Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UAvLQ99WkFxRJIanatOU2UJmTOc.roa
File: UAvLQ99WkFxRJIanatOU2UJmTOc.roa (raw, json)
Hash identifier: zTp/TQ/6479w1nChYD9eOecCA+BybX95VPPfJGsguPk=
Subject key identifier: 50:0B:CB:43:DF:56:90:5C:51:24:86:A7:6A:D3:94:D9:42:66:4C:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C242C7731D4990A8B354EED10BE4228E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UAvLQ99WkFxRJIanatOU2UJmTOc.roa
Signing time: Wed 17 Jul 2024 19:54:34 +0000
ROA not before: Wed 17 Jul 2024 19:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 87.121.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:42:c7:73:1d:49:90:a8:b3:54:ee:d1:0b:e4:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 19:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=500bcb43df56905c512486a76ad394d942664ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:80:47:b4:3b:fc:67:aa:60:78:b5:b1:02:
6a:24:49:76:3a:55:f7:76:52:2a:5f:90:e4:54:40:
82:fd:54:d9:5d:a7:ca:9a:46:0a:58:14:f6:b0:e1:
a4:30:4a:a9:ea:d2:36:c4:19:5e:e9:79:61:72:83:
34:d1:17:00:23:13:d8:d2:fc:02:9f:51:f0:cf:e6:
fb:31:d5:51:d2:88:3c:4d:8f:44:01:f6:4c:54:86:
70:15:4f:12:9d:72:fa:9c:c1:5d:90:71:1a:68:76:
51:85:3d:c0:7a:16:87:a8:36:12:32:5b:1d:48:89:
17:2a:b1:d9:34:db:23:f1:eb:6a:0c:14:2a:f4:b4:
7b:12:99:b7:c6:25:58:3b:62:30:13:57:71:d2:9a:
1d:41:48:e3:2d:96:77:35:59:22:c7:f3:8b:62:1f:
95:da:cf:eb:c0:37:82:25:29:9d:1d:25:7b:ab:84:
dd:23:eb:3f:c5:50:1d:92:d3:5a:fd:ed:ff:37:7e:
65:9c:cb:a7:76:72:3e:36:7a:72:75:89:04:2a:cc:
a2:c8:57:a5:e2:41:11:ca:a9:75:55:05:d3:c4:c6:
d7:ed:80:dd:4d:97:d5:4d:04:75:42:b9:7f:a6:2c:
7b:20:2a:fc:76:69:81:10:e3:17:eb:1e:12:92:2f:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:CB:43:DF:56:90:5C:51:24:86:A7:6A:D3:94:D9:42:66:4C:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UAvLQ99WkFxRJIanatOU2UJmTOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0a:12:93:fc:47:cc:07:8b:2d:d6:9e:5a:65:b1:ce:f4:cc:
d1:52:ac:cd:5e:32:e0:c7:87:ef:b3:0d:c0:30:8c:3e:5d:61:
ea:0d:57:6d:6c:58:fd:be:85:8f:78:37:05:14:71:4a:f7:c6:
c5:07:55:6d:5a:f3:14:18:22:9b:6a:5c:ce:ac:1e:69:96:75:
c4:01:b3:3c:ce:c7:02:d9:59:5d:61:36:71:80:62:c7:b6:ab:
6f:47:4f:1b:7d:b3:57:5d:86:ca:5e:c5:18:69:dd:3f:97:91:
09:0c:d2:00:4a:f0:9f:6a:71:47:bd:24:58:d8:a8:eb:6b:61:
bd:3f:92:da:03:9a:bb:c9:00:80:08:ea:82:25:35:60:80:26:
b9:47:88:04:57:e3:bd:47:37:6b:8f:7b:61:6e:07:d4:52:33:
0d:2a:1d:a0:cc:51:0d:1f:51:90:d6:37:6f:72:1b:f9:2c:b3:
f9:5d:50:c3:56:9f:1d:08:2b:ce:95:0d:de:19:79:f6:65:28:
7a:38:2b:ec:d9:28:4e:34:d4:be:b0:15:f6:98:32:2d:cf:c5:
96:c9:51:fc:fb:1d:84:12:5d:72:d1:1a:e8:ca:19:ad:eb:df:
84:ec:57:4f:1b:ef:59:6d:a4:6c:dd:35:d1:13:5f:09:e8:1f:
01:b2:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:31 2025 by rpki-client