Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JSuLgnj8p0VofSB37Cz5ft8a3MY.roa
File: JSuLgnj8p0VofSB37Cz5ft8a3MY.roa (raw, json)
Hash identifier: pRwpTMUeHZiQ96eMP8Bm1h8dw3ZOQdJidj3lw88CKjc=
Subject key identifier: 25:2B:8B:82:78:FC:A7:45:68:7D:20:77:EC:2C:F9:7E:DF:1A:DC:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DCE2CF3BC2D11CC3BED1150E6F2D4378C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JSuLgnj8p0VofSB37Cz5ft8a3MY.roa
Signing time: Thu 22 Feb 2024 00:17:48 +0000
ROA not before: Thu 22 Feb 2024 00:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ce:2c:f3:bc:2d:11:cc:3b:ed:11:50:e6:f2:d4:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 22 00:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=252b8b8278fca745687d2077ec2cf97edf1adcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:c6:bc:3b:11:85:39:9a:ae:0b:1c:0f:36:
36:0e:39:09:0c:9c:26:26:ae:19:fa:1b:96:4f:12:
09:bf:56:d0:4e:03:f6:01:60:98:0b:a8:a4:b9:d2:
ac:d2:ee:65:8b:b9:9f:0b:30:9c:25:7f:ec:e8:69:
fa:39:45:f8:3c:90:ca:fd:cb:44:82:4f:e2:3a:17:
61:fa:d4:6c:32:f6:bf:b4:e8:8c:b9:41:1a:18:61:
85:8f:40:bc:b8:f2:61:6b:f8:4e:65:b7:c3:af:45:
70:31:cb:cd:2f:ef:67:10:ff:e6:2d:26:b2:48:59:
81:d0:cf:38:45:2f:6a:63:d2:90:dd:64:f7:40:df:
10:75:12:95:c9:9d:d8:c3:5a:d0:43:ab:ae:b4:f7:
f1:39:ec:71:b1:ac:25:21:61:4a:73:24:e7:99:c0:
86:4a:6b:cc:e1:28:67:22:31:6a:7c:99:d5:4b:b6:
c9:e7:80:a9:2c:d8:76:c5:01:6d:03:a6:bb:b9:40:
63:d2:be:5d:59:3f:c9:d9:ef:f0:8a:23:2e:31:e1:
92:5f:b0:1e:cb:67:7c:5f:43:4e:e2:88:00:2d:62:
72:d3:0d:70:02:67:db:0a:ae:8a:2d:5b:8d:40:08:
54:b0:1e:de:6d:2b:6f:09:39:90:f0:25:33:1f:dc:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2B:8B:82:78:FC:A7:45:68:7D:20:77:EC:2C:F9:7E:DF:1A:DC:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JSuLgnj8p0VofSB37Cz5ft8a3MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.62.0/23
87.121.114.0/23
93.123.75.0/24
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cc:8a:18:c2:98:bf:f2:a5:f7:08:e5:47:aa:5f:06:f7:29:
22:94:16:4a:e1:57:20:20:0c:7b:7c:6c:de:38:dd:f5:e0:7e:
86:e3:43:e0:81:dd:a6:be:35:72:61:ee:20:e9:8d:bf:1a:8d:
55:d8:88:0b:25:44:6a:82:2b:82:f9:24:82:19:92:22:ad:3c:
56:2b:42:37:a6:a7:49:3c:58:74:a7:98:9f:61:5d:82:96:d7:
5f:a6:e7:58:3d:08:9a:7f:2f:3e:bd:cf:67:0d:b3:0b:97:2c:
86:35:7e:d3:92:02:90:ce:8e:af:ec:74:b3:dc:99:2a:9b:f7:
96:ac:17:3f:c4:53:47:2c:48:c4:b2:42:40:50:ab:f1:70:3c:
00:bf:0d:13:96:a9:0d:9e:f6:79:41:52:84:0b:3b:58:36:33:
ef:dc:28:3e:d8:07:18:3c:c3:78:6e:04:7f:fe:ed:0b:69:5c:
1f:f0:79:2f:a3:a8:28:15:2c:3e:7c:3a:63:5c:3d:2b:92:f9:
67:83:c2:b1:e5:46:e6:cd:d9:48:29:53:4f:68:03:07:3a:66:
0f:6f:26:fe:fd:77:bf:f6:98:10:9d:21:3d:69:84:70:41:fd:
4a:48:a6:ac:34:5e:ad:fc:af:a8:d1:41:d5:2c:05:f2:5d:54:
c2:f4:75:d4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY3OLPO8LRHMO+0RUOby1DeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjIyMDAxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTJiOGI4Mjc4ZmNhNzQ1Njg3ZDIwNzdlYzJjZjk3ZWRmMWFkY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgprGvDsRhTmargscDzY2DjkJDJwm
Jq4Z+huWTxIJv1bQTgP2AWCYC6ikudKs0u5li7mfCzCcJX/s6Gn6OUX4PJDK/ctE
gk/iOhdh+tRsMva/tOiMuUEaGGGFj0C8uPJha/hOZbfDr0VwMcvNL+9nEP/mLSay
SFmB0M84RS9qY9KQ3WT3QN8QdRKVyZ3Yw1rQQ6uutPfxOexxsawlIWFKcyTnmcCG
SmvM4ShnIjFqfJnVS7bJ54CpLNh2xQFtA6a7uUBj0r5dWT/J2e/wiiMuMeGSX7Ae
y2d8X0NO4ogALWJy0w1wAmfbCq6KLVuNQAhUsB7ebStvCTmQ8CUzH9yQwQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCUri4J4/KdFaH0gd+ws+X7fGtzGMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSlN1TGduajhwMFZvZlNCMzdDejVmdDhhM01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBV3k+AwQB
V3lyAwQAXXtLAwQAXXt3MA0GCSqGSIb3DQEBCwUAA4IBAQCXzIoYwpi/8qX3COVH
ql8G9ykilBZK4VcgIAx7fGzeON314H6G40Pggd2mvjVyYe4g6Y2/Go1V2IgLJURq
giuC+SSCGZIirTxWK0I3pqdJPFh0p5ifYV2CltdfpudYPQiafy8+vc9nDbMLlyyG
NX7TkgKQzo6v7HSz3Jkqm/eWrBc/xFNHLEjEskJAUKvxcDwAvw0TlqkNnvZ5QVKE
CztYNjPv3Cg+2AcYPMN4bgR//u0LaVwf8Hkvo6goFSw+fDpjXD0rkvlng8Kx5Ubm
zdlIKVNPaAMHOmYPbyb+/Xe/9pgQnSE9aYRwQf1KSKasNF6t/K+o0UHVLAXyXVTC
9HXU
-----END CERTIFICATE-----
Generated at Sun Feb 25 16:20:02 2024 by rpki-client on console-ams.rpki-client.org