Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78WdOBw7lomTurM6JvypXdCBeYY.roa
File: 78WdOBw7lomTurM6JvypXdCBeYY.roa (raw, json)
Hash identifier: EYN0DM8CXWOGfRR8xQ3mVA5IZPVXVHNAVDOKK0m+K1A=
Subject key identifier: EF:C5:9D:38:1C:3B:96:89:93:BA:B3:3A:26:FC:A9:5D:D0:81:79:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1F42D3431A4FBC54E5FE5709D9EC2579
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78WdOBw7lomTurM6JvypXdCBeYY.roa
Signing time: Thu 30 Nov 2023 08:05:22 +0000
ROA not before: Thu 30 Nov 2023 08:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:42:d3:43:1a:4f:bc:54:e5:fe:57:09:d9:ec:25:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 30 08:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efc59d381c3b968993bab33a26fca95dd0817986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:b2:a4:11:e5:67:33:b6:46:8e:24:95:9e:
a1:e7:74:57:78:a6:a4:f3:49:ba:b4:72:d4:22:80:
fa:2f:08:50:1d:fb:98:df:2f:01:c7:47:22:5a:db:
37:e3:c8:88:04:22:25:4d:d7:90:1d:8c:a3:a8:07:
55:2a:e3:1b:78:e9:4d:2e:f1:de:29:fe:52:9e:b2:
14:2e:e4:51:1f:e1:71:31:75:4a:fe:d0:51:f2:a4:
f2:91:5d:81:47:f2:59:de:02:b8:05:29:38:4f:fa:
91:5a:35:12:ac:3d:63:2a:54:fc:68:71:0a:25:6a:
40:98:9a:a6:1d:e4:5f:4c:45:3e:63:99:71:a6:e4:
0d:91:60:c2:66:73:86:86:94:5a:59:8f:f2:53:91:
5a:38:60:2e:32:66:ef:7e:a6:5a:50:e5:dd:41:87:
8d:40:0d:15:81:9b:b5:ea:8a:8d:ee:93:15:47:f6:
c5:c5:23:5e:49:3f:dd:19:9c:c1:4b:22:2e:4c:99:
71:66:39:c2:37:4f:ea:8a:df:e0:51:e5:15:b5:df:
c7:e0:40:d7:55:27:1b:2f:1e:65:9d:50:5b:a5:6a:
23:87:8a:be:e0:95:af:95:33:2e:83:ec:a8:7f:82:
d4:bc:9e:97:54:ff:93:c4:da:10:77:fa:d2:b4:6c:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C5:9D:38:1C:3B:96:89:93:BA:B3:3A:26:FC:A9:5D:D0:81:79:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78WdOBw7lomTurM6JvypXdCBeYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f7:28:2d:f0:68:66:d8:85:c9:d2:4e:25:64:64:6d:34:78:
db:e6:f9:4b:14:08:aa:f4:1d:6c:4c:23:d5:fd:55:07:96:fa:
66:37:76:32:f7:ff:34:d3:50:f1:01:d6:d4:b9:5d:89:b1:fa:
f5:d2:66:4a:16:2d:d4:47:52:a8:dd:22:bd:39:d1:85:82:29:
7a:a4:07:35:a5:ff:84:c3:58:d7:0c:e4:be:f7:f5:41:09:34:
c0:f5:74:66:fe:15:bc:ed:4a:7e:ca:87:d2:73:72:f8:93:92:
5c:db:0a:7b:48:fc:cc:1a:0d:ae:80:f1:10:48:86:61:e8:48:
a5:9d:25:29:63:87:f6:4e:85:b1:7f:db:f5:9e:1e:3f:02:ed:
1a:06:dc:89:fd:bb:c6:c9:4a:ea:62:21:c5:43:0c:6f:83:7c:
ff:b5:c4:3a:ae:c6:f6:48:84:59:6f:0a:bd:46:8b:55:7f:4a:
52:e4:bf:44:45:05:e6:b7:4c:79:2a:77:99:aa:27:6d:a8:06:
af:b7:b7:2e:e1:66:dc:6b:5f:7f:e2:ff:77:de:33:95:f5:ba:
bf:d0:c3:c4:c5:dd:f1:71:da:40:17:67:98:90:8e:91:bb:b1:
76:f1:10:a6:13:42:1d:9c:4c:b1:97:21:2f:3a:bc:3d:d0:54:
46:e3:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org