Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9JlsY7bj1ooCeGnDTsX_N8_dPqE.roa
File: 9JlsY7bj1ooCeGnDTsX_N8_dPqE.roa (raw, json)
Hash identifier: mTEgQRlvBUYfJCVXZUzG+PAd/jsgmTkeHvHToeUgUCA=
Subject key identifier: F4:99:6C:63:B6:E3:D6:8A:02:78:69:C3:4E:C5:FF:37:CF:DD:3E:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B4EC8F939FF209DE8D52AA09EC9D0432
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9JlsY7bj1ooCeGnDTsX_N8_dPqE.roa
Signing time: Tue 13 Jun 2023 13:23:02 +0000
ROA not before: Tue 13 Jun 2023 13:23:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 87.121.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:ec:8f:93:9f:f2:09:de:8d:52:aa:09:ec:9d:04:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 13:23:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4996c63b6e3d68a027869c34ec5ff37cfdd3ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:d7:7d:03:3d:eb:8a:33:8b:34:fa:a8:79:
3c:19:4e:7f:07:19:5f:bc:28:89:06:57:6e:cb:81:
7b:2e:e2:2a:93:be:a8:df:e7:4b:1c:d2:f3:3a:05:
94:1e:d3:76:08:42:98:c3:38:71:9c:66:13:6d:21:
fa:e9:fe:db:07:77:09:00:e3:78:c3:28:4a:07:7b:
f8:45:f5:ce:6a:65:c6:64:80:5d:27:74:3b:64:bd:
e1:2b:ed:d5:a8:66:63:d8:16:a9:f6:a0:7b:7e:ff:
a1:db:94:d7:d0:dd:80:61:fe:b1:16:e6:28:15:52:
9b:b8:56:ce:7b:36:0e:ad:18:ad:5e:9e:37:17:c9:
87:6e:de:79:de:57:6c:5f:52:91:22:d4:5a:04:d9:
8f:d6:8e:b2:2f:3d:32:d0:73:a0:7d:4b:01:a5:50:
61:ac:85:85:fb:9e:18:df:2f:5a:1c:d0:4a:77:b8:
a0:ad:b4:ff:fe:5d:9c:d4:17:cb:2f:dc:35:8b:95:
06:87:1a:86:c4:b6:3b:ec:83:d7:b7:41:7d:0f:41:
61:4e:ad:87:15:cf:53:4d:89:09:1b:79:3b:3f:f7:
ba:df:2f:52:82:e0:8f:42:95:19:d0:e9:2f:2c:d2:
f3:58:8c:04:af:e8:93:ea:7b:25:9a:78:35:73:24:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:6C:63:B6:E3:D6:8A:02:78:69:C3:4E:C5:FF:37:CF:DD:3E:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9JlsY7bj1ooCeGnDTsX_N8_dPqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5a:f1:ad:0d:a4:8a:cc:71:90:9e:84:7a:83:ca:ac:4c:fc:
17:f3:e6:ba:79:a5:e9:16:b8:39:af:11:65:87:7b:5e:35:72:
62:b8:48:c0:86:b0:bb:d0:ff:04:8c:3a:f1:fb:14:44:af:fe:
f0:94:26:50:61:f5:be:88:fb:54:b1:38:9f:f8:d0:c8:51:5e:
70:c5:4b:38:c2:83:9e:e8:1b:12:04:7f:e1:3b:b8:c9:8d:3b:
b7:63:04:0b:cf:ee:8e:7e:fc:17:b6:8f:53:53:6a:0f:29:dd:
9b:7c:71:39:da:0f:4d:3b:4c:d4:2e:cb:03:0b:53:e6:b6:24:
1d:a5:74:bc:50:d8:48:b2:a4:7a:18:22:d6:90:30:05:47:41:
1b:4c:ed:6f:c3:ea:61:b0:64:a6:51:8a:c2:0f:0b:11:33:f8:
af:29:0c:a4:b8:ae:a8:cb:34:4f:21:5d:5b:7c:f3:e1:a7:96:
72:05:21:8c:5c:c8:65:63:dc:8a:18:92:37:be:db:1c:1a:76:
c3:73:06:94:fd:1a:27:88:1c:e2:9e:3a:3f:6d:8f:ee:1a:77:
c0:94:ac:73:32:94:3b:7b:98:43:d8:c4:39:1c:c5:db:73:37:
10:fc:8e:2d:b3:7d:6d:35:53:9e:83:21:d0:6b:e1:0c:3a:2f:
99:f8:5b:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi07I+Tn/IJ3o1SqgnsnQQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjEzMTMyMzAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDk5NmM2M2I2ZTNkNjhhMDI3ODY5YzM0ZWM1ZmYzN2NmZGQzZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9bXfQM964ozizT6qHk8GU5/Bxlf
vCiJBlduy4F7LuIqk76o3+dLHNLzOgWUHtN2CEKYwzhxnGYTbSH66f7bB3cJAON4
wyhKB3v4RfXOamXGZIBdJ3Q7ZL3hK+3VqGZj2Bap9qB7fv+h25TX0N2AYf6xFuYo
FVKbuFbOezYOrRitXp43F8mHbt553ldsX1KRItRaBNmP1o6yLz0y0HOgfUsBpVBh
rIWF+54Y3y9aHNBKd7igrbT//l2c1BfLL9w1i5UGhxqGxLY77IPXt0F9D0FhTq2H
Fc9TTYkJG3k7P/e63y9SguCPQpUZ0OkvLNLzWIwEr+iT6nslmng1cySXZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSZbGO249aKAnhpw07F/zfP3T6hMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOUpsc1k3Ymoxb29DZUduRFRzWF9OOF9kUHFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ktMA0G
CSqGSIb3DQEBCwUAA4IBAQBbWvGtDaSKzHGQnoR6g8qsTPwX8+a6eaXpFrg5rxFl
h3teNXJiuEjAhrC70P8EjDrx+xREr/7wlCZQYfW+iPtUsTif+NDIUV5wxUs4woOe
6BsSBH/hO7jJjTu3YwQLz+6OfvwXto9TU2oPKd2bfHE52g9NO0zULssDC1PmtiQd
pXS8UNhIsqR6GCLWkDAFR0EbTO1vw+phsGSmUYrCDwsRM/ivKQykuK6oyzRPIV1b
fPPhp5ZyBSGMXMhlY9yKGJI3vtscGnbDcwaU/RoniBzinjo/bY/uGnfAlKxzMpQ7
e5hD2MQ5HMXbczcQ/I4ts31tNVOegyHQa+EMOi+Z+FuX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-fra.rpki-client.org