Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Swuy4kcC-b19uwYOKfPQXrvZeFk.roa
File: Swuy4kcC-b19uwYOKfPQXrvZeFk.roa (raw, json)
Hash identifier: wlmhu4wtInnxC35j+/C3CRQkUps/1WB3C+ufY36KEiQ=
Subject key identifier: 4B:0B:B2:E2:47:02:F9:BD:7D:BB:06:0E:29:F3:D0:5E:BB:D9:78:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019112A6782193845BB17608FA4D198AC769
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Swuy4kcC-b19uwYOKfPQXrvZeFk.roa
Signing time: Fri 02 Aug 2024 10:33:05 +0000
ROA not before: Fri 02 Aug 2024 10:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 12:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:a6:78:21:93:84:5b:b1:76:08:fa:4d:19:8a:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 2 10:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b0bb2e24702f9bd7dbb060e29f3d05ebbd97859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:0c:74:30:ee:99:57:22:ea:95:92:b5:89:
50:03:62:d3:e8:81:2e:87:22:2f:e6:d8:b4:44:d7:
fc:61:97:39:db:67:52:e8:f0:d8:d6:21:c4:a8:11:
2a:37:4b:b5:94:c6:fb:c9:ac:ca:d0:9f:8d:4c:53:
71:35:db:15:bd:33:2b:f0:15:1c:d5:85:66:b0:95:
e6:6d:a2:76:fc:2f:2f:37:d8:c3:68:52:93:3c:cb:
66:dc:95:4f:34:a2:85:ad:29:e2:b7:1e:79:a0:de:
74:c3:1d:36:9f:b3:c9:f2:6f:cb:d0:00:05:b1:57:
da:58:e1:38:9c:d3:d1:e7:64:ca:6c:9b:e2:4d:16:
0c:2a:b9:04:e9:95:b7:07:29:a4:44:19:ea:69:65:
1a:81:db:c8:70:63:04:a0:4c:5a:ec:a2:e6:7a:63:
d4:b0:e1:b7:a5:40:bd:9b:6a:e0:e8:19:63:68:76:
fa:4b:7d:3a:a6:3a:4d:a9:2f:be:07:76:7b:1e:b4:
df:f5:23:dc:c0:6b:af:3c:42:60:fe:6b:7a:ed:f6:
f7:36:55:87:74:82:c1:41:5d:10:a2:d6:b1:ee:9a:
2a:1b:7b:4a:b7:cb:51:9a:2c:df:f1:d6:55:c9:3f:
cc:8d:e8:25:2b:c2:ac:6e:1c:67:ba:58:bc:95:f8:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:B2:E2:47:02:F9:BD:7D:BB:06:0E:29:F3:D0:5E:BB:D9:78:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Swuy4kcC-b19uwYOKfPQXrvZeFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.38.0/24
87.121.45.0/24
91.92.16.0/24
94.156.2.0/24
Signature Algorithm: sha256WithRSAEncryption
21:53:1d:74:7e:53:7a:2e:41:3e:db:65:39:da:b3:c0:a1:82:
ca:6f:ef:9e:16:a8:40:d5:c5:e5:1a:d9:e7:98:30:96:a0:f2:
81:30:62:08:41:ca:ad:01:a3:10:8c:bc:c8:9c:9c:60:a2:db:
c6:2e:7b:8d:f1:92:97:0b:bd:9c:ce:4f:07:03:d6:d6:8c:b4:
90:bb:3d:f7:1c:03:f4:2c:f2:34:9d:7c:3b:b0:f5:b3:08:b7:
57:71:e2:cd:77:3f:e9:34:98:fe:e3:2d:cd:3a:bf:70:90:9e:
4a:6b:82:04:cf:a4:17:a1:a5:60:a8:96:d5:3d:e4:72:14:d8:
32:7b:70:2b:5b:81:11:fb:3a:30:f9:3d:29:a2:d2:4d:af:a6:
2f:20:65:94:15:2c:d4:df:bd:78:aa:bb:de:1b:f3:0f:cf:29:
12:2e:3a:8f:5c:74:41:78:77:58:15:94:83:57:9a:78:1e:05:
e9:4f:75:2e:2e:de:34:fb:80:2e:48:2e:df:3c:3a:a2:69:9c:
51:00:f0:e1:a7:61:1d:ac:81:cb:75:5b:74:21:e5:48:33:63:
16:12:fd:36:c4:87:7e:a2:59:67:ac:85:f7:8b:87:39:0a:fe:
26:fe:f4:bc:6f:d5:96:fa:08:85:cc:23:38:a5:13:33:91:2b:
be:12:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 14:11:18 2024 by rpki-client on console-fra.rpki-client.org