Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H72-e8dYfTzgT7vy9b-jYjDtQfY.roa
File: H72-e8dYfTzgT7vy9b-jYjDtQfY.roa (raw, json)
Hash identifier: ZAWLM7S+lMNgSv2hhn/ls/1M4StxkwrSKAaSUOVNbrM=
Subject key identifier: 1F:BD:BE:7B:C7:58:7D:3C:E0:4F:BB:F2:F5:BF:A3:62:30:ED:41:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187AB87E2059C005472B6440B6E5D44AFF4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H72-e8dYfTzgT7vy9b-jYjDtQfY.roa
Signing time: Sun 23 Apr 2023 00:33:41 +0000
ROA not before: Sun 23 Apr 2023 00:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.69.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ab:87:e2:05:9c:00:54:72:b6:44:0b:6e:5d:44:af:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 23 00:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fbdbe7bc7587d3ce04fbbf2f5bfa36230ed41f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:57:12:e3:f7:ba:64:e1:32:05:18:b2:02:
7e:e8:79:1f:03:94:25:64:01:8f:94:7d:f4:6a:e9:
8b:63:d6:f7:46:61:72:03:2a:db:08:24:02:c6:f8:
65:c8:75:d9:24:37:fa:31:ef:7a:de:60:b2:bb:39:
d6:04:5e:10:da:e9:13:b5:41:ae:00:7a:89:b2:7d:
bf:9f:fe:13:cd:3d:26:ac:26:30:d8:0e:98:1b:fd:
c6:47:7a:f9:f1:fb:ff:c8:08:b6:02:a0:28:d6:16:
e8:85:45:fd:9b:9d:57:55:96:73:0e:c0:fc:f7:6e:
90:46:b2:c5:50:60:de:78:34:89:fa:3d:60:10:1b:
ae:70:9a:6e:6b:23:21:3c:f6:f0:53:3f:18:76:24:
ab:50:15:13:0e:69:37:28:d1:62:f4:e3:24:f2:f9:
fa:7c:ea:38:fc:1f:67:ff:09:83:af:39:8a:77:26:
41:e9:e8:9e:9f:bc:92:ce:68:89:28:bd:18:2b:dc:
e0:e9:27:9c:7a:02:9f:a9:f4:53:2d:a3:1d:d9:e5:
54:13:7b:01:aa:98:a2:d2:2e:bb:dd:5d:b8:06:29:
2a:6d:cd:ab:b2:e2:9a:67:29:16:60:d5:13:35:06:
e1:b3:92:93:ac:ff:4d:8a:1e:0c:23:59:ac:a7:34:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BD:BE:7B:C7:58:7D:3C:E0:4F:BB:F2:F5:BF:A3:62:30:ED:41:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H72-e8dYfTzgT7vy9b-jYjDtQfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
Signature Algorithm: sha256WithRSAEncryption
26:d0:07:09:99:15:95:53:2e:e7:ac:ea:e7:63:0c:b3:05:5d:
12:0d:32:8b:f6:58:b9:76:a3:bc:b1:40:33:a2:47:44:a8:07:
be:e0:a5:2a:a2:b1:f8:b9:83:96:41:57:b6:d0:30:6c:2b:dc:
9f:30:67:61:5d:f9:8e:e6:52:5a:82:3a:15:0b:52:2a:03:a0:
56:ec:65:31:de:88:f8:15:84:09:ad:ee:14:7c:bf:19:b9:aa:
fb:0f:ec:e5:51:1a:4b:2d:42:4a:63:59:28:30:fc:39:76:8e:
e2:5d:28:60:be:94:29:0a:2b:1a:71:2d:9e:2b:b0:36:3d:b5:
10:b8:b3:63:44:5d:18:5b:15:b8:62:5a:2c:47:cb:00:b6:d1:
4d:01:1a:d3:08:27:11:78:43:df:fb:ea:9e:a9:9b:ee:b4:6f:
fd:c5:6b:c3:2b:bd:fe:af:7b:9a:56:ee:59:ff:81:39:f9:35:
be:ba:a4:09:86:1c:c9:05:e9:f5:1d:5c:ba:11:4b:4c:87:d6:
8c:74:24:62:90:00:59:f9:d2:a9:06:b9:af:f8:c0:41:98:05:
23:cf:39:b9:d6:f7:ac:ca:eb:76:27:cc:41:b9:0c:ae:ff:84:
cb:86:9e:e6:92:ee:81:f9:86:36:fc:84:94:f2:bd:91:f0:fe:
c1:af:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org