Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rp5Vlmm0qB1VxlPSvhcw9rUjWKQ.roa
File: Rp5Vlmm0qB1VxlPSvhcw9rUjWKQ.roa (raw, json)
Hash identifier: bqYn5+7BBqaz68xwzV1QpSoP7q6TvRsK7C+ir+NCriA=
Subject key identifier: 46:9E:55:96:69:B4:A8:1D:55:C6:53:D2:BE:17:30:F6:B5:23:58:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E01934D7E1FAEA9B067F5A4F952B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rp5Vlmm0qB1VxlPSvhcw9rUjWKQ.roa
Signing time: Sun 01 Jan 2023 13:25:06 +0000
ROA not before: Sun 01 Jan 2023 13:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33802
IP address blocks: 87.120.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e0:19:34:d7:e1:fa:ea:9b:06:7f:5a:4f:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=469e559669b4a81d55c653d2be1730f6b52358a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:8a:ea:f1:f2:d7:ca:09:dc:08:ab:43:75:
5a:b4:6b:a5:89:a1:1c:0d:8c:e5:68:fe:3e:22:3e:
da:cd:4d:2e:ff:c7:07:d8:38:93:51:1a:5a:00:c6:
7c:01:f5:41:0a:45:36:bc:5b:5a:be:30:24:37:79:
e6:8d:0d:b7:7b:c4:af:f3:e6:3a:e4:d7:08:8a:18:
d3:99:77:08:84:da:e3:6c:e2:61:0f:b9:2a:f2:fb:
c3:cf:c5:a7:f6:f4:f4:29:e1:e1:1e:c4:8d:f2:59:
55:3f:c5:8e:5b:29:a8:1b:59:93:a6:12:56:56:0f:
79:3e:1e:07:b8:82:2d:dc:c2:a3:7b:8f:61:cb:4e:
e9:3d:38:a2:9f:94:79:5f:81:16:06:33:13:ae:c2:
d6:a7:72:ff:e5:56:7e:25:78:79:34:48:ad:82:99:
e8:77:88:a7:a9:90:6b:60:56:6a:c3:65:19:9d:30:
a2:0f:c1:75:31:07:26:67:c1:ab:0c:79:42:52:14:
59:c2:ee:e0:4a:cd:2b:ad:7c:8b:c0:c7:bc:33:29:
ee:60:b5:98:75:f1:0c:55:07:86:83:ba:a8:a2:a1:
7c:83:b9:cf:40:ab:ae:db:76:29:03:cb:60:c5:da:
ba:7c:41:fc:5f:ec:e1:16:67:68:31:ef:be:59:81:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9E:55:96:69:B4:A8:1D:55:C6:53:D2:BE:17:30:F6:B5:23:58:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rp5Vlmm0qB1VxlPSvhcw9rUjWKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cd:02:5f:68:eb:d9:af:57:16:d2:8a:eb:74:50:67:c2:63:
a6:9c:ae:d1:3b:24:e5:e6:38:41:fa:23:74:20:ce:16:a8:b7:
fa:c7:1e:17:86:36:91:e1:b3:f9:ee:53:6f:7f:18:86:aa:39:
21:22:91:00:a3:fb:76:a6:06:0a:b7:99:bf:26:ea:89:7d:a6:
f4:ee:80:85:5c:1e:a2:7c:c9:0d:1f:7d:5a:4d:c2:8b:09:8d:
3b:0b:a1:7c:2c:fa:24:16:27:22:58:3b:ab:a7:0b:61:42:46:
89:55:dc:59:e6:e4:c4:20:2a:c1:fd:6f:86:40:4a:15:ef:34:
4f:fd:a4:9d:5a:37:ab:49:e3:fb:0f:6d:19:f2:f2:86:39:25:
a9:77:2a:3f:a3:ed:a2:18:90:6f:cd:c8:f9:f4:98:fd:b7:97:
8b:42:cb:e1:de:ce:85:0e:0b:98:83:de:e8:bf:f2:8e:5d:59:
b6:49:1b:1f:b9:9b:6e:a3:eb:f7:e5:7f:78:bb:7c:59:d9:33:
14:e1:76:42:4c:92:08:eb:f3:dd:46:5a:b9:d3:36:fb:31:7e:
3a:98:e3:5f:6d:a0:4d:26:0e:5e:59:ee:ab:54:05:e4:f1:73:
30:d4:96:ff:f6:0a:e0:08:b1:b1:63:22:35:15:dc:3a:72:ed:
fa:36:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org