Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4ARzQzqWKuFl7rgLa7bFMvG5IKQ.roa
File: 4ARzQzqWKuFl7rgLa7bFMvG5IKQ.roa (raw, json)
Hash identifier: 99XLFxCnaVgr2bBRWjC3oj9DgBknaWYf/Lrnm34sXK0=
Subject key identifier: E0:04:73:43:3A:96:2A:E1:65:EE:B8:0B:6B:B6:C5:32:F1:B9:20:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191DA95B2536ADE65292B876906F14AA434
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4ARzQzqWKuFl7rgLa7bFMvG5IKQ.roa
Signing time: Tue 10 Sep 2024 06:18:49 +0000
ROA not before: Tue 10 Sep 2024 06:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215127
IP address blocks: 87.120.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:95:b2:53:6a:de:65:29:2b:87:69:06:f1:4a:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 10 06:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e00473433a962ae165eeb80b6bb6c532f1b920a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:13:b3:ed:6a:c6:3f:85:6b:65:9a:1c:f4:
9c:96:2f:d2:31:8a:04:2a:2e:92:c8:06:21:82:0e:
69:44:b9:f1:86:10:4f:1b:cf:de:45:df:02:25:9d:
67:3f:27:df:eb:e8:40:3d:a1:34:69:1b:d7:d2:67:
c1:70:ea:af:82:e2:03:e6:f1:94:0a:8b:af:13:6a:
4e:dc:a8:a2:22:e0:9f:8f:aa:e2:03:af:0a:f5:32:
81:1d:ed:fd:83:99:64:ed:d1:c1:c9:98:49:e7:c9:
f1:7c:ff:44:c2:0b:a4:ce:b2:34:83:6e:5d:6f:be:
bf:26:8f:5e:60:11:1b:9f:d8:72:58:54:90:60:f2:
cf:ff:f3:b3:ea:69:3b:81:79:65:2a:e7:3e:a9:55:
25:8e:eb:a2:39:7f:b5:79:38:28:9b:b3:a2:3e:05:
d2:37:ef:9e:75:d4:7d:9c:0b:aa:8d:e7:67:8a:62:
9b:67:b0:e7:da:64:0e:c6:8e:6a:12:21:5a:93:69:
79:b2:db:0c:98:40:e6:f6:f9:35:f1:ae:31:0f:fa:
4f:1f:14:a7:4a:f8:75:6d:09:6b:24:50:59:33:1a:
df:68:f5:0d:02:77:4f:5c:af:63:d2:84:6d:16:b7:
0b:1b:6b:2d:09:46:46:6d:da:24:80:42:44:d8:41:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:73:43:3A:96:2A:E1:65:EE:B8:0B:6B:B6:C5:32:F1:B9:20:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4ARzQzqWKuFl7rgLa7bFMvG5IKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.166.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8e:9d:0a:65:91:d4:6a:ac:5d:3a:9a:86:b9:ab:05:ee:6d:
a9:bc:ab:43:d1:8b:6c:eb:49:63:48:b7:eb:cd:01:89:bb:41:
dc:c7:55:12:88:39:5a:7a:19:a3:08:36:86:51:ed:c7:47:09:
fb:45:8e:6f:57:15:9f:00:31:bd:02:af:e9:80:45:09:da:ac:
b4:56:0c:1e:3a:b9:42:8c:b4:fc:07:a2:78:c5:76:89:b6:ce:
37:85:24:aa:0f:af:54:be:d1:34:50:bc:8c:f4:54:bc:5e:82:
89:9f:6b:d4:99:3e:9a:92:6c:ee:a7:25:d9:f1:6c:18:84:db:
54:96:5f:db:e4:87:00:d3:03:90:e4:bc:1e:e9:7c:e9:78:1c:
51:2d:79:3d:98:95:2b:a8:48:22:a5:9f:93:b5:a0:68:d6:2d:
d6:1f:ac:91:15:51:89:9b:8f:9d:79:22:38:3f:ef:64:0f:19:
5b:ef:af:d7:f2:42:50:ad:62:e2:04:20:74:f5:21:8a:1a:d1:
4d:44:58:9a:5d:1f:ac:71:a7:f0:fa:b6:68:ec:87:ea:52:37:
f4:fc:21:13:7c:16:1d:7f:74:75:29:60:ec:a2:8f:3c:36:65:
70:c2:e6:fa:ae:1e:13:88:7b:36:3e:51:91:a1:1d:66:3a:8d:
a5:19:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:53:24 2024 by rpki-client on console-fra.rpki-client.org