Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dnv29XFvo_qpPWXxx9SHCEjwhv0.roa
File: Dnv29XFvo_qpPWXxx9SHCEjwhv0.roa (raw, json)
Hash identifier: oSgsw2v7nRVGKjkzmd8a8BPCB7thlALuItsoE1m5C/Q=
Subject key identifier: 0E:7B:F6:F5:71:6F:A3:FA:A9:3D:65:F1:C7:D4:87:08:48:F0:86:FD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190647C8162625E56F2647290B25D83ACBE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dnv29XFvo_qpPWXxx9SHCEjwhv0.roa
Signing time: Sat 29 Jun 2024 14:53:19 +0000
ROA not before: Sat 29 Jun 2024 14:53:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 87.121.86.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:7c:81:62:62:5e:56:f2:64:72:90:b2:5d:83:ac:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 29 14:53:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e7bf6f5716fa3faa93d65f1c7d4870848f086fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:b2:eb:6e:f3:c2:2f:95:c6:67:20:75:7a:
93:6b:2d:77:f4:50:05:ab:80:e5:74:02:f0:2c:ec:
dc:20:41:3c:32:88:54:e6:04:f5:5b:1c:50:18:15:
49:48:f1:b0:8e:6c:8b:30:55:b5:a8:97:b2:08:6d:
15:ab:75:bc:56:8e:06:0e:09:f2:4e:55:27:80:c8:
c6:e8:27:8b:18:4e:89:c5:25:4e:16:f2:a9:96:79:
be:4b:8a:19:46:b7:17:a5:3e:e9:39:b6:e9:6e:54:
0b:bc:2e:84:56:d9:9c:79:55:ff:f6:d7:c2:9a:ba:
86:7a:7b:cb:04:32:50:2a:53:37:66:89:0d:6e:9e:
f6:25:77:4b:e7:f6:da:18:af:12:4b:07:ef:6b:c9:
de:f4:fa:e5:cd:a5:6f:43:0b:ff:86:7c:27:6b:57:
8a:ed:52:9b:ff:ab:63:54:40:ad:73:15:03:b7:0e:
21:53:38:30:3c:3b:32:1d:a7:62:83:6f:02:7c:ca:
39:f6:ed:fc:16:e3:f6:48:11:ff:54:e5:c1:62:7c:
ca:05:1e:35:47:8e:b9:9e:f7:65:55:02:57:71:2c:
67:e5:34:e7:75:e6:6c:be:e0:0e:0e:bb:de:c8:18:
9e:13:2f:d3:6f:ee:fe:6d:28:30:ec:b8:c6:7d:1d:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7B:F6:F5:71:6F:A3:FA:A9:3D:65:F1:C7:D4:87:08:48:F0:86:FD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dnv29XFvo_qpPWXxx9SHCEjwhv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.86.0/24
178.215.227.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1c:7d:f6:66:31:fa:39:12:71:9d:c5:40:60:af:20:59:45:
b2:21:9d:ec:31:ba:2a:eb:c4:1e:52:e3:9e:25:df:4f:82:9f:
be:a9:a1:20:7c:14:b1:73:06:9b:ae:68:ce:c2:61:ff:44:f3:
80:7b:b0:c0:da:56:18:d8:4e:bd:dd:89:ff:b8:a8:57:90:73:
93:dc:81:d3:55:bc:fb:04:d2:3c:83:50:9a:da:ff:80:5f:e3:
e8:33:9a:61:a9:80:7e:7e:3b:d3:0f:f3:d6:1e:d2:d5:56:77:
c0:cc:d6:09:16:8e:bb:35:d7:d3:c3:e5:8e:8a:67:de:15:89:
b9:6b:4e:11:c0:3f:bf:0e:63:3d:13:57:44:54:d2:4e:23:c9:
21:cc:f5:da:ad:b3:8e:30:c7:70:02:4e:56:49:44:c3:a5:fd:
1c:84:eb:e3:4d:8e:84:07:ad:2c:ca:62:45:f3:27:4f:40:91:
78:3b:76:87:bc:39:5f:f4:39:0b:e3:18:92:4e:ba:27:2e:90:
37:41:16:3e:8f:34:bb:c2:5e:8d:05:b9:c0:ab:42:ba:11:31:
6b:bd:e8:d6:23:2a:f5:18:04:4a:a1:af:b9:85:80:bf:0b:b8:
fb:26:2f:9d:44:f1:2b:57:96:0d:7d:f3:c4:c4:57:4a:50:d8:
60:3b:8c:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBkfIFiYl5W8mRykLJdg6y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjI5MTQ1MzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTdiZjZmNTcxNmZhM2ZhYTkzZDY1ZjFjN2Q0ODcwODQ4ZjA4NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Ky627zwi+VxmcgdXqTay139FAF
q4DldALwLOzcIEE8MohU5gT1WxxQGBVJSPGwjmyLMFW1qJeyCG0Vq3W8Vo4GDgny
TlUngMjG6CeLGE6JxSVOFvKplnm+S4oZRrcXpT7pObbpblQLvC6EVtmceVX/9tfC
mrqGenvLBDJQKlM3ZokNbp72JXdL5/baGK8SSwfva8ne9PrlzaVvQwv/hnwna1eK
7VKb/6tjVECtcxUDtw4hUzgwPDsyHadig28CfMo59u38FuP2SBH/VOXBYnzKBR41
R465nvdlVQJXcSxn5TTndeZsvuAODrveyBieEy/Tb+7+bSgw7LjGfR0wwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA579vVxb6P6qT1l8cfUhwhI8Ib9MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRG52MjlYRnZvX3FwUFdYeHg5U0hDRWp3aHYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3lWAwQA
stfjMA0GCSqGSIb3DQEBCwUAA4IBAQApHH32ZjH6ORJxncVAYK8gWUWyIZ3sMboq
68QeUuOeJd9Pgp++qaEgfBSxcwabrmjOwmH/RPOAe7DA2lYY2E693Yn/uKhXkHOT
3IHTVbz7BNI8g1Ca2v+AX+PoM5phqYB+fjvTD/PWHtLVVnfAzNYJFo67NdfTw+WO
imfeFYm5a04RwD+/DmM9E1dEVNJOI8khzPXarbOOMMdwAk5WSUTDpf0chOvjTY6E
B60symJF8ydPQJF4O3aHvDlf9DkL4xiSTronLpA3QRY+jzS7wl6NBbnAq0K6ETFr
vejWIyr1GARKoa+5hYC/C7j7Ji+dRPErV5YNffPExFdKUNhgO4wK
-----END CERTIFICATE-----
Generated at Tue Jul 16 15:47:46 2024 by rpki-client on console-fra.rpki-client.org