Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jc73Ax9d69sj2NZTAfwdCrqmULE.roa
File: Jc73Ax9d69sj2NZTAfwdCrqmULE.roa (raw, json)
Hash identifier: T5J4yqrh6HDJA+tNZlgemTGUp0ho9XrK0GX/L1h/ZrQ=
Subject key identifier: 25:CE:F7:03:1F:5D:EB:DB:23:D8:D6:53:01:FC:1D:0A:BA:A6:50:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ACC7CFB5F44680227C35D6804A9F7E396
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jc73Ax9d69sj2NZTAfwdCrqmULE.roa
Signing time: Mon 25 Sep 2023 13:17:37 +0000
ROA not before: Mon 25 Sep 2023 13:17:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 178.215.239.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:7c:fb:5f:44:68:02:27:c3:5d:68:04:a9:f7:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 25 13:17:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cef7031f5debdb23d8d65301fc1d0abaa650b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:e4:ea:08:5c:9f:15:71:56:44:d1:e6:c0:
2a:3c:4e:58:f2:e5:ce:4f:df:bc:f5:c8:ec:82:98:
72:58:61:c3:7c:ad:1c:d3:df:3d:a3:df:0e:3d:a9:
44:80:57:fb:3a:32:1b:cd:90:83:74:0f:a7:3b:d8:
da:e6:32:c4:7a:12:56:8a:9b:3c:03:c0:db:2e:98:
28:72:78:28:47:b2:9f:31:a3:e3:2d:fb:04:fb:c8:
ab:bd:86:0a:8b:68:d9:ea:9e:21:1b:43:87:50:55:
49:3a:3b:b0:91:5f:43:3e:2f:0d:aa:c8:bb:cf:40:
92:30:c5:be:f2:b2:92:e4:bd:f2:f2:56:ca:30:a1:
85:f2:fe:f9:09:da:76:db:39:bd:0d:1c:8d:cf:1f:
e0:73:e7:d6:4b:32:15:da:13:d4:39:f0:d8:d4:76:
8c:dd:8c:ee:66:cb:6a:c0:89:69:4c:b7:5b:48:87:
fa:fc:78:ab:8d:cc:dd:5a:63:ee:fd:3c:72:7c:a9:
35:45:a8:63:ee:b7:37:cb:cc:0d:5a:d8:7b:9f:4b:
d6:3a:4f:62:88:f5:d1:94:c5:2d:e0:ea:d9:f0:73:
fb:a5:59:e9:dc:1d:56:d6:15:eb:74:eb:d8:dc:86:
ed:76:93:02:d3:f2:28:97:eb:8f:64:67:38:bd:a3:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:F7:03:1F:5D:EB:DB:23:D8:D6:53:01:FC:1D:0A:BA:A6:50:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jc73Ax9d69sj2NZTAfwdCrqmULE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.105.0/24
178.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f7:ab:28:8a:01:dc:d6:4a:1e:d9:c1:46:d9:e8:92:58:79:
ef:f7:e1:7b:30:ac:d2:46:a9:ae:65:c4:a7:99:ac:1d:7a:7a:
c4:83:6b:80:45:b6:f9:d9:6e:50:a8:fe:82:1b:70:56:bc:58:
e3:9a:04:8d:b3:49:98:b7:8d:a2:87:1c:ec:2d:46:d8:75:8c:
f1:14:3a:2a:67:4f:0f:d9:01:ab:dc:53:b4:a4:32:16:64:79:
27:78:31:2a:3c:4e:e1:4e:1f:a1:24:3a:74:0a:73:90:8f:34:
26:86:36:a7:23:41:f0:1d:b8:b4:4d:f2:cd:ed:ac:87:f6:2d:
ca:76:b9:5c:bf:06:71:0b:22:f9:8e:a1:53:44:29:ab:f3:ba:
74:d0:08:fa:6d:7a:19:c0:b7:d9:9c:e1:45:03:05:0b:8b:90:
0e:83:d2:14:73:42:b2:2c:1b:bb:bc:3a:2c:97:7e:dd:c2:f2:
8f:a3:be:a3:09:9b:7a:53:c8:58:77:b1:5d:72:35:0f:fb:d8:
bb:54:14:cd:68:f2:e1:23:30:92:68:44:c2:73:3f:cd:73:01:
39:05:73:dc:84:cf:80:10:60:68:f4:89:6b:cd:5f:14:47:7d:
21:63:26:b6:80:2c:32:43:32:52:ab:db:ca:7e:f6:63:ea:81:
e3:75:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 14:42:54 2023 by rpki-client on console-ams.rpki-client.org