Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EXR_QpBAXL6WFmPqzFIvdKfzh7Q.roa
File: EXR_QpBAXL6WFmPqzFIvdKfzh7Q.roa (raw, json)
Hash identifier: rAs1NXxJxBfvr9s1BJggLs9BT8Ksu3NBZkpB4zOWiqU=
Subject key identifier: 11:74:7F:42:90:40:5C:BE:96:16:63:EA:CC:52:2F:74:A7:F3:87:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FBEB315C551136C03AA86608C1ECB9045
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EXR_QpBAXL6WFmPqzFIvdKfzh7Q.roa
Signing time: Tue 28 May 2024 10:15:58 +0000
ROA not before: Tue 28 May 2024 10:15:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 87.121.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 10:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:b3:15:c5:51:13:6c:03:aa:86:60:8c:1e:cb:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 28 10:15:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11747f4290405cbe961663eacc522f74a7f387b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:04:39:3c:c7:ba:31:97:15:6d:6a:1b:ca:
ce:7a:1a:dc:25:3b:45:f5:53:ba:ff:5c:b7:4f:6e:
92:76:e2:5c:2f:29:64:c6:bd:9e:60:52:69:f9:f1:
10:ba:d2:1f:6b:a7:6f:fa:6f:9b:6d:f8:e5:7a:f4:
30:73:fd:36:d0:34:93:94:f1:d1:a1:2d:ad:33:9b:
9c:b4:b6:12:78:26:0e:e1:df:b4:d1:49:73:06:2b:
90:23:b2:32:32:57:b7:13:98:97:be:67:4f:dc:49:
8c:f0:7a:5e:f6:c7:78:01:6d:b5:5b:f6:a2:7e:3e:
92:60:a4:29:2a:6f:98:9c:b2:4a:01:5f:1b:dd:d2:
b3:b4:2d:94:e6:91:63:cb:08:15:01:04:a1:05:9a:
47:55:a1:fb:8a:56:13:9f:40:76:cd:9f:1d:0d:d4:
28:0a:eb:0b:2d:5d:22:66:39:94:eb:4f:37:86:70:
b3:d5:d4:16:29:c7:06:bf:23:45:5f:d1:91:d7:6b:
50:e3:4d:53:a7:a1:33:43:e0:4d:48:71:1e:e2:46:
0a:e8:83:2f:98:23:5d:5c:2b:bc:f5:6e:e4:e6:ba:
7a:3b:8f:92:a6:c5:a2:a9:41:a2:82:60:90:fa:54:
21:8c:9e:68:e5:bb:f6:d8:05:db:c4:66:31:34:7b:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:7F:42:90:40:5C:BE:96:16:63:EA:CC:52:2F:74:A7:F3:87:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EXR_QpBAXL6WFmPqzFIvdKfzh7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.104.0/24
Signature Algorithm: sha256WithRSAEncryption
85:82:14:89:87:89:cd:eb:7a:b9:fc:7b:fd:41:9b:77:d5:75:
b9:1d:b8:8e:e0:c4:7d:0a:ea:eb:6e:d0:a5:14:ee:29:32:41:
de:72:f9:6c:bb:ba:5c:16:18:5d:2f:7c:05:6d:8b:a3:cb:65:
37:75:de:f4:2e:ff:f5:91:4c:0f:49:38:3e:0d:ee:60:22:6f:
bf:e0:92:76:1c:33:ab:fb:f6:68:87:ac:9c:70:24:44:14:73:
e6:44:8c:aa:fd:6e:6a:2c:f1:2a:38:d9:bb:59:dd:c9:98:9e:
8d:ad:fc:15:07:b8:62:bd:6d:0a:e8:f1:e8:1f:52:61:35:18:
68:07:36:47:7b:dd:a1:ff:14:e7:e7:25:48:f8:83:38:b1:f2:
d3:29:fd:3b:35:09:16:24:24:a5:05:3e:24:36:0e:28:50:0d:
fe:2a:7b:37:0f:e3:09:ea:6b:49:23:d4:63:b0:11:18:78:1c:
b7:99:9a:fe:e0:37:8f:b1:03:26:59:c2:7d:ea:4f:d7:ac:d2:
0f:d4:3b:87:86:57:5c:c8:24:a9:b7:dd:0c:72:34:94:f6:c7:
53:4f:8f:45:e9:23:e1:51:4a:53:b6:16:e8:2a:19:45:d8:1e:
f0:47:6c:bb:99:ac:d6:f9:2d:c3:50:15:e9:52:64:cb:a8:5b:
e2:80:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:42 2024 by rpki-client on console-ams.rpki-client.org