Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BSc0VCuCwKYl4RDppVg_-1yy5vI.roa
File: BSc0VCuCwKYl4RDppVg_-1yy5vI.roa (raw, json)
Hash identifier: 6lyelwyEdRJJfrR26fr7kZ0vJsd0MEVoPu3lK4dL8gU=
Subject key identifier: 05:27:34:54:2B:82:C0:A6:25:E1:10:E9:A5:58:3F:FB:5C:B2:E6:F2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCFA53B23BEDDF1FC4F8A4C67FBE62
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BSc0VCuCwKYl4RDppVg_-1yy5vI.roa
Signing time: Tue 02 Jan 2024 06:29:34 +0000
ROA not before: Tue 02 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199759
IP address blocks: 87.120.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:fa:53:b2:3b:ed:df:1f:c4:f8:a4:c6:7f:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=052734542b82c0a625e110e9a5583ffb5cb2e6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:0f:83:83:07:53:0f:da:32:ac:58:55:bf:
17:6a:29:c5:1c:b2:c4:e3:b7:1e:ba:89:eb:3d:fb:
06:dd:4a:41:bf:db:ca:0f:db:d0:cd:93:0a:f5:d7:
ec:86:ea:21:2a:e7:a1:a6:ed:bd:a7:5a:25:38:9c:
0a:41:0d:4a:84:f2:f8:d4:1d:a8:23:3d:c6:15:ad:
2d:70:3f:68:17:36:21:a6:0f:a6:65:19:3a:d1:4d:
4e:37:45:98:e3:42:a3:d9:9d:eb:78:b5:00:7a:08:
cd:32:10:16:72:30:f2:e9:9d:48:f4:de:28:45:05:
29:7c:c9:45:0a:bb:ec:bd:8a:44:3a:69:68:90:d6:
68:94:ee:96:90:b8:64:9d:8e:ae:37:77:1f:1c:68:
5c:96:bf:73:ec:9f:1f:1c:89:1e:85:1f:3c:63:87:
86:e4:27:32:ac:a3:22:97:b7:9f:1b:b6:91:13:d6:
4a:14:e4:03:94:65:a8:82:1b:31:9e:52:94:53:44:
5f:e1:d9:34:de:ff:48:56:b7:be:71:ed:9e:a4:d9:
c1:76:d8:2a:42:75:bb:29:96:4b:2b:71:b6:c3:c8:
95:76:75:46:dd:36:5a:ad:fb:ec:41:5d:16:9f:bf:
ef:97:dc:11:86:8c:d0:6b:23:b2:75:2a:28:70:8c:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:34:54:2B:82:C0:A6:25:E1:10:E9:A5:58:3F:FB:5C:B2:E6:F2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BSc0VCuCwKYl4RDppVg_-1yy5vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.143.0/24
Signature Algorithm: sha256WithRSAEncryption
32:78:6d:72:ea:46:4a:a1:1c:17:05:b7:3d:ba:70:76:f7:d4:
ac:1f:da:b0:6e:8a:87:7a:86:c5:12:16:38:5b:b8:0d:33:c4:
60:ba:12:af:af:35:68:74:9f:53:c6:b4:84:bd:10:ad:4e:e1:
65:ed:da:d8:19:13:f8:c6:4e:8b:9e:e6:a9:69:4f:06:6e:09:
38:a1:d2:cb:b8:e5:6e:00:64:5c:f3:83:3b:9d:fa:8f:55:92:
00:36:8e:d0:b1:7e:6f:c2:b5:53:aa:7e:1e:b9:af:62:76:57:
67:b1:d9:09:62:31:6f:25:88:3b:3b:01:c1:f9:06:55:73:44:
08:ad:12:0a:37:42:9e:85:08:ec:45:db:84:ae:02:4a:4e:2d:
cd:5a:3c:b4:b2:a3:df:d6:9a:60:42:4c:0a:cb:19:58:09:0c:
3a:8f:d6:38:0b:8f:09:cc:0b:7c:4d:ef:0f:55:c4:c0:0e:9e:
25:65:79:e2:1a:77:ad:a3:d9:74:2e:e7:b8:d2:34:98:34:dd:
af:2f:f9:c8:14:ab:bb:43:c5:21:d5:65:15:c7:0e:ca:bb:bb:
28:6c:1b:c4:ed:c4:65:61:d8:89:df:9f:b8:37:23:59:62:38:
68:b1:c9:92:c9:2e:1a:39:1f:ca:73:0e:4b:8e:5d:a6:be:e3:
5c:9a:82:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3PpTsjvt3x/E+KTGf75iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTI3MzQ1NDJiODJjMGE2MjVlMTEwZTlhNTU4M2ZmYjVjYjJlNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPQPg4MHUw/aMqxYVb8XainFHLLE
47ceuonrPfsG3UpBv9vKD9vQzZMK9dfshuohKuehpu29p1olOJwKQQ1KhPL41B2o
Iz3GFa0tcD9oFzYhpg+mZRk60U1ON0WY40Kj2Z3reLUAegjNMhAWcjDy6Z1I9N4o
RQUpfMlFCrvsvYpEOmlokNZolO6WkLhknY6uN3cfHGhclr9z7J8fHIkehR88Y4eG
5CcyrKMil7efG7aRE9ZKFOQDlGWoghsxnlKUU0Rf4dk03v9IVre+ce2epNnBdtgq
QnW7KZZLK3G2w8iVdnVG3TZarfvsQV0Wn7/vl9wRhozQayOydSoocIz7wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAUnNFQrgsCmJeEQ6aVYP/tcsubyMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQlNjMFZDdUN3S1lsNFJEcHBWZ18tMXl5NXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3iPMA0G
CSqGSIb3DQEBCwUAA4IBAQAyeG1y6kZKoRwXBbc9unB299SsH9qwboqHeobFEhY4
W7gNM8RguhKvrzVodJ9TxrSEvRCtTuFl7drYGRP4xk6LnuapaU8Gbgk4odLLuOVu
AGRc84M7nfqPVZIANo7QsX5vwrVTqn4eua9idldnsdkJYjFvJYg7OwHB+QZVc0QI
rRIKN0KehQjsRduErgJKTi3NWjy0sqPf1ppgQkwKyxlYCQw6j9Y4C48JzAt8Te8P
VcTADp4lZXniGneto9l0Lue40jSYNN2vL/nIFKu7Q8Uh1WUVxw7Ku7sobBvE7cRl
YdiJ35+4NyNZYjhoscmSyS4aOR/Kcw5Ljl2mvuNcmoJ6
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:21 2025 by rpki-client