Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LYOqx3kV_ImgbUShS3b3OMAsYOo.roa
File: LYOqx3kV_ImgbUShS3b3OMAsYOo.roa (raw, json)
Hash identifier: RVe3K3RRvMRMibwK3U1NWCMLlXGu2UbKJUuSUumMmPI=
Subject key identifier: 2D:83:AA:C7:79:15:FC:89:A0:6D:44:A1:4B:76:F7:38:C0:2C:60:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189C0268CCDE510534084FE0CB9C1322148
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LYOqx3kV_ImgbUShS3b3OMAsYOo.roa
Signing time: Fri 04 Aug 2023 10:44:59 +0000
ROA not before: Fri 04 Aug 2023 10:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28753
IP address blocks: 87.121.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:26:8c:cd:e5:10:53:40:84:fe:0c:b9:c1:32:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 10:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d83aac77915fc89a06d44a14b76f738c02c60ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:23:bc:dc:0c:ce:49:a2:11:34:7b:bc:b4:
40:d3:36:01:b3:f6:2a:1a:e8:13:cd:b0:6f:f4:51:
6f:36:cb:64:6d:4f:2e:55:bc:c4:23:b3:40:2f:db:
2d:0c:02:28:09:e1:c3:b5:e7:89:6b:d1:0a:12:50:
e9:ef:82:68:79:2f:30:5c:a5:bc:32:f9:f2:e8:93:
d5:f2:70:3b:bf:63:0d:ca:a2:8e:4f:1c:de:0c:06:
d8:7b:a9:09:d7:67:be:9e:ab:29:16:ea:9c:d3:0f:
95:cf:b0:c3:7d:4e:81:d0:28:87:01:fa:7f:0a:e3:
c6:c3:89:64:af:cf:d2:f4:55:29:58:4b:d9:cc:17:
57:10:1e:cd:4a:63:42:e8:ac:4c:82:25:a2:ca:d8:
4f:85:cc:67:4f:4d:be:02:ef:ca:20:3a:a5:9b:29:
b0:b0:fd:fc:a6:57:06:77:65:89:b8:02:76:e4:05:
d4:23:c1:c9:9b:ef:ac:5f:b2:20:93:f8:d3:eb:2c:
e3:c3:3e:3d:61:21:9d:e5:94:22:74:15:19:51:6d:
03:a0:99:8b:55:8e:97:9b:03:e4:a4:ab:d3:e5:c7:
a3:cf:a1:5c:16:df:80:e7:1a:d1:38:09:7e:6b:3c:
74:76:e4:e7:46:95:f9:27:a8:c1:86:fd:0d:78:9d:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:AA:C7:79:15:FC:89:A0:6D:44:A1:4B:76:F7:38:C0:2C:60:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LYOqx3kV_ImgbUShS3b3OMAsYOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.45.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b0:d2:48:c2:ef:ec:42:a9:eb:cb:87:b6:24:fd:65:62:aa:
a1:70:4f:a6:23:19:52:dc:53:b3:72:a2:40:d3:ca:00:09:06:
39:fc:4f:2b:3e:ca:8d:d6:1c:ab:23:36:3b:8f:e1:ce:3f:a8:
15:bf:37:cb:3c:64:50:61:68:86:d6:e3:f3:29:22:9c:56:98:
ce:cc:5a:7b:c0:10:a3:8b:ae:13:d0:1c:85:39:17:bc:3a:eb:
28:76:20:b0:cf:33:b8:a4:8a:01:7f:f7:57:a5:aa:0f:7d:d4:
0d:51:9d:67:41:95:cb:f7:21:df:1e:a3:97:da:14:81:f2:22:
fc:1b:c7:aa:88:1e:c8:fd:a5:ea:e8:94:3d:51:ca:90:af:3d:
4e:2d:e8:75:ad:96:59:00:7c:4a:b3:5f:e3:e3:94:53:a5:be:
df:7e:b3:63:b5:59:7e:0f:d3:31:7a:86:0c:f1:4f:e6:bb:a3:
28:41:6e:98:56:ee:14:53:d0:0e:18:5f:a8:ef:6c:0f:21:cd:
a2:34:e2:03:a3:6e:62:93:25:1d:f0:eb:57:8c:3d:37:e0:8e:
26:18:37:f8:67:f4:93:20:5c:84:bc:33:b5:b5:a2:0f:df:88:
36:2f:81:d5:2c:b5:0f:12:bc:1b:f0:09:7a:85:8e:d2:ea:93:
bb:c6:9e:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnAJozN5RBTQIT+DLnBMiFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODA0MTA0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDgzYWFjNzc5MTVmYzg5YTA2ZDQ0YTE0Yjc2ZjczOGMwMmM2MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMojvNwMzkmiETR7vLRA0zYBs/Yq
GugTzbBv9FFvNstkbU8uVbzEI7NAL9stDAIoCeHDteeJa9EKElDp74JoeS8wXKW8
Mvny6JPV8nA7v2MNyqKOTxzeDAbYe6kJ12e+nqspFuqc0w+Vz7DDfU6B0CiHAfp/
CuPGw4lkr8/S9FUpWEvZzBdXEB7NSmNC6KxMgiWiythPhcxnT02+Au/KIDqlmymw
sP38plcGd2WJuAJ25AXUI8HJm++sX7Igk/jT6yzjwz49YSGd5ZQidBUZUW0DoJmL
VY6XmwPkpKvT5cejz6FcFt+A5xrROAl+azx0duTnRpX5J6jBhv0NeJ0NvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2Dqsd5FfyJoG1EoUt29zjALGDqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTFlPcXgza1ZfSW1nYlVTaFMzYjNPTUFzWU9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ktMA0G
CSqGSIb3DQEBCwUAA4IBAQA2sNJIwu/sQqnry4e2JP1lYqqhcE+mIxlS3FOzcqJA
08oACQY5/E8rPsqN1hyrIzY7j+HOP6gVvzfLPGRQYWiG1uPzKSKcVpjOzFp7wBCj
i64T0ByFORe8OusodiCwzzO4pIoBf/dXpaoPfdQNUZ1nQZXL9yHfHqOX2hSB8iL8
G8eqiB7I/aXq6JQ9UcqQrz1OLeh1rZZZAHxKs1/j45RTpb7ffrNjtVl+D9MxeoYM
8U/mu6MoQW6YVu4UU9AOGF+o72wPIc2iNOIDo25ikyUd8OtXjD034I4mGDf4Z/ST
IFyEvDO1taIP34g2L4HVLLUPErwb8Al6hY7S6pO7xp48
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org