Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AwKF7IcKMU55aRhfhHDNVbydREc.roa
File: AwKF7IcKMU55aRhfhHDNVbydREc.roa (raw, json)
Hash identifier: 4YE6BppToJxi43N6qZhfan0YXPDjKplWqdbE8MiNItQ=
Subject key identifier: 03:02:85:EC:87:0A:31:4E:79:69:18:5F:84:70:CD:55:BC:9D:44:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191D1FC5E6D1D14CD336F6ECD97539F2D9C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AwKF7IcKMU55aRhfhHDNVbydREc.roa
Signing time: Sun 08 Sep 2024 14:14:22 +0000
ROA not before: Sun 08 Sep 2024 14:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61254
IP address blocks: 87.121.221.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:fc:5e:6d:1d:14:cd:33:6f:6e:cd:97:53:9f:2d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 8 14:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=030285ec870a314e7969185f8470cd55bc9d4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:3b:e1:53:aa:86:a6:40:21:17:73:96:ba:
03:47:c2:37:02:0d:cd:8f:0e:85:92:78:0d:ad:21:
c9:8b:9f:2f:aa:30:de:c6:28:78:59:5a:c6:bb:0f:
b4:5c:bf:d0:e0:82:58:52:e5:a7:fe:fa:f0:a0:3c:
e5:7e:77:b1:42:4f:c2:3a:f3:9e:fa:c7:91:06:98:
08:db:8f:b2:39:03:73:43:2f:46:29:19:f1:7b:90:
5d:24:fa:8d:02:28:a5:c5:bc:51:64:0f:ea:02:dc:
f9:2d:e0:24:56:a2:92:11:3a:28:ac:02:60:91:65:
46:03:58:52:ed:67:18:e4:a6:9f:84:03:60:e3:3d:
44:9e:d6:9f:73:6e:3a:cb:d0:93:f3:6b:d3:d2:aa:
f9:42:1b:8f:12:88:97:ef:39:3a:76:96:35:68:a9:
bc:68:85:65:72:7d:11:d8:88:a1:c3:78:d2:8b:7f:
b8:97:96:94:b0:cc:60:67:29:a7:fd:d5:8a:50:4f:
b3:29:f4:62:2f:6e:01:0a:ae:91:02:44:40:42:e9:
cd:8b:af:99:bb:3b:4f:b2:ba:63:02:f7:46:ac:b5:
11:2b:d2:39:8c:f6:61:0d:25:98:93:9b:bd:5d:03:
d5:35:70:2c:97:35:3e:56:28:3f:32:32:21:d7:66:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:85:EC:87:0A:31:4E:79:69:18:5F:84:70:CD:55:BC:9D:44:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AwKF7IcKMU55aRhfhHDNVbydREc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.221.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1f:2b:4d:c6:27:fd:92:58:24:ed:26:e0:b9:b9:45:57:d8:
d4:9f:cc:bc:9c:eb:58:05:fc:d8:2a:b1:ce:4b:4b:78:f0:99:
57:96:a5:16:21:fb:46:3b:b0:ea:be:4f:c2:f7:88:2f:a2:4f:
29:89:74:6a:a2:4e:49:a6:40:73:3c:c7:33:b4:7c:f4:fc:15:
d1:25:ae:c4:e9:14:13:9b:67:c1:f4:fb:ea:30:73:37:f2:17:
bb:64:4e:74:e6:20:d6:79:96:87:02:c2:d7:3d:18:f6:87:8b:
4a:57:1a:4a:e2:29:51:67:6d:ff:4e:3d:1a:e0:af:08:56:b4:
7c:27:c4:af:79:55:44:f7:11:2d:5e:60:c6:b6:58:13:59:17:
2e:21:ae:70:f1:91:94:9b:c9:77:39:17:c5:b1:32:43:7d:e8:
9b:ce:9e:a4:ae:c3:71:9d:e9:66:8c:f4:e8:5d:9f:b2:36:9f:
27:a2:cb:78:3f:68:95:8d:81:aa:7a:45:fb:ce:76:7e:c9:67:
8c:ea:0f:e2:6a:ac:bc:e6:a5:bc:e7:d4:67:77:7c:f4:e6:f0:
1d:15:ef:b2:b9:27:a6:96:d2:40:6b:ee:f4:51:d5:ef:74:a5:
1d:1e:14:27:8d:20:55:88:38:8b:0f:78:ef:fb:83:d4:83:8f:
24:c3:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 17:14:22 2024 by rpki-client on console-ams.rpki-client.org