:7c:bd:50:59:cb:b2:d7:a4:25:
7c:0e:95:0f:77:d7:1c:89:31:7b:3a:2b:a9:38:92:
da:f8:2b:e1:11:b5:89:59:6e:23:e7:ab:a9:26:53:
13:ed:f5:bd:af:bb:ff:b3:d9:68:bd:f6:33:cc:c4:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:E2:EE:7A:2C:4F:65:C8:B2:F6:D7:6F:1F:C4:B3:AC:03:EB:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Uvi7nosT2XIsvbXbx_Es6wD604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
09:73:22:48:bf:1b:86:55:e5:be:f0:b1:0c:2c:ee:f5:22:a9:
d4:34:68:9a:4d:61:c2:ed:8b:7a:30:de:93:2e:0c:44:d6:ed:
ec:b3:3a:52:2b:49:ec:86:58:f8:dd:c8:70:7b:b2:53:78:88:
8f:07:48:e9:7a:89:3b:35:21:7c:79:fb:d5:e9:86:35:df:ec:
09:4f:40:2a:be:67:25:46:b7:d5:79:36:96:68:e9:75:90:f4:
94:9d:3c:30:ae:92:9a:f0:41:98:85:18:12:c1:4a:29:9b:7a:
21:c0:51:6b:33:12:8f:6a:0a:f8:0d:6a:d4:87:d3:07:46:6c:
d5:99:d8:19:2d:1e:9c:3d:93:6d:c9:48:41:36:af:1c:17:95:
46:a5:47:82:e2:23:14:9a:cd:82:07:cc:b9:b6:ea:a5:94:99:
ff:cb:d5:c5:3a:83:14:61:26:ce:81:e0:64:12:53:31:bb:96:
14:a0:c3:81:2d:d9:c8:8d:94:f5:2e:2a:45:5e:b6:05:82:40:
fe:47:6c:02:3f:2a:e9:8a:fa:70:bc:8d:46:45:f2:ca:ba:1f:
3e:c2:e1:15:00:09:80:10:d9:9a:41:2d:b5:8c:0e:bf:67:c5:
df:5a:df:78:ff:c7:2e:65:67:0c:9e:7e:d1:4a:2f:5b:ea:31:
7b:a3:44:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdWEPxRS1KewaH+sg4bqq+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDA2MTAxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDRiZTJlZTdhMmM0ZjY1YzhiMmY2ZDc2ZjFmYzRiM2FjMDNlYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgbI8Mwz3HhwhLewY8u2NgP7dLGk
Sz8A30ga+iJMYx+aqXwTAKRwVtHghcxgcHWweNHv3xXhky5vBeujU+Z+2yBmycEb
rvEEuXtqsMVHehAni+KP8AcEHQh3me7GkmecBkkKiOwoSc3EIrXrmmQ6RoKMWbai
W8lVrmcm+SvBixsBn5Gf44Smi5ifNHltnxY9S7CkjmBTcEyi1kcqLSsGZu+2nSN0
C0G9tcpuBf/7BotfRNUf8U+p77xeExTcbyPNgK0dRpUgj9x8vVBZy7LXpCV8DpUP
d9cciTF7OiupOJLa+CvhEbWJWW4j56upJlMT7fW9r7v/s9lovfYzzMTa/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1L4u56LE9lyLL2128fxLOsA+tOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvM1V2aTdub3NUMlhJc3ZiWGJ4X0VzNndENjA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ksMA0G
CSqGSIb3DQEBCwUAA4IBAQAJcyJIvxuGVeW+8LEMLO71IqnUNGiaTWHC7Yt6MN6T
LgxE1u3sszpSK0nshlj43chwe7JTeIiPB0jpeok7NSF8efvV6YY13+wJT0Aqvmcl
RrfVeTaWaOl1kPSUnTwwrpKa8EGYhRgSwUopm3ohwFFrMxKPagr4DWrUh9MHRmzV
mdgZLR6cPZNtyUhBNq8cF5VGpUeC4iMUms2CB8y5tuqllJn/y9XFOoMUYSbOgeBk
ElMxu5YUoMOBLdnIjZT1LipFXrYFgkD+R2wCPyrpivpwvI1GRfLKuh8+wuEVAAmA
ENmaQS21jA6/Z8XfWt94/8cuZWcMnn7RSi9b6jF7o0QO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org