Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N__kE_oHn1pTNIDo3LxCo8bZYys.roa
File: N__kE_oHn1pTNIDo3LxCo8bZYys.roa (raw, json)
Hash identifier: pGpg6ukv2NNJtgo+acfMJs/pqKc3Pd2Rg/YEiXKJfEY=
Subject key identifier: 37:FF:E4:13:FA:07:9F:5A:53:34:80:E8:DC:BC:42:A3:C6:D9:63:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01916FBED5B2F15B130F800EE0902AC7225E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N__kE_oHn1pTNIDo3LxCo8bZYys.roa
Signing time: Tue 20 Aug 2024 12:24:23 +0000
ROA not before: Tue 20 Aug 2024 12:24:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135402
IP address blocks: 87.121.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:be:d5:b2:f1:5b:13:0f:80:0e:e0:90:2a:c7:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 20 12:24:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ffe413fa079f5a533480e8dcbc42a3c6d9632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:0e:ea:c6:cf:de:5b:02:82:c4:8f:e8:b6:
96:d9:25:07:23:c8:28:03:19:3e:c2:91:d9:ad:0f:
bb:85:af:41:9b:14:e7:cc:4e:6d:74:b0:44:34:a3:
5f:8e:2a:4f:58:a4:a5:a5:d1:f8:de:54:c1:15:29:
aa:95:3a:85:f0:dd:04:d3:12:51:bc:bc:c9:bb:b8:
d4:74:5e:aa:db:4d:e6:4e:54:4a:0b:63:d4:65:87:
64:e6:2e:43:7f:de:83:ad:bb:fa:60:6b:6d:4f:b7:
d8:f3:6e:e5:1e:ee:39:3a:61:d8:fe:35:9e:dc:4d:
b0:19:95:c1:60:0f:c4:12:05:50:f1:10:fc:1d:4c:
81:f1:67:7a:91:b8:2a:f4:88:c9:da:ea:43:a6:a4:
da:3d:4b:65:65:f7:06:70:47:d9:ca:1e:ca:6e:52:
ee:23:03:13:e5:28:e6:99:12:b4:31:ae:50:46:2f:
af:ee:ab:6a:79:1e:68:90:54:86:39:ff:9b:e0:81:
99:9c:c9:9a:94:a7:d1:29:96:56:4c:ba:29:09:53:
57:4f:d1:82:26:19:54:fc:b4:38:fe:34:50:be:b0:
1e:16:c9:a3:c1:85:7d:0d:0c:5f:1f:d7:d4:61:80:
d5:41:ee:3b:f2:7d:0b:a9:76:61:19:68:4e:d9:69:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:E4:13:FA:07:9F:5A:53:34:80:E8:DC:BC:42:A3:C6:D9:63:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N__kE_oHn1pTNIDo3LxCo8bZYys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.147.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4a:7a:0f:0e:67:10:1f:a6:63:5a:eb:39:42:31:ca:85:7a:
77:a2:a4:80:32:24:7b:92:db:44:aa:d3:fd:f3:03:20:cf:ec:
f3:cb:23:94:50:f5:58:b6:f0:a6:7d:29:0b:cc:70:cf:e2:6d:
d4:ed:97:86:7f:67:c9:9d:80:8f:7b:7c:77:23:7b:45:b3:d3:
e4:b7:44:3d:80:c6:88:c7:16:80:56:b6:2c:71:f2:61:8b:f7:
b8:82:2c:fb:98:e6:74:b7:43:5e:31:d3:ec:96:44:90:10:fc:
90:9c:36:7a:76:6f:18:d4:ee:84:8a:9a:da:af:53:15:56:65:
79:c3:f1:b8:87:7b:38:dd:3b:8b:32:b0:93:c4:cf:e9:e0:3f:
80:6f:3f:ac:9a:7a:5d:5a:d3:80:4f:7b:67:27:6a:0b:d0:bc:
fa:0c:7c:2b:db:ee:e0:27:48:ef:0d:a2:ac:9d:fb:31:c0:db:
c4:fa:d3:ff:df:4a:ce:1a:f1:34:08:2a:05:cb:4a:d6:d2:59:
a3:03:14:de:83:e9:35:8a:bf:10:f6:6b:e4:03:8d:1c:8b:98:
b1:3c:42:4c:f8:c5:77:ae:7a:e2:64:ae:cf:16:04:35:03:ac:
8b:cd:97:ed:3c:b3:d3:c6:d3:66:60:43:02:0d:eb:ac:ff:e6:
1b:40:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:18 2025 by rpki-client