Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/75c1f0UogoZRxYF1wWJisOQFmGw.roa
File: 75c1f0UogoZRxYF1wWJisOQFmGw.roa (raw, json)
Hash identifier: jWoCYP0tVQpTbKA29BAwVjW4PnjtUiqsRJpcCpwlfe0=
Subject key identifier: EF:97:35:7F:45:28:82:86:51:C5:81:75:C1:62:62:B0:E4:05:98:6C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01938BEC780BBB46443A387D5DB6F9076D23
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/75c1f0UogoZRxYF1wWJisOQFmGw.roa
Signing time: Tue 03 Dec 2024 09:49:10 +0000
ROA not before: Tue 03 Dec 2024 09:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216181
IP address blocks: 87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:ec:78:0b:bb:46:44:3a:38:7d:5d:b6:f9:07:6d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 3 09:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef97357f4528828651c58175c16262b0e405986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:9b:e3:61:c2:06:6e:3b:71:08:23:00:92:
20:3b:d9:8f:ad:6d:d9:6d:69:1c:ba:0a:8c:2c:b0:
e8:d9:73:74:6a:1d:b3:a3:40:54:d1:06:b3:5b:e8:
48:88:9c:fb:23:cf:3f:c2:15:f8:db:65:8c:4e:e6:
de:9d:15:8d:8d:0b:0e:c9:c8:61:23:b3:27:54:3a:
03:6e:1a:7e:e7:0c:17:fc:14:a5:b1:35:de:b0:37:
d1:6b:31:6f:37:09:96:f9:0f:7d:99:38:3f:dd:93:
e8:38:e7:ea:51:1c:94:fa:87:d1:82:60:ff:9f:87:
db:1d:97:0c:28:8d:7f:61:67:5f:7b:60:8a:fa:17:
cd:8f:6d:c2:86:23:71:c5:b1:8c:87:cb:05:23:ae:
c4:96:e7:ba:10:cf:3e:c4:3d:c7:38:ae:eb:4d:6d:
40:66:e2:8c:24:16:a5:cc:8f:25:4a:fb:b5:92:f4:
84:21:e5:fc:3b:e5:e2:32:0a:29:54:ed:4b:83:b1:
99:76:ef:6b:86:18:3f:01:e2:2e:67:d8:47:25:ff:
db:11:18:72:7a:8c:d5:cb:93:0f:48:ce:3d:29:2f:
42:99:02:75:19:65:c0:d2:4e:ba:dc:b0:a6:d9:47:
af:50:86:7b:14:b0:7a:91:88:ba:04:b2:23:02:25:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:35:7F:45:28:82:86:51:C5:81:75:C1:62:62:B0:E4:05:98:6C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/75c1f0UogoZRxYF1wWJisOQFmGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2e:d2:38:58:6d:5c:92:a0:a8:42:88:0e:f1:5a:61:1b:c3:
c2:dd:e2:bb:b0:37:64:ba:b8:84:1e:41:12:93:4e:8d:9a:03:
b3:d7:5d:e9:4b:02:43:83:7b:f2:ca:fc:89:0c:b6:d1:24:55:
54:e6:f6:51:6d:06:cf:11:0c:c0:c8:b7:88:de:3e:ae:6a:1d:
66:73:19:ba:cb:9d:d5:70:81:28:25:f4:ed:57:b5:e1:74:8e:
3d:c9:20:93:17:f4:0b:8f:6b:b1:7a:c4:92:5d:a5:5f:58:1e:
17:ce:79:b0:0d:6f:74:61:e5:9c:42:41:ea:2d:4c:b3:5f:d4:
d5:f7:c5:8f:28:2b:9b:d0:fd:2e:46:06:b6:8e:2e:5f:16:48:
f9:8b:d6:de:9f:c5:fb:5c:98:97:85:a3:96:95:af:ff:ab:da:
0d:cf:54:bf:15:e3:57:12:0e:83:20:47:97:b7:4b:a0:7d:82:
4c:3f:d6:dd:0c:0d:cd:01:a3:8e:ee:c2:e6:a1:7d:14:68:0f:
38:23:b5:f2:b5:db:e0:a2:49:4d:b4:e5:6e:b9:93:23:aa:e2:
6b:ea:33:a7:0d:33:ca:2d:d5:c9:08:4c:a8:95:6a:61:d9:dc:
44:66:1d:c8:d5:74:fa:5d:2c:b9:4d:9b:1c:28:0d:1d:99:03:
e4:1f:f1:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOL7HgLu0ZEOjh9Xbb5B20jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjAzMDk0OTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk3MzU3ZjQ1Mjg4Mjg2NTFjNTgxNzVjMTYyNjJiMGU0MDU5ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NSb42HCBm47cQgjAJIgO9mPrW3Z
bWkcugqMLLDo2XN0ah2zo0BU0QazW+hIiJz7I88/whX422WMTubenRWNjQsOychh
I7MnVDoDbhp+5wwX/BSlsTXesDfRazFvNwmW+Q99mTg/3ZPoOOfqURyU+ofRgmD/
n4fbHZcMKI1/YWdfe2CK+hfNj23ChiNxxbGMh8sFI67Elue6EM8+xD3HOK7rTW1A
ZuKMJBalzI8lSvu1kvSEIeX8O+XiMgopVO1Lg7GZdu9rhhg/AeIuZ9hHJf/bERhy
eozVy5MPSM49KS9CmQJ1GWXA0k663LCm2UevUIZ7FLB6kYi6BLIjAiVpuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+XNX9FKIKGUcWBdcFiYrDkBZhsMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNzVjMWYwVW9nb1pSeFlGMXdXSmlzT1FGbUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ncMA0G
CSqGSIb3DQEBCwUAA4IBAQCWLtI4WG1ckqCoQogO8VphG8PC3eK7sDdkuriEHkES
k06NmgOz113pSwJDg3vyyvyJDLbRJFVU5vZRbQbPEQzAyLeI3j6uah1mcxm6y53V
cIEoJfTtV7XhdI49ySCTF/QLj2uxesSSXaVfWB4XznmwDW90YeWcQkHqLUyzX9TV
98WPKCub0P0uRga2ji5fFkj5i9ben8X7XJiXhaOWla//q9oNz1S/FeNXEg6DIEeX
t0ugfYJMP9bdDA3NAaOO7sLmoX0UaA84I7XytdvgoklNtOVuuZMjquJr6jOnDTPK
LdXJCEyolWph2dxEZh3I1XT6XSy5TZscKA0dmQPkH/FF
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:25:36 2025 by rpki-client