Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7wm-RN0sYPqT_4akG-xARQRe6Yw.roa
File: 7wm-RN0sYPqT_4akG-xARQRe6Yw.roa (raw, json)
Hash identifier: 6M6GCokylnNNu8rTzdtR/FcPHQoOJPZf33S0o6rzg6U=
Subject key identifier: EF:09:BE:44:DD:2C:60:FA:93:FF:86:A4:1B:EC:40:45:04:5E:E9:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DA3AF99F1F51F33DC0ED1153C805
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7wm-RN0sYPqT_4akG-xARQRe6Yw.roa
Signing time: Sun 01 Jan 2023 13:25:04 +0000
ROA not before: Sun 01 Jan 2023 13:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25224
IP address blocks: 87.120.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:da:3a:f9:9f:1f:51:f3:3d:c0:ed:11:53:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef09be44dd2c60fa93ff86a41bec4045045ee98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:3b:98:e7:a6:63:fd:ca:4d:6b:f8:8c:60:
d6:c0:bd:56:19:fd:f5:88:a1:e5:0c:3d:01:46:67:
de:6e:42:62:e9:49:6a:74:fd:da:6a:5f:27:0d:69:
af:db:a0:16:b3:0d:6b:a9:3d:67:80:79:bb:96:6c:
8c:cf:c1:03:47:e7:65:a2:b9:15:0e:59:1c:db:c9:
90:e8:c3:90:8c:01:7e:3c:b0:08:25:28:32:a1:1d:
e7:31:7c:c4:f8:a1:32:63:8d:f7:69:f0:cf:41:8c:
13:30:9b:5b:6c:70:36:f1:7b:d6:29:0c:1f:e8:44:
30:77:a9:22:e5:bf:c1:6d:9a:24:44:f8:64:4b:fb:
22:53:0a:f8:4d:1d:f7:d3:19:dc:3b:7f:79:9f:ad:
26:04:fa:1f:95:6b:4a:ee:1b:48:d8:e6:69:c6:4e:
1d:ff:45:9b:af:a5:b7:7f:51:e6:cd:a7:d1:9c:b6:
10:98:23:1f:60:d6:08:2d:d3:65:ea:bd:43:53:76:
25:83:22:45:b0:d0:dc:d3:23:42:5b:bb:4a:60:7c:
ba:fb:10:2a:1e:27:ae:2c:65:64:eb:53:1c:38:2a:
01:2d:fa:45:95:fe:83:93:52:64:c2:a9:24:04:b4:
46:57:b5:c8:80:cd:55:cb:98:59:85:e3:a4:2e:81:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:09:BE:44:DD:2C:60:FA:93:FF:86:A4:1B:EC:40:45:04:5E:E9:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7wm-RN0sYPqT_4akG-xARQRe6Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.42.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ef:a9:4c:f7:f6:d3:96:11:4a:05:d2:c0:8a:d3:34:26:45:
2e:2e:1d:2d:17:21:c6:4b:76:96:51:c2:3f:9b:4b:10:d9:f0:
b1:5f:df:c5:f8:3b:0b:10:1a:75:e2:01:36:8e:a0:e1:f9:8d:
81:b0:45:b7:d8:d5:6c:e7:43:da:62:0a:c7:39:b4:7b:45:4c:
2f:87:8e:8c:c5:91:f4:4b:1e:b7:85:61:dd:94:fe:f1:80:55:
97:4b:3a:01:2a:d0:fb:21:e2:05:ac:aa:38:65:4e:ff:21:36:
67:9c:7f:7a:7a:31:1a:7e:0c:6f:0c:d6:08:ab:f0:a5:0a:19:
a7:1f:2f:c3:99:15:50:e6:e2:b5:9c:e6:f1:ec:a8:5d:d9:26:
51:9a:53:52:71:03:77:b9:35:31:b9:a5:a7:fd:5a:0d:8f:1a:
ad:ba:c2:9a:f9:81:64:43:a3:ac:62:72:db:8c:b4:2d:69:03:
c3:4c:16:2e:10:f3:75:32:07:34:f8:f3:b9:ed:de:e8:69:b9:
32:1d:75:c3:65:53:9c:02:c0:2d:3f:ee:19:28:5c:95:4d:9d:
14:90:8e:e7:e6:41:fa:29:cc:97:17:44:2d:87:e9:72:05:02:
ff:02:1d:ae:14:3b:0e:e6:f4:84:08:07:e6:ec:2d:79:11:ed:
1c:44:5a:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgdo6+Z8fUfM9wO0RU8gFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjA5YmU0NGRkMmM2MGZhOTNmZjg2YTQxYmVjNDA0NTA0NWVlOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOk7mOemY/3KTWv4jGDWwL1WGf31
iKHlDD0BRmfebkJi6UlqdP3aal8nDWmv26AWsw1rqT1ngHm7lmyMz8EDR+dlorkV
Dlkc28mQ6MOQjAF+PLAIJSgyoR3nMXzE+KEyY433afDPQYwTMJtbbHA28XvWKQwf
6EQwd6ki5b/BbZokRPhkS/siUwr4TR330xncO395n60mBPoflWtK7htI2OZpxk4d
/0Wbr6W3f1HmzafRnLYQmCMfYNYILdNl6r1DU3YlgyJFsNDc0yNCW7tKYHy6+xAq
HieuLGVk61McOCoBLfpFlf6Dk1JkwqkkBLRGV7XIgM1Vy5hZheOkLoHKfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8JvkTdLGD6k/+GpBvsQEUEXumMMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvN3dtLVJOMHNZUHFUXzRha0cteEFSUVJlNll3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gqMA0G
CSqGSIb3DQEBCwUAA4IBAQBz76lM9/bTlhFKBdLAitM0JkUuLh0tFyHGS3aWUcI/
m0sQ2fCxX9/F+DsLEBp14gE2jqDh+Y2BsEW32NVs50PaYgrHObR7RUwvh46MxZH0
Sx63hWHdlP7xgFWXSzoBKtD7IeIFrKo4ZU7/ITZnnH96ejEafgxvDNYIq/ClChmn
Hy/DmRVQ5uK1nObx7Khd2SZRmlNScQN3uTUxuaWn/VoNjxqtusKa+YFkQ6OsYnLb
jLQtaQPDTBYuEPN1Mgc0+PO57d7oabkyHXXDZVOcAsAtP+4ZKFyVTZ0UkI7n5kH6
KcyXF0Qth+lyBQL/Ah2uFDsO5vSECAfm7C15Ee0cRFpP
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:46 2024 by rpki-client on console-fra.rpki-client.org