Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRUPm6LmUKDp30eoq7oOw1K3oxI.roa
File: PRUPm6LmUKDp30eoq7oOw1K3oxI.roa (raw, json)
Hash identifier: upOGPrhLsVQWvhT0G4k2zGzfHa1jdEY6FoUDyM4s980=
Subject key identifier: 3D:15:0F:9B:A2:E6:50:A0:E9:DF:47:A8:AB:BA:0E:C3:52:B7:A3:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01899723B84009C25DBC5AB7E5A99AC0AA33
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRUPm6LmUKDp30eoq7oOw1K3oxI.roa
Signing time: Thu 27 Jul 2023 11:37:27 +0000
ROA not before: Thu 27 Jul 2023 11:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 87.121.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:23:b8:40:09:c2:5d:bc:5a:b7:e5:a9:9a:c0:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 27 11:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d150f9ba2e650a0e9df47a8abba0ec352b7a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:e4:39:56:f5:06:3f:fc:fa:eb:c6:67:f2:
7c:0d:32:f2:33:00:c6:e6:24:e2:ee:a6:3f:7a:60:
7a:9e:8e:75:23:4d:40:5f:66:ad:93:5b:12:1c:7d:
24:b8:65:cb:9e:4c:e7:bf:71:e0:02:fa:fb:3f:b0:
a1:16:33:3b:60:54:09:05:e2:c4:9d:5d:ff:f9:d3:
3a:60:dc:d2:7d:b0:fc:bd:6a:6d:3c:71:6f:c3:dd:
68:f1:82:b5:7a:53:b4:45:73:4d:d0:e3:60:4e:84:
22:7e:19:01:0f:9a:cf:b1:ae:28:7a:3e:42:32:1e:
15:8c:3f:34:4d:61:5c:73:cb:df:22:bc:cc:b8:53:
86:7d:eb:88:4c:0f:31:01:db:b5:67:b0:ba:3c:47:
87:b3:96:cd:ac:80:67:ed:a3:9b:a9:fc:f4:55:0b:
f5:fa:cc:51:82:65:4d:4b:cd:0b:b3:e7:53:79:e9:
21:84:eb:a5:d6:ec:52:b4:ea:c3:45:43:1c:73:03:
37:b1:92:28:5a:ce:d2:d8:71:85:78:bb:3c:12:09:
13:64:b1:be:0d:4e:aa:24:cc:97:c3:4e:f9:44:05:
ec:1b:d4:2a:17:40:d6:47:62:04:ee:2e:12:3e:00:
45:68:26:10:ee:d9:2a:ac:3d:17:17:d9:81:1a:26:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:0F:9B:A2:E6:50:A0:E9:DF:47:A8:AB:BA:0E:C3:52:B7:A3:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRUPm6LmUKDp30eoq7oOw1K3oxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.58.0/24
Signature Algorithm: sha256WithRSAEncryption
56:03:74:2e:20:f8:a9:2b:aa:98:70:ca:b5:8d:5c:84:75:22:
db:69:d3:8c:ea:1e:c2:17:73:02:41:b3:aa:43:55:0b:14:ba:
86:37:38:b9:22:e5:3d:b3:cc:d4:b9:2d:31:f7:79:d4:0a:19:
12:7f:7b:36:ba:1f:68:96:01:c5:91:59:28:e9:a8:d3:74:6e:
ae:7c:09:03:bf:9e:c2:eb:19:8f:f1:4f:0e:2a:31:60:d7:3f:
6e:46:6d:00:1a:a0:cb:35:7f:81:c3:29:22:ce:29:98:c2:5f:
ba:75:e7:c8:f2:8f:64:70:aa:00:7e:6d:a7:aa:3e:d2:91:31:
68:c8:75:e4:1f:1b:65:3e:32:ab:9e:75:61:18:8a:1f:57:30:
95:7f:2b:47:5f:50:18:d3:f4:c0:31:7d:ea:09:f0:29:c8:94:
6e:e0:4c:32:18:98:c5:a2:45:63:92:6e:57:f3:55:b6:89:3c:
f6:25:24:11:4f:43:34:1d:a6:02:91:da:53:a8:3d:44:4c:70:
4a:b6:76:c9:ab:52:9d:12:61:97:21:9b:d0:c4:00:3f:b0:33:
fd:d1:65:34:22:c7:5a:4e:d5:36:b7:b9:54:b7:f0:db:b9:c1:
c2:df:20:c8:f6:26:07:f4:b9:ab:e7:ca:34:67:d1:b3:94:28:
61:a4:50:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmXI7hACcJdvFq35amawKozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNzI3MTEzNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE1MGY5YmEyZTY1MGEwZTlkZjQ3YThhYmJhMGVjMzUyYjdhMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKXkOVb1Bj/8+uvGZ/J8DTLyMwDG
5iTi7qY/emB6no51I01AX2atk1sSHH0kuGXLnkznv3HgAvr7P7ChFjM7YFQJBeLE
nV3/+dM6YNzSfbD8vWptPHFvw91o8YK1elO0RXNN0ONgToQifhkBD5rPsa4oej5C
Mh4VjD80TWFcc8vfIrzMuFOGfeuITA8xAdu1Z7C6PEeHs5bNrIBn7aObqfz0VQv1
+sxRgmVNS80Ls+dTeekhhOul1uxStOrDRUMccwM3sZIoWs7S2HGFeLs8EgkTZLG+
DU6qJMyXw075RAXsG9QqF0DWR2IE7i4SPgBFaCYQ7tkqrD0XF9mBGiaicwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0VD5ui5lCg6d9HqKu6DsNSt6MSMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUFJVUG02TG1VS0RwMzBlb3E3b093MUszb3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3k6MA0G
CSqGSIb3DQEBCwUAA4IBAQBWA3QuIPipK6qYcMq1jVyEdSLbadOM6h7CF3MCQbOq
Q1ULFLqGNzi5IuU9s8zUuS0x93nUChkSf3s2uh9olgHFkVko6ajTdG6ufAkDv57C
6xmP8U8OKjFg1z9uRm0AGqDLNX+BwykizimYwl+6defI8o9kcKoAfm2nqj7SkTFo
yHXkHxtlPjKrnnVhGIofVzCVfytHX1AY0/TAMX3qCfApyJRu4EwyGJjFokVjkm5X
81W2iTz2JSQRT0M0HaYCkdpTqD1ETHBKtnbJq1KdEmGXIZvQxAA/sDP90WU0Isda
TtU2t7lUt/DbucHC3yDI9iYH9Lmr58o0Z9GzlChhpFCV
-----END CERTIFICATE-----
Generated at Mon Aug 28 14:53:14 2023 by rpki-client on console-ams.rpki-client.org