Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8BacxW-Yqan-Dbxo--2XSHY6Vyo.roa
File: 8BacxW-Yqan-Dbxo--2XSHY6Vyo.roa (raw, json)
Hash identifier: npI6ZRuFOlRmo0TH3Yq8LNE8kkNAipsePZGlOi37yWw=
Subject key identifier: F0:16:9C:C5:6F:98:A9:A9:FE:0D:BC:68:FB:ED:97:48:76:3A:57:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01921019A4FE5245C452067A65EB17D79B54
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8BacxW-Yqan-Dbxo--2XSHY6Vyo.roa
Signing time: Fri 20 Sep 2024 15:42:49 +0000
ROA not before: Fri 20 Sep 2024 15:42:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 87.121.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 11:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:19:a4:fe:52:45:c4:52:06:7a:65:eb:17:d7:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 20 15:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0169cc56f98a9a9fe0dbc68fbed9748763a572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:2a:c2:d0:b8:be:e9:94:c7:b5:9d:98:e5:
cc:be:fe:9d:15:c6:bf:df:de:77:c0:17:b5:f1:ed:
e2:81:48:82:a3:b8:6d:0e:94:99:5c:21:43:ed:5e:
d8:7d:8a:93:66:9e:53:1d:12:55:86:f7:16:4d:31:
6c:c5:25:c2:a4:9d:1d:11:dd:c7:05:87:47:97:5b:
42:ce:b0:b2:9e:76:9b:45:ae:cc:3c:6d:4f:1e:13:
30:b1:97:11:8f:96:94:4b:9c:83:48:76:00:b0:23:
08:81:ec:53:ea:61:09:ae:ea:d5:33:29:a4:5c:64:
2f:5d:57:60:6c:4f:6a:c8:f7:03:cb:02:93:21:92:
b5:13:79:47:c1:e6:e0:a9:10:8c:27:05:83:97:66:
5d:3b:31:2e:a0:51:88:41:35:8d:72:bc:8e:96:ec:
c7:8a:33:1f:11:ba:ae:db:c9:f2:90:f6:54:7d:04:
de:45:ae:dc:d4:7f:ea:23:06:f6:38:ac:9e:96:1c:
f5:1c:8a:b7:e3:7a:bf:d5:ff:ab:31:7e:f7:7a:5e:
60:ef:12:c4:58:1a:66:7b:70:e7:e8:50:1e:6d:ea:
8e:a5:fa:97:cf:9c:cf:41:31:b7:cd:86:c5:7b:f2:
24:03:ef:cb:cd:fe:38:7b:e5:18:2b:45:9d:eb:39:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:9C:C5:6F:98:A9:A9:FE:0D:BC:68:FB:ED:97:48:76:3A:57:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8BacxW-Yqan-Dbxo--2XSHY6Vyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:92:3b:eb:cb:fc:c6:fc:6a:4c:e7:67:4b:38:d0:70:1c:f3:
b0:71:56:4d:fd:b1:fb:c1:20:04:6e:4f:80:10:c3:0e:8e:14:
b1:ed:f3:3a:fd:bf:59:63:27:f7:11:34:52:91:6c:a8:d6:de:
c6:0b:7a:f5:9f:99:33:8a:e3:f6:c3:87:2f:ba:fc:26:8d:75:
87:95:c9:1f:20:5d:13:2f:54:22:42:3f:ec:21:15:76:d4:10:
7c:23:0b:2c:0d:7a:44:44:e7:be:44:65:e6:4c:19:0e:e1:63:
84:8c:54:ec:73:25:93:d0:94:46:41:f8:77:60:c8:8a:8c:1d:
15:51:a6:19:00:74:28:74:41:a9:fd:f2:86:9c:ef:93:1d:cf:
cd:6d:ed:d2:b3:8a:f7:8d:a1:64:c8:4e:4a:22:39:64:f3:af:
05:5e:35:33:6f:08:db:d4:b0:9d:2f:8d:af:7b:64:fd:6e:6e:
b2:13:bd:7b:1a:68:8a:3c:b1:4b:9f:76:aa:67:9b:66:79:ee:
43:ec:3d:38:c5:8b:84:f8:65:3a:47:70:b2:1c:8a:0c:a1:26:
5d:bc:f0:4f:e3:cd:07:3d:10:e1:95:b7:88:0f:bd:26:3c:c7:
f1:58:b6:83:8c:5c:0c:4d:05:64:23:3f:5a:a2:58:c6:4c:3a:
ae:f8:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 13:43:43 2024 by rpki-client on console-ams.rpki-client.org