Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DbbIvhf-T2UIaosBW6jRJHAgo8M.roa
File: DbbIvhf-T2UIaosBW6jRJHAgo8M.roa (raw, json)
Hash identifier: bn/JD30yATIOK2l69nSJKuZM9PQtGLQmsusmXlMwxqw=
Subject key identifier: 0D:B6:C8:BE:17:FE:4F:65:08:6A:8B:01:5B:A8:D1:24:70:20:A3:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187DB5DB1AB7065F1CB9DDEACE86E7A7BED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DbbIvhf-T2UIaosBW6jRJHAgo8M.roa
Signing time: Tue 02 May 2023 07:29:23 +0000
ROA not before: Tue 02 May 2023 07:29:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 87.120.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 07:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:5d:b1:ab:70:65:f1:cb:9d:de:ac:e8:6e:7a:7b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 2 07:29:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0db6c8be17fe4f65086a8b015ba8d1247020a3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:8c:e7:19:c8:70:d7:dd:0e:da:f9:35:10:
44:81:4f:26:85:83:f1:dc:bc:95:f6:fd:ce:ef:fd:
1f:60:43:8f:e4:3e:02:44:62:53:a7:fb:cb:a5:d4:
80:e6:d5:16:8b:93:a7:45:4c:08:9e:da:07:c0:77:
81:3b:0c:0b:24:94:4d:02:c0:2d:93:d7:1b:a0:9f:
a4:7d:e9:44:9c:79:5f:3a:90:95:06:7e:2f:1c:00:
d6:82:d2:a1:a2:d5:b6:d2:38:4e:19:8f:b2:59:11:
e1:73:2d:6f:23:07:53:b1:9e:1d:9f:3b:23:f6:3a:
d5:f1:60:d2:d5:00:f8:ca:3a:6b:57:eb:bc:3a:a4:
2d:8e:4b:2e:93:dc:9f:ea:b3:06:38:d0:3c:7f:44:
45:49:ef:f3:d3:89:15:ae:7a:0f:5c:71:07:d2:4d:
54:9b:b2:05:c5:98:8c:86:52:c4:47:bb:f3:66:39:
d5:f4:0f:15:5f:71:15:cd:0b:a6:c2:4e:69:4f:31:
09:09:c3:fa:4a:07:33:46:e7:0d:97:f6:97:45:c2:
0d:03:89:d2:3c:db:1e:4d:db:81:6d:39:77:32:75:
be:d0:56:5f:0c:c9:4f:98:aa:e0:54:7d:be:7a:12:
22:85:03:0a:3c:ca:4e:6f:4d:87:e3:00:33:4a:e2:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:C8:BE:17:FE:4F:65:08:6A:8B:01:5B:A8:D1:24:70:20:A3:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DbbIvhf-T2UIaosBW6jRJHAgo8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a2:b3:79:0e:93:0a:94:95:64:b8:62:eb:76:d9:f2:7d:9b:
91:48:89:88:1f:32:bd:6e:b9:34:8c:05:49:70:5b:52:ac:39:
8c:f6:72:63:7b:eb:b4:d1:57:4d:97:5a:64:06:12:d4:af:7a:
f8:d8:c9:d9:c3:d6:a5:34:84:26:7a:7a:45:35:7e:0e:91:a7:
de:1c:f6:6f:0b:49:04:73:ca:b9:d1:10:63:f8:ee:d9:a8:b6:
cf:80:41:69:d9:30:bb:a2:be:49:fc:89:e2:d1:62:96:7a:30:
43:e3:ed:a8:b3:18:ad:65:0a:26:cd:64:56:0b:e5:c4:43:9c:
da:03:68:32:98:e7:c1:ae:26:65:20:09:7f:0f:08:7d:c0:b0:
de:96:6b:c7:ce:fc:a6:d6:d0:8f:c2:42:e4:10:e3:d8:a2:bf:
56:a0:b2:12:12:48:a5:d3:43:95:e7:bd:b5:f2:07:c5:73:46:
0c:f1:68:ea:5e:fd:aa:f0:c1:8e:d7:22:03:2c:f1:79:6d:f9:
8f:ae:c4:50:94:99:4a:22:20:45:dc:4e:8a:7e:9b:33:8e:1e:
29:92:d6:e9:1c:25:d2:aa:cc:6e:db:cc:cc:e5:bc:43:50:3d:
4a:37:cf:18:03:08:4e:94:e8:0b:c9:f0:15:8d:31:59:6b:63:
2b:ca:6e:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfbXbGrcGXxy53erOhuenvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNTAyMDcyOTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGI2YzhiZTE3ZmU0ZjY1MDg2YThiMDE1YmE4ZDEyNDcwMjBhM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JaM5xnIcNfdDtr5NRBEgU8mhYPx
3LyV9v3O7/0fYEOP5D4CRGJTp/vLpdSA5tUWi5OnRUwIntoHwHeBOwwLJJRNAsAt
k9cboJ+kfelEnHlfOpCVBn4vHADWgtKhotW20jhOGY+yWRHhcy1vIwdTsZ4dnzsj
9jrV8WDS1QD4yjprV+u8OqQtjksuk9yf6rMGONA8f0RFSe/z04kVrnoPXHEH0k1U
m7IFxZiMhlLER7vzZjnV9A8VX3EVzQumwk5pTzEJCcP6SgczRucNl/aXRcINA4nS
PNseTduBbTl3MnW+0FZfDMlPmKrgVH2+ehIihQMKPMpOb02H4wAzSuLqsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA22yL4X/k9lCGqLAVuo0SRwIKPDMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRGJiSXZoZi1UMlVJYW9zQlc2alJKSEFnbzhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hEMA0G
CSqGSIb3DQEBCwUAA4IBAQCRorN5DpMKlJVkuGLrdtnyfZuRSImIHzK9brk0jAVJ
cFtSrDmM9nJje+u00VdNl1pkBhLUr3r42MnZw9alNIQmenpFNX4OkafeHPZvC0kE
c8q50RBj+O7ZqLbPgEFp2TC7or5J/Ini0WKWejBD4+2osxitZQomzWRWC+XEQ5za
A2gymOfBriZlIAl/Dwh9wLDelmvHzvym1tCPwkLkEOPYor9WoLISEkil00OV5721
8gfFc0YM8WjqXv2q8MGO1yIDLPF5bfmPrsRQlJlKIiBF3E6Kfpszjh4pktbpHCXS
qsxu28zM5bxDUD1KN88YAwhOlOgLyfAVjTFZa2Mrym4s
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:01 2024 by rpki-client on console-fra.rpki-client.org