Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EcsOOFyQXxVva81M7GNMejkmeYA.roa
File: EcsOOFyQXxVva81M7GNMejkmeYA.roa (raw, json)
Hash identifier: Mk9z9Az2mqoTfdYLJpmkrQGAjTGl3GblTso8RAUZelE=
Subject key identifier: 11:CB:0E:38:5C:90:5F:15:6F:6B:CD:4C:EC:63:4C:7A:39:26:79:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0509BE3B3BDBFE1C07BF929C8A5E0BAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EcsOOFyQXxVva81M7GNMejkmeYA.roa
Signing time: Sat 13 Jan 2024 22:55:41 +0000
ROA not before: Sat 13 Jan 2024 22:55:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 87.121.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 15:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:05:09:be:3b:3b:db:fe:1c:07:bf:92:9c:8a:5e:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 13 22:55:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11cb0e385c905f156f6bcd4cec634c7a39267980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:4c:3d:f7:6b:e7:e3:6c:74:9c:fd:c9:df:
61:e8:07:7d:59:2f:05:5d:db:14:c9:fb:a5:bb:b5:
6f:b0:de:ba:92:74:67:b7:20:ac:03:a8:73:58:3d:
0e:cf:63:d9:db:ae:8b:71:89:b0:ee:30:ff:96:92:
8e:ad:fe:21:a7:6b:b0:91:48:a2:e2:9d:36:d8:a7:
21:ec:55:9d:84:b5:02:29:a6:2d:8c:3f:70:49:62:
4b:56:62:5e:f0:7c:2d:49:0b:ae:9b:d3:7e:f5:14:
f2:64:a1:b8:2c:ac:49:70:a6:7d:2d:42:58:24:71:
30:77:bd:c6:83:c8:75:43:c2:70:f2:e1:2a:5c:2a:
95:60:eb:eb:5a:34:2f:c8:e7:81:3d:d0:b5:76:58:
8c:c0:b1:1a:24:7c:43:f1:f8:e0:84:25:e3:04:7f:
e4:d4:df:fe:15:74:d9:13:4a:70:4b:92:29:e5:4b:
f1:4f:ae:5a:37:03:73:84:b8:8f:67:d2:68:6c:8b:
96:62:96:61:57:88:cd:c4:1b:ea:8a:a5:72:62:84:
5f:f1:39:dc:e2:eb:8f:08:fd:ce:7f:9c:83:ea:a1:
5b:bc:73:e5:a2:00:76:91:8c:35:8c:cc:35:66:ad:
46:aa:63:89:d4:04:05:31:e2:4a:70:70:81:80:fe:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:0E:38:5C:90:5F:15:6F:6B:CD:4C:EC:63:4C:7A:39:26:79:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EcsOOFyQXxVva81M7GNMejkmeYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.163.0/24
Signature Algorithm: sha256WithRSAEncryption
39:70:bd:98:a4:cd:62:d8:a8:fe:3c:36:12:d5:25:aa:89:54:
e0:03:90:28:c5:2f:7d:b7:66:0d:cf:ad:35:3c:f1:26:17:4d:
3d:7b:09:b1:fe:ea:a7:11:74:0b:67:e9:1d:36:7c:63:7b:fd:
59:88:33:77:12:fe:c8:4d:b7:35:78:c8:6f:3e:23:8f:4c:30:
41:86:4c:84:51:46:be:67:8a:39:b5:2e:12:d7:3c:f0:03:34:
fa:96:c8:36:81:9c:54:85:e4:45:a2:30:b8:42:78:13:2b:2f:
eb:65:f0:e9:77:94:af:5b:b3:e0:0a:b1:08:a1:58:c8:34:7b:
ca:fd:b3:3c:00:10:61:c9:a8:05:6f:e7:32:44:43:f4:ed:d5:
35:bb:d0:03:5b:73:5a:58:0e:03:80:7b:59:f0:97:a7:a1:77:
1c:b1:cd:e7:66:f3:e7:d0:5d:c1:b8:42:8f:63:a3:45:78:50:
a6:a8:80:7d:5a:0f:c0:ff:41:b1:dc:34:02:f5:a6:68:40:14:
d2:1c:6d:74:03:39:67:13:4c:3b:2a:ed:4a:98:c5:65:06:ea:
9d:df:8d:01:32:7c:27:4c:f5:29:6a:68:c7:a0:cd:41:38:51:
93:15:26:1d:75:18:91:d8:c8:01:fa:a0:1d:bf:ac:05:a7:94:
e4:d6:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:26:23 2024 by rpki-client on console-ams.rpki-client.org