Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6n31vUJWDRd8rJNvArmMnXC99V0.roa
File: 6n31vUJWDRd8rJNvArmMnXC99V0.roa (raw, json)
Hash identifier: dOQTdEdE+i/m53dRW2ECUJHh4odqGtMwmrvrSaLyK9c=
Subject key identifier: EA:7D:F5:BD:42:56:0D:17:7C:AC:93:6F:02:B9:8C:9D:70:BD:F5:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D21874E6BD7978DC6A2A29E1AD83945DF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6n31vUJWDRd8rJNvArmMnXC99V0.roa
Signing time: Fri 19 Jan 2024 11:42:11 +0000
ROA not before: Fri 19 Jan 2024 11:42:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.146.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:87:4e:6b:d7:97:8d:c6:a2:a2:9e:1a:d8:39:45:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 19 11:42:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea7df5bd42560d177cac936f02b98c9d70bdf55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:e4:f6:57:77:4f:f6:98:6d:91:7d:54:7c:
9b:57:d8:f5:dc:cd:31:f3:45:69:9b:2d:3e:1b:23:
50:82:88:7b:1f:1d:7c:15:12:33:4c:e2:be:8c:3a:
4a:1a:21:d0:a9:71:0a:5a:a9:2e:1a:dd:e9:f0:e6:
f2:24:d2:87:85:ac:36:9e:0a:5c:10:7e:35:b5:1d:
de:1e:80:71:e0:8f:de:7c:18:6a:d5:3f:31:e0:b4:
66:8d:2c:80:81:60:25:9c:ab:d0:d8:89:16:f9:66:
b7:83:c5:c7:5f:16:cb:20:55:8d:b9:70:14:49:e0:
45:8f:37:76:60:b3:e4:c8:29:92:f5:2b:37:e9:f2:
47:ae:ab:e1:1b:10:f5:03:55:99:9f:47:76:70:7a:
c4:05:a5:40:e0:cf:a9:c4:03:d4:c3:9b:b8:27:4e:
18:98:13:93:4e:1c:08:14:88:fb:a2:7b:6d:a1:9f:
4b:27:15:62:b4:24:f2:97:36:f8:d0:d1:ce:5b:18:
98:9a:57:97:61:17:88:6e:d3:35:aa:57:d9:64:01:
db:d5:35:e1:78:71:6e:d4:1f:a9:7f:05:0d:44:ca:
c5:a9:94:af:a5:60:93:8a:85:25:55:58:2c:65:fb:
60:38:da:23:78:be:93:f0:04:3d:d9:48:6e:ea:43:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:F5:BD:42:56:0D:17:7C:AC:93:6F:02:B9:8C:9D:70:BD:F5:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6n31vUJWDRd8rJNvArmMnXC99V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.146.0/24
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
19:70:06:dd:7e:8d:0f:00:23:7b:2a:13:41:63:ba:cd:f7:ef:
5d:64:ec:fe:27:c1:54:20:82:55:9a:d3:3a:dc:70:0b:03:64:
ff:05:12:9d:92:7c:53:d4:39:ce:cd:bd:1e:c4:45:9d:ca:c4:
57:26:aa:34:68:a9:c0:ad:fd:a3:64:ec:d5:03:66:82:ae:a6:
23:50:b5:17:4d:e1:b1:f1:33:cb:49:6a:93:52:f4:1b:e7:0b:
38:08:18:5b:6b:4c:2c:a1:2a:7f:d5:77:33:f3:e4:36:52:9b:
44:1d:17:c2:00:ca:d1:ed:e2:11:c1:55:d2:c4:d2:02:73:c6:
fb:e1:97:0f:07:6a:0e:20:f8:43:48:f7:1b:fd:9d:f5:ef:ee:
24:b1:f5:d2:86:6c:4c:16:23:61:51:78:9d:99:06:66:50:38:
d9:44:24:3c:7a:99:7d:0f:3d:5f:c0:a8:b6:e9:03:12:2f:cc:
5e:eb:f6:e2:6b:75:c6:b9:5d:90:8a:14:b1:ea:9c:2c:04:cd:
47:3c:99:24:b5:d3:bc:6d:6e:99:a1:a5:02:01:81:97:44:b2:
10:6e:be:bb:9d:2e:16:4c:f1:79:c3:78:98:75:ab:54:33:36:
3c:f2:74:af:d8:34:68:64:46:05:be:60:81:f8:4c:a9:d1:6e:
9c:92:8d:34
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY0hh05r15eNxqKinhrYOUXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTE5MTE0MjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTdkZjViZDQyNTYwZDE3N2NhYzkzNmYwMmI5OGM5ZDcwYmRmNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgDk9ld3T/aYbZF9VHybV9j13M0x
80Vpmy0+GyNQgoh7Hx18FRIzTOK+jDpKGiHQqXEKWqkuGt3p8ObyJNKHhaw2ngpc
EH41tR3eHoBx4I/efBhq1T8x4LRmjSyAgWAlnKvQ2IkW+Wa3g8XHXxbLIFWNuXAU
SeBFjzd2YLPkyCmS9Ss36fJHrqvhGxD1A1WZn0d2cHrEBaVA4M+pxAPUw5u4J04Y
mBOTThwIFIj7onttoZ9LJxVitCTylzb40NHOWxiYmleXYReIbtM1qlfZZAHb1TXh
eHFu1B+pfwUNRMrFqZSvpWCTioUlVVgsZftgONojeL6T8AQ92Uhu6kMUFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOp99b1CVg0XfKyTbwK5jJ1wvfVdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNm4zMXZVSldEUmQ4ckpOdkFybU1uWEM5OVYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBV3hEAwQA
V3mSAwQBXXtKMA0GCSqGSIb3DQEBCwUAA4IBAQAZcAbdfo0PACN7KhNBY7rN9+9d
ZOz+J8FUIIJVmtM63HALA2T/BRKdknxT1DnOzb0exEWdysRXJqo0aKnArf2jZOzV
A2aCrqYjULUXTeGx8TPLSWqTUvQb5ws4CBhba0wsoSp/1Xcz8+Q2UptEHRfCAMrR
7eIRwVXSxNICc8b74ZcPB2oOIPhDSPcb/Z317+4ksfXShmxMFiNhUXidmQZmUDjZ
RCQ8epl9Dz1fwKi26QMSL8xe6/bia3XGuV2QihSx6pwsBM1HPJkktdO8bW6ZoaUC
AYGXRLIQbr67nS4WTPF5w3iYdatUMzY88nSv2DRoZEYFvmCB+Eyp0W6cko00
-----END CERTIFICATE-----
Generated at Mon Jan 22 19:25:29 2024 by rpki-client on console-ams.rpki-client.org