Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OoVZbLxLFVtui3tjgSs61zyJhpQ.roa
File: OoVZbLxLFVtui3tjgSs61zyJhpQ.roa (raw, json)
Hash identifier: WnyFuQuEG2HkZBoUMQWhDgSJXEBz4wr02ta2ZTIjUtE=
Subject key identifier: 3A:85:59:6C:BC:4B:15:5B:6E:8B:7B:63:81:2B:3A:D7:3C:89:86:94
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019204B8706CE70C81BF7B8CF2756B0937D3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OoVZbLxLFVtui3tjgSs61zyJhpQ.roa
Signing time: Wed 18 Sep 2024 10:40:49 +0000
ROA not before: Wed 18 Sep 2024 10:40:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 01:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:b8:70:6c:e7:0c:81:bf:7b:8c:f2:75:6b:09:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 10:40:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a85596cbc4b155b6e8b7b63812b3ad73c898694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:8b:07:10:c0:d0:dc:e1:c1:8c:0d:52:97:
5d:89:ed:e9:e2:ff:82:ff:61:d5:1b:33:ab:6c:15:
1a:77:9e:72:d1:31:5f:d9:7c:f7:61:b2:88:31:a0:
59:02:81:4b:2f:05:45:b1:bc:75:52:b7:5e:34:1c:
6b:24:61:94:e1:30:e1:e1:64:d9:20:23:99:fd:03:
9e:39:d5:b6:c6:0f:a2:38:20:96:a6:d0:05:d1:dd:
a3:4b:c7:90:b3:46:da:85:69:a9:0a:05:95:e3:37:
e0:3e:c2:5d:dd:49:aa:5b:a8:e2:79:f4:7e:e9:5d:
38:71:33:e2:1e:d8:94:8f:97:2e:8f:37:a5:8b:9b:
5c:12:1c:30:8e:e5:6c:22:0c:a1:34:d3:77:fd:17:
10:3d:db:cf:1c:82:59:3a:c5:3d:50:d1:b5:d4:88:
c1:22:56:57:fd:dd:aa:22:42:55:8c:58:60:2b:d9:
24:57:df:c3:4a:c1:b6:e8:03:db:66:8c:a9:d6:14:
6d:28:cb:b5:f9:37:1b:7c:ee:43:8a:64:64:c3:a7:
de:cb:86:f4:50:3b:8c:7c:d4:ce:af:ce:ad:da:4a:
7b:2e:b7:52:72:14:8e:e5:a2:9a:c0:06:ff:30:96:
9a:34:10:8c:83:42:ff:06:11:cd:c0:26:83:bf:d6:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:59:6C:BC:4B:15:5B:6E:8B:7B:63:81:2B:3A:D7:3C:89:86:94
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OoVZbLxLFVtui3tjgSs61zyJhpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
43:bb:df:b4:c2:e6:c4:56:5b:50:c1:e8:25:c5:db:19:69:c6:
58:73:5a:81:d1:ad:6f:6e:c0:e3:3b:37:71:d6:f5:e8:dc:ea:
be:67:90:e9:d5:0d:52:50:6c:92:3f:fe:a0:81:4d:18:ca:2a:
95:0c:6c:9c:97:9a:bc:ef:fc:cc:fd:04:4b:8f:a8:7d:2c:b2:
69:9f:96:95:36:51:b2:4f:c0:12:b3:72:97:08:32:59:0d:5e:
ef:f1:09:e2:71:69:3f:e9:6c:15:0b:b5:4e:76:4f:fb:f6:9c:
11:39:92:e4:81:4c:1b:05:b7:52:6e:4d:38:85:17:7b:c9:3b:
8a:37:57:ef:24:16:a3:2e:54:b9:12:7a:94:46:3b:e8:80:51:
aa:1b:fd:b8:b1:c0:73:3a:f1:7c:00:ab:6c:9f:e0:9a:d5:6a:
48:ab:36:12:0e:b7:ff:82:af:e7:ce:b1:a8:bf:f5:55:50:15:
0f:b7:4b:91:19:99:a5:05:5a:23:61:69:cf:41:b3:18:6a:55:
1c:49:49:b0:59:49:4f:9a:17:96:60:5b:19:5e:7b:cb:b5:f4:
7d:22:2b:89:b3:b3:79:55:41:5e:76:5d:05:7b:6d:f5:87:17:
e9:3d:b1:1f:1b:ae:46:ef:3a:30:07:6a:03:45:ca:37:7d:e4:
f9:e6:e4:a5
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 1 04:10:19 2024 by rpki-client on console-fra.rpki-client.org