Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Av39YeZwbyQL1Tyujlg6RL-3lLA.roa
File: Av39YeZwbyQL1Tyujlg6RL-3lLA.roa (raw, json)
Hash identifier: 4EsjrsBLSLmhKOnVnxsKn30Ha3qyYVhyhNKLiq+YxUg=
Subject key identifier: 02:FD:FD:61:E6:70:6F:24:0B:D5:3C:AE:8E:58:3A:44:BF:B7:94:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BFB11AED400BB330357428F347E7E70DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Av39YeZwbyQL1Tyujlg6RL-3lLA.roa
Signing time: Thu 23 Nov 2023 07:25:21 +0000
ROA not before: Thu 23 Nov 2023 07:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216156
IP address blocks: 87.121.84.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:11:ae:d4:00:bb:33:03:57:42:8f:34:7e:7e:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 23 07:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02fdfd61e6706f240bd53cae8e583a44bfb794b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:2c:3a:64:e7:b9:a2:45:85:cb:1f:d8:3b:
fd:da:94:9c:c2:60:8f:14:d5:08:61:39:cc:d4:ba:
83:6d:bf:a2:dc:4a:85:29:81:54:e2:bc:ea:d2:c5:
1a:a8:48:68:3d:63:b3:8f:77:93:66:7b:e0:bf:42:
c9:11:3c:34:be:01:9d:89:df:39:22:0c:f7:07:fe:
8c:3d:2d:b7:3e:17:b2:ee:73:23:54:27:f5:de:0f:
9e:ea:87:de:2a:c8:3e:7c:69:22:05:ee:27:85:a6:
73:86:4f:95:42:a6:df:73:50:22:14:33:8d:ae:e6:
50:ad:a3:51:dc:2b:fc:f5:e8:be:21:3c:0a:7c:39:
42:a6:af:ac:71:bf:97:8b:01:95:bf:17:e8:cc:b2:
d2:5d:28:a7:6d:b6:cc:49:e5:44:98:b7:0c:5f:6a:
c4:cd:27:20:dd:8b:4d:90:a7:67:09:45:0a:99:c3:
9c:7b:4e:1e:d6:cb:32:e4:50:17:c6:b4:c9:f3:0d:
a3:2f:e8:53:97:36:d8:96:4c:1f:fa:43:33:57:37:
0c:1a:96:d3:d7:c9:97:5a:eb:cc:a9:c3:bc:9f:17:
e7:20:02:2c:29:d5:4d:39:95:fa:47:87:26:02:14:
01:04:f3:f2:8b:54:af:35:df:31:73:e3:86:fe:24:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:FD:61:E6:70:6F:24:0B:D5:3C:AE:8E:58:3A:44:BF:B7:94:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Av39YeZwbyQL1Tyujlg6RL-3lLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.84.0/23
Signature Algorithm: sha256WithRSAEncryption
14:99:a3:7e:a4:18:be:07:62:42:8d:31:96:33:ed:e6:03:6f:
c6:5e:c7:1d:7f:77:1d:72:65:f7:a0:7a:eb:dc:87:0e:47:3c:
b3:46:78:82:ed:6f:49:41:50:93:97:8b:b3:8d:f1:47:0a:53:
74:c6:80:f5:56:0c:f7:69:d5:dd:2b:1d:b3:0b:2a:12:75:ba:
3a:3d:a6:1b:f7:a2:69:62:ed:ac:03:c6:5a:93:ea:36:3c:92:
e2:54:ea:a6:d7:5e:a6:b9:66:34:3f:e2:92:7d:49:fc:7f:14:
6e:04:0a:d6:3e:3c:80:8c:f5:83:0e:07:3c:95:4f:7d:4b:76:
e7:c3:9d:d4:80:df:6b:88:5d:91:ff:38:c2:d3:b2:b2:1e:65:
27:78:b0:9a:23:f4:b9:5b:84:fc:61:be:f9:90:a2:b4:f4:1b:
c2:af:de:23:c4:9b:dd:77:69:90:21:1c:fa:31:10:1d:27:e3:
6b:51:72:cd:fa:1c:62:28:a4:3d:9d:0c:b3:b1:b3:aa:70:77:
8f:1c:51:20:db:4b:81:39:c7:ed:7a:7c:26:b4:40:fc:57:52:
f5:c1:f9:34:de:e0:39:a4:ab:cb:08:ff:9e:7f:9b:bc:10:58:
47:c3:4d:c2:6d:70:9a:36:42:7d:27:9e:4d:a6:ff:c2:eb:cf:
ae:8b:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 13:44:48 2023 by rpki-client on console-ams.rpki-client.org