Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PswWjhWQ4c7HtQ2B3CDGVP-ipJ8.roa
File: PswWjhWQ4c7HtQ2B3CDGVP-ipJ8.roa (raw, json)
Hash identifier: kRicgpknVHzMrxIPwPSSsfdNbzg0xFTSqpchF7wi4Hk=
Subject key identifier: 3E:CC:16:8E:15:90:E1:CE:C7:B5:0D:81:DC:20:C6:54:FF:A2:A4:9F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCCD574116DF24241671E9E2CAE433
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PswWjhWQ4c7HtQ2B3CDGVP-ipJ8.roa
Signing time: Tue 02 Jan 2024 06:29:22 +0000
ROA not before: Tue 02 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:cd:57:41:16:df:24:24:16:71:e9:e2:ca:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ecc168e1590e1cec7b50d81dc20c654ffa2a49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:08:a0:a0:91:04:11:2a:ae:e7:e6:97:10:05:
ac:22:02:ad:23:a2:ba:7a:d0:20:72:61:58:a9:b2:
25:c4:79:6f:95:a8:bb:22:9e:71:4c:db:9c:2c:a8:
2d:7c:7b:51:b5:bd:03:65:da:b4:6a:12:ff:a7:29:
07:69:33:95:a1:c5:a7:ce:b5:dc:9c:3e:52:13:15:
b5:55:ba:17:32:cf:65:2a:9e:6a:77:73:f7:cb:d8:
af:9e:dc:32:33:2f:b7:d6:32:5f:ef:bc:8a:ba:0c:
6c:8f:f4:d2:c6:d4:91:61:02:8b:75:85:16:7f:b4:
68:e3:fd:ab:36:ca:b7:fe:66:b4:1a:c3:70:f2:2a:
38:48:3d:e9:67:cb:76:48:85:5d:1f:e0:20:17:7b:
25:06:da:52:05:5f:f2:23:9e:11:22:98:b7:41:36:
36:0e:7d:1c:6d:08:ee:05:01:af:12:8f:1d:fb:16:
47:60:93:7d:43:03:27:f1:8d:9a:78:d0:37:67:8a:
59:73:ef:17:16:45:8b:08:9f:16:e3:9c:0a:4c:59:
e0:a6:0e:84:97:e7:d3:d3:e3:58:e9:80:d1:b6:88:
9e:86:a5:d4:02:71:fd:d3:79:cc:cd:35:f0:2d:ae:
ab:c8:37:7c:37:4b:ca:27:51:0e:82:8c:95:33:f1:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CC:16:8E:15:90:E1:CE:C7:B5:0D:81:DC:20:C6:54:FF:A2:A4:9F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PswWjhWQ4c7HtQ2B3CDGVP-ipJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:44:de:3b:42:e5:c8:3d:5f:c3:14:e6:65:bb:65:d6:4e:29:
97:8e:06:76:4c:49:ca:8a:a3:35:20:7f:3d:1a:f6:aa:93:03:
5e:a2:e6:c2:9f:03:5f:78:5f:b9:9c:74:fc:a8:27:1b:a7:e8:
44:07:ee:b1:df:2f:9d:1a:58:d7:71:a1:70:b5:c0:5b:55:f3:
d5:6f:93:b9:3b:85:47:5e:c9:cd:00:75:3e:30:ee:82:e8:4f:
de:4f:fd:10:6e:14:c9:d7:37:20:77:fc:24:95:f4:ab:02:b5:
62:65:45:3d:70:52:a3:34:e4:62:fe:2e:f7:80:09:fa:1a:19:
a5:c9:e7:37:c7:78:6c:0a:a1:07:8c:bd:ad:6a:23:0e:50:01:
55:50:f0:07:77:f5:e2:e6:5a:fa:5a:ec:ab:13:10:b2:e8:a3:
b1:66:fa:92:68:f6:1d:19:fb:7b:dd:94:44:33:1e:2d:22:00:
8e:68:29:3c:4d:a5:f2:85:d7:9a:a1:8f:57:28:0e:7c:8b:35:
aa:4d:7a:5e:df:81:50:21:54:16:64:27:37:02:73:4b:51:f6:
5b:43:53:b6:02:7e:76:a5:a6:f9:14:c0:8c:cb:73:8b:a6:52:
74:f5:aa:ea:7b:8b:8a:48:95:3f:e2:70:63:87:2d:bb:fc:00:
aa:d8:3f:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3M1XQRbfJCQWceniyuQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWNjMTY4ZTE1OTBlMWNlYzdiNTBkODFkYzIwYzY1NGZmYTJhNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AigoJEEESqu5+aXEAWsIgKtI6K6
etAgcmFYqbIlxHlvlai7Ip5xTNucLKgtfHtRtb0DZdq0ahL/pykHaTOVocWnzrXc
nD5SExW1VboXMs9lKp5qd3P3y9ivntwyMy+31jJf77yKugxsj/TSxtSRYQKLdYUW
f7Ro4/2rNsq3/ma0GsNw8io4SD3pZ8t2SIVdH+AgF3slBtpSBV/yI54RIpi3QTY2
Dn0cbQjuBQGvEo8d+xZHYJN9QwMn8Y2aeNA3Z4pZc+8XFkWLCJ8W45wKTFngpg6E
l+fT0+NY6YDRtoiehqXUAnH903nMzTXwLa6ryDd8N0vKJ1EOgoyVM/FiWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7MFo4VkOHOx7UNgdwgxlT/oqSfMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUHN3V2poV1E0YzdIdFEyQjNDREdWUC1pcEo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ncMA0G
CSqGSIb3DQEBCwUAA4IBAQCeRN47QuXIPV/DFOZlu2XWTimXjgZ2TEnKiqM1IH89
GvaqkwNeoubCnwNfeF+5nHT8qCcbp+hEB+6x3y+dGljXcaFwtcBbVfPVb5O5O4VH
XsnNAHU+MO6C6E/eT/0QbhTJ1zcgd/wklfSrArViZUU9cFKjNORi/i73gAn6Ghml
yec3x3hsCqEHjL2taiMOUAFVUPAHd/Xi5lr6WuyrExCy6KOxZvqSaPYdGft73ZRE
Mx4tIgCOaCk8TaXyhdeaoY9XKA58izWqTXpe34FQIVQWZCc3AnNLUfZbQ1O2An52
pab5FMCMy3OLplJ09arqe4uKSJU/4nBjhy27/ACq2D9u
-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:44 2024 by rpki-client on console-ams.rpki-client.org