Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ri9u76FkKuHu5Dpyo-wv0fdvr8c.roa
File: Ri9u76FkKuHu5Dpyo-wv0fdvr8c.roa (raw, json)
Hash identifier: JTFARoP8gtAAR4bbjdM9ZS52od+TO5j+J9rm3XrydU4=
Subject key identifier: 46:2F:6E:EF:A1:64:2A:E1:EE:E4:3A:72:A3:EC:2F:D1:F7:6F:AF:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F11E5D64731711233E3052D8A91F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ri9u76FkKuHu5Dpyo-wv0fdvr8c.roa
Signing time: Sun 01 Jan 2023 13:25:10 +0000
ROA not before: Sun 01 Jan 2023 13:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49882
IP address blocks: 87.120.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f1:1e:5d:64:73:17:11:23:3e:30:52:d8:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=462f6eefa1642ae1eee43a72a3ec2fd1f76fafc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:96:99:85:a8:ce:95:24:a5:1e:66:e2:63:
fe:8e:57:ff:c6:31:de:65:4d:d2:69:a0:7a:fb:d2:
ee:a2:54:2a:1b:0a:62:90:4a:ac:57:b6:86:fa:7d:
3f:1f:15:13:75:0d:38:aa:6f:f1:2e:2f:25:46:7a:
47:fb:5d:69:94:75:4d:f5:21:81:17:dc:50:a2:9f:
dc:ee:c4:9f:13:2d:ba:e3:43:50:cd:c7:d9:7b:c9:
17:4e:68:01:94:af:22:e8:45:b2:0e:b1:7d:95:40:
10:d8:a4:90:8b:cf:3b:60:59:04:ba:d0:50:22:be:
22:c5:1b:4a:65:21:04:30:ed:03:20:fa:85:2a:85:
a0:f7:5c:78:c1:40:10:ad:7a:da:ff:c3:92:95:d5:
cc:4a:f8:52:ef:75:0a:a4:88:21:69:7a:8a:4e:53:
aa:34:94:1e:b2:3f:24:c6:8e:b1:16:0e:ed:e6:ef:
8c:3a:9c:d9:ee:eb:2a:b0:60:97:69:f9:3b:4c:e6:
b4:af:cc:98:b3:fb:87:ee:71:4e:61:cd:c5:dc:6a:
5b:05:98:4c:e7:4e:da:0a:49:67:89:c5:d1:5c:30:
14:00:50:82:27:12:91:ce:0d:6e:36:3c:05:63:bd:
2f:fd:5f:8d:c3:68:61:bf:f1:30:7c:0a:4f:3f:82:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:6E:EF:A1:64:2A:E1:EE:E4:3A:72:A3:EC:2F:D1:F7:6F:AF:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ri9u76FkKuHu5Dpyo-wv0fdvr8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4b:91:c9:52:ac:d7:67:2b:b3:ba:52:3f:46:64:85:bf:93:
e8:99:1b:22:2e:12:80:d6:b9:d7:66:c7:64:b8:ea:31:9c:d8:
f7:ce:ba:e5:82:37:70:2f:93:ba:fd:37:95:2f:47:60:2f:ea:
da:72:1b:df:61:c4:42:89:2e:94:38:93:e5:65:f2:89:06:55:
8c:5e:df:41:46:92:23:12:b0:61:11:ef:86:98:4a:7f:c8:97:
0c:01:5a:1e:ca:88:29:e8:6a:20:d9:84:50:56:38:8f:ce:ce:
3a:64:30:5c:b5:da:a0:88:2c:ac:6f:a8:ef:a7:d1:aa:14:ba:
e2:22:2e:0d:9f:58:0a:f8:b7:dc:05:52:35:91:a5:7c:2c:33:
e4:e0:81:20:7b:38:97:77:be:cc:16:98:e1:2b:f3:c0:57:46:
38:49:fe:98:bb:b5:4f:3e:5f:54:bb:0a:58:71:f5:25:e3:f6:
01:45:f1:19:69:df:35:32:8f:a6:0e:d0:c8:7b:61:03:02:2e:
fd:43:09:02:63:12:a9:d7:53:93:6e:ff:2d:82:be:f4:d2:27:
8b:a0:c4:85:4e:23:4e:bf:a4:80:ba:fb:03:0d:19:d8:f6:47:
e3:9d:1a:74:02:04:7b:4c:8f:c2:05:90:8b:6c:80:d4:76:cb:
29:32:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org