Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4GWjTIYSBvYIDRruU2dseLKIswo.roa
File: 4GWjTIYSBvYIDRruU2dseLKIswo.roa (raw, json)
Hash identifier: bz+pBhrDFVNMnW8vsZS8rKj4RZZ4JrssyTzZzDwbQbk=
Subject key identifier: E0:65:A3:4C:86:12:06:F6:08:0D:1A:EE:53:67:6C:78:B2:88:B3:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188705D56789009756105D969C769622AE7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4GWjTIYSBvYIDRruU2dseLKIswo.roa
Signing time: Wed 31 May 2023 05:52:25 +0000
ROA not before: Wed 31 May 2023 05:52:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 87.120.64.0/23 maxlen: 24
91.92.21.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.121.57.0/24 maxlen: 24
87.121.56.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
87.120.220.0/23 maxlen: 24
87.120.32.0/24 maxlen: 24
87.121.100.0/24 maxlen: 24
87.120.35.0/24 maxlen: 24
87.121.101.0/24 maxlen: 24
87.120.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:5d:56:78:90:09:75:61:05:d9:69:c7:69:62:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 31 05:52:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e065a34c861206f6080d1aee53676c78b288b30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:d6:ce:19:bf:4d:89:c9:d2:ee:67:54:69:
72:05:e3:2e:a7:4c:d2:4e:cf:59:17:32:35:8a:87:
cb:57:fb:83:c9:b7:94:6e:4b:50:a1:79:87:f4:35:
85:7d:92:c0:39:02:5f:81:e5:7e:40:37:25:82:0b:
50:df:18:19:9f:3b:e2:7a:0d:3a:74:14:71:db:d0:
64:d8:84:a0:d1:e9:d0:92:18:82:77:0d:a8:b7:47:
c2:bd:a8:b5:86:02:65:ad:3e:10:51:44:e7:9a:75:
7f:c8:ee:c6:3a:19:0f:37:10:cf:6e:d6:26:08:de:
6a:94:1a:68:fe:a1:ea:6b:bf:da:0e:04:05:aa:3b:
75:71:69:e1:a4:01:a8:71:3d:05:0f:65:08:c1:f5:
42:a3:2c:91:b9:eb:b4:69:20:86:7e:40:78:0d:b4:
0c:29:df:98:c7:43:29:a8:dc:7a:3b:f1:c4:fc:36:
91:ee:c9:7b:3f:3f:8a:d9:7b:93:98:f2:d0:3a:5b:
7d:a2:93:9f:2d:62:73:1f:e1:2c:49:08:e0:c1:3d:
c7:bd:90:a3:9b:15:a1:fb:98:ee:aa:f9:fe:e6:67:
2f:61:cc:0f:22:82:2a:54:50:33:fd:0e:84:40:ae:
0b:c9:3c:9d:4b:a5:62:a8:cf:79:fe:96:eb:c7:14:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:A3:4C:86:12:06:F6:08:0D:1A:EE:53:67:6C:78:B2:88:B3:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4GWjTIYSBvYIDRruU2dseLKIswo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0/24
87.120.32.0/24
87.120.34.0/23
87.120.64.0/23
87.120.89.0/24
87.120.220.0/23
87.121.56.0/23
87.121.100.0/23
91.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5d:7a:80:d6:ea:fd:08:b0:0f:6c:bc:0d:1e:91:47:0f:93:
d2:55:e6:6a:60:c7:0c:1f:58:e1:d0:d1:95:5a:0d:92:62:96:
be:26:00:a2:d0:2b:46:66:8d:97:3c:59:11:d6:46:c6:f5:da:
dd:f4:61:6d:ee:f6:a6:c9:cf:ab:51:01:9c:ba:ce:bd:a1:c5:
c7:b5:27:e3:d8:01:58:7c:2a:87:42:68:40:77:7b:8e:ff:0a:
c5:09:36:fe:25:1e:0f:2f:47:c1:1e:2d:37:ae:eb:6e:1e:08:
11:8b:2e:c4:bd:51:8e:c5:d3:a6:69:1f:09:e1:44:cc:a8:db:
af:c5:4d:55:41:f0:ba:6a:d1:94:8b:5c:c5:58:47:7a:f7:6d:
7e:fa:86:66:49:4c:b9:9a:1f:1f:1f:f5:ed:11:4c:7c:03:ef:
36:0f:f2:06:ad:d4:d1:6f:c1:08:c9:53:90:bd:e3:40:fe:f2:
3f:7c:b8:6f:4c:e1:cb:d4:8f:1e:9f:42:89:1d:65:0d:73:6e:
02:41:8c:58:a5:a8:6a:11:55:96:6d:e9:69:3a:a2:2c:fa:87:
69:ba:1e:48:d2:b3:c1:8d:f9:49:3f:d3:8f:aa:a5:ce:f6:2e:
fc:d3:78:2b:8c:b7:5f:f2:ee:d5:68:4b:66:8b:fd:29:47:00:
85:69:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:37 2023 by rpki-client on console-fra.rpki-client.org