Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E6GbWcGZSw-EwXKQ7btjHXIfL8E.roa
File: E6GbWcGZSw-EwXKQ7btjHXIfL8E.roa (raw, json)
Hash identifier: GS06AO2JaTw5EUt4lrP3RRfwx6tEKHDL5nR0bN1l7CY=
Subject key identifier: 13:A1:9B:59:C1:99:4B:0F:84:C1:72:90:ED:BB:63:1D:72:1F:2F:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0567F18A87F252A7FF7E5065D49DAE46
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E6GbWcGZSw-EwXKQ7btjHXIfL8E.roa
Signing time: Mon 22 Apr 2024 10:44:09 +0000
ROA not before: Mon 22 Apr 2024 10:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
193.148.253.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:67:f1:8a:87:f2:52:a7:ff:7e:50:65:d4:9d:ae:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 22 10:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a19b59c1994b0f84c17290edbb631d721f2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:ff:7a:0d:9b:41:90:e4:68:ab:a9:9e:05:
47:b2:fb:ff:f1:bf:d4:9e:e1:c2:4e:46:43:64:3f:
76:55:18:e0:53:ee:38:e5:1a:cd:06:e4:b9:ab:b2:
70:db:bd:50:da:bc:bb:a1:db:69:58:3e:a8:37:9b:
72:4d:2e:3b:9e:8a:37:1c:ca:7d:b8:4f:cf:62:55:
3b:ac:5e:a8:cd:1b:56:33:70:06:07:2c:ba:06:b7:
86:b3:04:69:0c:34:de:6c:3b:6d:7e:fb:4b:ed:a6:
fc:b8:4a:aa:0c:82:86:45:de:cb:06:ab:7f:23:84:
60:7b:81:ac:72:9d:cd:ad:21:02:04:02:b1:4e:e2:
88:9b:56:6f:b9:0e:bc:1c:2b:b4:f0:de:9b:9c:e6:
e3:e3:f5:d7:76:a3:31:f8:5e:d4:cf:4e:1b:e7:e5:
76:20:a2:58:73:43:e5:76:1c:55:39:03:43:eb:3d:
50:8e:a2:31:09:a0:b2:ef:3a:ef:14:d0:1f:b1:aa:
1e:43:cb:e7:36:cf:4b:13:95:ee:b0:b4:85:ed:ba:
05:4a:20:de:56:ff:7a:e2:86:17:60:f2:d6:c7:d1:
35:49:ca:3a:c0:02:12:9e:17:52:0f:0a:33:73:90:
b1:c8:31:a3:5c:1e:30:0c:d1:e5:38:c7:cd:96:b6:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:9B:59:C1:99:4B:0F:84:C1:72:90:ED:BB:63:1D:72:1F:2F:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E6GbWcGZSw-EwXKQ7btjHXIfL8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/24
185.252.160.0/23
193.148.253.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ce:c2:49:da:eb:71:7e:0d:6e:76:dd:19:6b:c5:db:20:fe:
b7:1f:36:03:d1:1e:64:e0:78:b4:32:13:7b:04:21:fa:07:3b:
f6:6d:de:a4:f1:06:2d:93:2f:7e:37:e4:e4:c4:30:7d:51:7c:
40:50:82:e4:6f:59:98:91:56:7c:5b:6d:44:1c:46:d5:7d:cb:
05:c0:1d:60:76:b2:a6:c4:9d:80:57:99:4b:21:05:e5:6e:61:
e9:40:e9:4e:c9:e6:c0:4d:3f:43:89:4c:36:45:34:79:63:7f:
55:32:71:f8:de:4e:ba:3f:a5:a8:bc:32:93:2e:ba:d9:fc:49:
4a:6e:21:85:d4:35:86:d7:cd:f8:32:ba:9e:19:7e:a9:75:eb:
66:a4:8a:02:09:7b:7a:7b:ee:c0:ed:ba:ae:57:6e:59:02:25:
0e:37:27:bb:d2:9a:c8:8c:a2:90:dc:66:51:e2:8a:9b:aa:55:
f0:a2:a6:e4:ab:95:5d:4f:eb:43:7d:fd:e5:00:5c:ad:dd:70:
99:d0:2f:87:46:3a:07:13:0f:08:ea:cf:df:41:05:91:68:86:
10:17:5a:07:26:49:3d:e9:81:1d:e4:c4:c5:cb:9c:13:d2:88:
5c:a7:18:c0:87:b9:15:a8:11:21:29:28:80:7d:df:70:79:10:
b0:2d:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:27 2024 by rpki-client on console-ams.rpki-client.org