Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OkV72fMHdktVIoRnEZI1HbF3P4c.roa
File: OkV72fMHdktVIoRnEZI1HbF3P4c.roa (raw, json)
Hash identifier: BOH4yEorDUfymkC81HbWEWaFcv5CK+89LdxJTUW2j6Y=
Subject key identifier: 3A:45:7B:D9:F3:07:76:4B:55:22:84:67:11:92:35:1D:B1:77:3F:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D721EBDF3E119A60BC63E5A0BB7F5884
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OkV72fMHdktVIoRnEZI1HbF3P4c.roa
Signing time: Tue 29 Oct 2024 07:16:17 +0000
ROA not before: Tue 29 Oct 2024 07:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 212.87.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 14:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:21:eb:df:3e:11:9a:60:bc:63:e5:a0:bb:7f:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 07:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a457bd9f307764b552284671192351db1773f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:2c:3d:6e:ef:57:0d:0c:fc:91:62:ca:8c:
8a:03:98:ca:72:a2:d1:f5:17:c6:ab:3d:d5:57:a2:
52:50:33:8c:7a:f5:85:63:06:e0:dd:cf:14:df:38:
82:7f:de:9a:61:dd:1f:6d:a0:12:f1:42:dc:c1:e9:
71:0c:86:c7:34:01:67:9b:bc:ef:78:d0:31:36:32:
53:a0:cd:0a:7b:6b:08:90:29:de:47:a1:32:4a:22:
00:ce:26:d6:a3:fe:d3:6f:0b:04:9f:b6:d3:24:da:
af:64:30:86:ea:d6:24:e4:9d:e6:8b:45:1c:57:9b:
95:b7:27:ec:7a:ea:d4:1c:58:79:bd:3c:41:4b:53:
16:4b:ec:09:8f:13:f1:bf:ac:ad:25:51:86:ce:2c:
b8:e3:d0:16:00:6c:a1:d9:ac:26:4c:67:4b:6c:92:
8f:d7:ad:36:52:4b:3b:21:a6:2c:f4:7d:93:a3:9c:
bb:d8:9d:3d:9c:b3:6b:3e:d1:0c:c6:41:7b:92:e0:
58:39:97:af:24:24:d9:78:cd:40:0d:14:2d:74:64:
be:8e:4e:f2:fa:c3:8f:56:7c:87:c1:06:64:27:a6:
3c:4e:74:98:67:23:38:e6:71:e7:5a:76:4b:b2:bf:
05:8e:94:b5:88:05:5c:24:71:ee:2c:64:18:6f:34:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:7B:D9:F3:07:76:4B:55:22:84:67:11:92:35:1D:B1:77:3F:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OkV72fMHdktVIoRnEZI1HbF3P4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0d:75:74:ea:8c:2d:47:4b:5f:8a:4e:22:4d:0c:b1:e4:75:
03:73:8f:56:35:51:08:04:5b:13:01:29:04:b8:24:bf:dd:91:
6d:f1:0f:ba:7c:71:de:43:b2:f3:9b:ac:c2:04:10:31:83:99:
f8:1f:3a:73:d5:da:b5:25:03:65:09:2a:71:d8:9a:db:a8:71:
ac:1a:51:41:1d:82:80:f3:4a:f3:69:2d:e1:3a:cf:de:7b:0e:
c2:a6:1d:ca:a2:79:5e:78:03:61:e5:3a:60:eb:b4:ec:ba:cb:
f9:b5:12:54:b4:d7:ef:0f:17:df:8b:56:eb:fe:b3:45:7c:52:
23:68:77:c7:a2:ca:99:3e:46:8a:4d:33:eb:5e:3f:98:f5:45:
96:e3:e5:c2:fc:47:65:fc:15:e1:fb:05:66:3e:15:86:38:29:
5d:c9:1d:38:51:7a:43:c0:4f:ee:3f:8e:1f:83:ed:e6:e5:8d:
60:a2:5e:d2:f6:7a:8c:55:24:22:f8:40:04:2f:c9:ff:f1:c8:
eb:d0:6c:2f:1b:44:96:21:1f:b5:9f:3d:d3:51:ac:f7:51:5a:
38:81:63:e9:3d:01:16:d6:2c:03:4f:30:db:38:f7:42:9e:62:
48:64:72:a8:0e:cb:ec:ba:d5:b1:0e:c1:85:55:4e:7e:40:53:
7f:26:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 16:45:47 2024 by rpki-client on console-ams.rpki-client.org