Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IMsaLvo-4OTfU9sFUrrfBX2MRC4.roa
File: IMsaLvo-4OTfU9sFUrrfBX2MRC4.roa (raw, json)
Hash identifier: UsVnR5egLDtCsBd5pBCqOGlcct0nJKXKtrGjcDJVF7k=
Subject key identifier: 20:CB:1A:2E:FA:3E:E0:E4:DF:53:DB:05:52:BA:DF:05:7D:8C:44:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189ABC824B6E5D7DA8CDCE4B40693190AD8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IMsaLvo-4OTfU9sFUrrfBX2MRC4.roa
Signing time: Mon 31 Jul 2023 11:49:27 +0000
ROA not before: Mon 31 Jul 2023 11:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 87.120.84.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:c8:24:b6:e5:d7:da:8c:dc:e4:b4:06:93:19:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 11:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20cb1a2efa3ee0e4df53db0552badf057d8c442e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:69:90:89:e5:95:1f:64:5a:10:02:24:6c:
64:c0:da:2e:d6:9f:0f:25:cb:5a:c4:cf:24:24:37:
49:f9:5e:53:3f:8e:e8:23:03:cf:3e:0a:02:a7:3d:
34:a6:52:cd:4f:39:aa:83:ee:07:d0:93:f3:fc:9a:
69:c3:e0:38:54:ef:ff:4d:83:95:51:63:01:5f:03:
f3:41:eb:01:10:83:d1:e0:ea:a2:15:28:89:ec:7e:
37:9a:e4:d1:a0:1e:d5:70:48:1f:c1:be:7c:ae:d6:
05:5b:e7:35:15:5b:71:5f:c6:3b:8e:c0:e1:4e:e0:
32:65:14:a6:7a:6c:80:1f:6a:80:29:90:0f:be:62:
9b:dd:55:2f:10:1d:16:71:f6:a6:49:e7:a5:b0:05:
e1:ea:50:e9:7c:dd:92:4b:3d:b0:b4:26:07:07:13:
57:84:3e:f9:8a:e6:9d:0c:fa:33:7d:34:51:16:6e:
22:bb:d9:f6:f8:b2:60:79:31:4d:e1:3d:79:ae:a9:
f3:95:86:4c:65:a8:21:a0:81:4a:ee:a4:62:6c:c9:
7b:8d:56:9c:1c:85:94:54:8b:26:94:9d:9e:fb:e0:
1d:64:0d:b9:63:57:89:15:a1:c6:cd:23:97:ed:9e:
44:47:e9:f3:92:74:d3:ed:2e:ce:2c:85:30:06:c5:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:1A:2E:FA:3E:E0:E4:DF:53:DB:05:52:BA:DF:05:7D:8C:44:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IMsaLvo-4OTfU9sFUrrfBX2MRC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
147.78.103.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b5:2d:75:3d:3c:fd:66:ef:e2:7b:22:95:cd:bf:fb:33:31:
60:6b:4f:02:96:f2:4d:8d:98:c1:02:01:2b:99:06:17:97:84:
16:2a:94:62:ec:da:7f:4f:56:0e:e6:83:48:38:82:2e:a8:14:
da:78:c3:91:53:6a:25:de:3f:4c:c7:0b:65:66:9c:36:83:d7:
89:ac:01:87:29:67:e8:89:6d:7f:1d:48:0f:4d:4f:43:70:18:
d9:09:4a:9b:ff:b0:15:41:24:65:5d:2f:fd:0a:e7:02:5a:6e:
fa:47:29:54:2f:d4:1b:cd:2d:0f:5a:25:93:ee:cf:8e:dc:6b:
65:5a:61:41:f2:64:ac:89:67:0f:b0:f6:27:2f:47:bb:b5:f1:
50:97:55:51:40:14:1b:04:4a:4b:b5:77:8c:9c:93:ee:d0:08:
ce:63:be:6b:d0:ea:10:5b:48:54:1f:a7:81:fb:32:11:50:a3:
c6:a6:81:ff:46:76:f2:90:ed:75:d7:c2:1c:67:8a:1f:fa:34:
52:6d:0d:44:02:59:f3:65:27:1f:27:49:33:64:6f:4b:dc:d4:
1d:13:bb:a4:70:29:51:a1:39:45:d5:37:12:ad:25:62:aa:36:
9a:c7:f4:dd:f4:fb:6d:ae:81:75:c1:1b:ee:a5:37:9a:e6:28:
94:2e:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 18:04:10 2023 by rpki-client on console-ams.rpki-client.org