Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7QZqiOagb2wyvuAn_NluDQkt7Yg.roa
File: 7QZqiOagb2wyvuAn_NluDQkt7Yg.roa (raw, json)
Hash identifier: SJZqIXu6fNqWjM0QCDF3zruBsmpUDhu+UydSNXGw0YE=
Subject key identifier: ED:06:6A:88:E6:A0:6F:6C:32:BE:E0:27:FC:D9:6E:0D:09:2D:ED:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC6258C2C9B74DF549E93A3C6D5A6C758
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7QZqiOagb2wyvuAn_NluDQkt7Yg.roa
Signing time: Mon 01 Jan 2024 17:49:58 +0000
ROA not before: Mon 01 Jan 2024 17:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26042
IP address blocks: 87.121.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:25:8c:2c:9b:74:df:54:9e:93:a3:c6:d5:a6:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 17:49:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed066a88e6a06f6c32bee027fcd96e0d092ded88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:84:8e:e3:a5:ad:6d:03:cd:07:40:3c:5e:
8b:ec:e0:fc:75:4a:62:c0:19:93:27:0c:1f:4a:a3:
b1:e7:3c:78:77:5c:65:74:cd:74:60:ad:7c:4e:68:
bc:c8:95:6b:2e:10:d6:4c:a8:aa:f8:31:99:23:e9:
19:17:ef:c4:22:3d:f1:2c:63:27:45:de:5e:df:f8:
16:42:69:c9:57:16:b2:d7:bb:2c:7c:5f:86:2d:ea:
a3:c9:c9:c0:61:0b:fe:88:9b:be:4f:33:7c:68:18:
c8:17:e9:a0:c3:f0:df:0f:60:a5:b6:04:6b:1c:08:
f9:8c:e3:1b:55:08:c4:1f:fb:95:b1:6f:e5:ed:a6:
51:7c:a1:f0:e9:7c:65:d2:ba:2b:32:ff:23:04:00:
dd:35:1c:30:2e:c7:b8:f8:b1:43:ac:de:55:47:39:
24:5e:fb:c4:0f:d7:0e:76:cd:06:8e:b1:2d:3c:42:
97:af:99:a2:e7:d1:93:7a:39:11:60:4f:ab:2c:a1:
9f:99:1f:20:22:20:0d:96:50:8c:da:d0:46:51:34:
f6:4a:cd:9c:ae:6d:24:6e:61:57:0f:d2:51:c0:99:
38:0c:eb:33:07:62:05:39:c8:93:ba:cc:af:e2:20:
62:75:64:02:bb:8d:c7:e7:50:a3:2d:a8:44:75:3e:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:6A:88:E6:A0:6F:6C:32:BE:E0:27:FC:D9:6E:0D:09:2D:ED:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7QZqiOagb2wyvuAn_NluDQkt7Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.146.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c2:b9:84:fb:1e:1b:05:c0:bc:77:7b:3e:e5:00:c1:5b:c4:
27:97:b1:89:cf:41:93:91:0d:e6:ed:47:8c:ee:7f:e3:f6:da:
5b:54:b0:6c:2b:48:a1:72:4f:81:0c:ed:c5:e4:49:17:7a:a6:
b6:30:4b:46:29:50:80:97:5f:b7:26:ef:b3:e3:08:f7:7e:ea:
ce:06:bb:94:4e:b3:5e:76:b0:5f:22:fc:03:0f:f0:d4:c1:6a:
3a:a8:37:52:87:28:ae:23:4a:4f:15:3d:5f:a9:62:f5:98:49:
90:24:de:13:9c:52:9a:a0:4b:5b:7d:79:fe:4f:58:ca:0f:e5:
d9:cb:07:a9:a2:04:18:ff:ab:e5:b3:be:02:10:f6:36:ae:42:
e4:cb:6c:65:7c:84:f9:25:64:63:25:db:6f:aa:b4:f1:cf:9b:
93:d3:b3:b7:5a:da:41:8e:9b:ea:54:18:35:9f:51:9f:07:11:
30:56:e0:8f:5e:7d:86:e6:fe:fd:76:ef:d7:51:2f:4f:a3:8b:
27:76:86:cd:8c:ca:2b:02:0a:20:db:09:41:d5:37:e7:7c:13:
b6:f6:3c:ea:49:f5:9d:e1:7a:fa:89:64:80:03:2c:b1:61:00:
77:b7:aa:a0:9a:d2:ba:97:a7:76:31:b7:c0:05:14:cf:ee:f2:
5a:bc:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org