Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7h-pKK33F5Z-0b12WTQzj7yO-R4.roa
File: 7h-pKK33F5Z-0b12WTQzj7yO-R4.roa (raw, json)
Hash identifier: ujdN419/IZOndo1wM1qhJ7r3XTGtsKUrOIDtoUJl9RI=
Subject key identifier: EE:1F:A9:28:AD:F7:17:96:7E:D1:BD:76:59:34:33:8F:BC:8E:F9:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187DB624572FB620181650ABFE6FD9F3A4C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7h-pKK33F5Z-0b12WTQzj7yO-R4.roa
Signing time: Tue 02 May 2023 07:34:23 +0000
ROA not before: Tue 02 May 2023 07:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 87.120.68.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:62:45:72:fb:62:01:81:65:0a:bf:e6:fd:9f:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 2 07:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee1fa928adf717967ed1bd765934338fbc8ef91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:09:2a:51:9b:51:54:e8:da:75:af:2f:77:
0c:6b:dd:0c:0b:1f:67:9a:77:e2:28:59:27:9e:95:
ae:f3:1e:f4:91:98:d4:36:35:0b:59:30:0b:42:e8:
22:3c:89:b1:1c:49:63:c7:8f:8a:6c:66:0a:03:b5:
29:b3:a7:99:bf:ee:a6:c8:ab:39:3f:38:ef:3c:b8:
7b:4a:6a:a4:6b:8d:7b:8c:88:1a:c6:dc:db:bf:c1:
e9:0e:6a:64:5b:74:33:0b:38:47:4e:a4:cc:29:e9:
a0:ae:5e:83:cd:e9:1b:10:70:41:bb:01:2b:39:64:
13:b3:be:ad:b8:46:33:96:60:b9:14:63:21:92:fc:
fe:8e:69:73:a8:0c:7c:75:52:64:7a:01:1e:e9:12:
19:6e:1b:7a:29:4f:21:03:1e:89:41:1d:92:18:ee:
08:53:36:48:d4:8f:6c:9d:24:3c:97:cc:95:27:2e:
b8:ef:52:b8:9b:d6:9d:8c:8c:ad:ce:01:9a:cc:e6:
c1:10:33:28:af:c6:0e:ec:b1:cb:5d:0d:2a:a4:52:
c2:a8:97:a2:59:e7:98:29:83:81:78:86:a4:2a:b6:
bc:94:ad:c8:3c:14:19:6b:3c:2b:bf:ed:2e:ac:c4:
48:d2:48:c6:c2:77:73:05:48:30:cf:88:fc:12:7a:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:A9:28:AD:F7:17:96:7E:D1:BD:76:59:34:33:8F:BC:8E:F9:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7h-pKK33F5Z-0b12WTQzj7yO-R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:9f:b8:a5:bf:e4:6f:89:79:0c:bd:e3:07:70:95:62:6d:92:
62:ac:f9:07:1a:06:64:9e:c4:40:44:2c:95:d6:2a:78:45:d6:
6e:23:eb:8c:b2:36:3d:54:e4:be:37:22:3c:d3:9b:d8:a0:21:
4b:37:be:bd:89:ca:77:8e:dd:b1:1f:4a:a4:a6:8f:19:b2:30:
68:d5:ac:4a:39:a5:04:3d:e4:c3:39:21:8d:75:3c:e1:5a:7a:
be:f6:fc:10:b5:3b:59:1e:7f:ee:f8:64:43:b3:45:38:ab:25:
d5:56:67:44:ac:d7:f7:4b:a6:f2:53:90:3f:3f:1b:92:fe:2e:
a7:07:a7:13:6f:7e:bf:24:50:6f:b0:2a:4f:14:61:b2:2a:7a:
5e:c6:da:d3:1d:ac:d9:1d:2e:cc:a2:e0:3f:2b:64:73:9f:93:
32:55:6b:e4:07:98:dd:79:80:49:82:ea:76:27:c0:52:27:85:
c9:92:a5:78:90:81:57:fe:d9:77:c8:90:d6:e7:55:7e:e4:84:
03:56:e0:44:78:a1:cf:01:75:cd:97:47:d8:9c:d6:5e:08:99:
72:19:f1:8b:b6:31:f6:dc:6d:de:4c:b4:df:b1:12:72:0d:05:
f0:3c:69:47:0c:90:ed:8f:87:ca:d3:1f:9d:72:3b:f9:d9:4d:
b8:87:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 03:01:48 2023 by rpki-client on console-fra.rpki-client.org