Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vkz_RxpTaBgAf1YMQQXp8nDfOoo.roa
File: Vkz_RxpTaBgAf1YMQQXp8nDfOoo.roa (raw, json)
Hash identifier: Smhq+L4clPCogVxVCKcTKBNCGyxLNPIW5E8IXi7zVHI=
Subject key identifier: 56:4C:FF:47:1A:53:68:18:00:7F:56:0C:41:05:E9:F2:70:DF:3A:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E82EB43809191CD5677215EF43A9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vkz_RxpTaBgAf1YMQQXp8nDfOoo.roa
Signing time: Sun 01 Jan 2023 13:25:08 +0000
ROA not before: Sun 01 Jan 2023 13:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42942
IP address blocks: 87.120.228.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e8:2e:b4:38:09:19:1c:d5:67:72:15:ef:43:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=564cff471a536818007f560c4105e9f270df3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:49:00:51:ee:d6:95:36:85:fe:6d:33:06:
67:d4:29:e5:39:9f:0f:65:f4:51:48:92:07:98:cb:
0f:75:62:05:68:00:cb:33:9c:eb:d2:cc:7e:d6:b4:
9c:f9:34:d9:65:2b:4b:a8:9d:70:2b:2a:bd:b3:b0:
70:fb:94:f9:43:21:95:c3:45:25:83:5e:e9:12:18:
5f:a3:41:04:85:25:a3:a6:ed:39:be:56:93:09:cc:
87:14:9e:ff:24:91:f4:8c:4a:6d:b3:d3:36:81:f5:
01:6f:b9:da:83:2b:34:8e:67:34:02:68:fa:35:d1:
8c:4e:1a:d5:21:f2:f1:1a:c5:69:f9:ee:35:60:a0:
d8:cf:fb:5a:61:77:a2:14:dd:39:50:67:52:01:1c:
37:89:3e:0b:38:af:a2:7a:48:df:db:15:0a:0f:f8:
71:9b:25:96:40:82:a0:77:34:de:13:80:5a:eb:1d:
0b:94:3e:b7:88:db:15:c5:53:dc:b0:ae:99:50:54:
8a:86:05:57:4c:ab:40:2d:b3:05:8e:7b:e6:11:16:
db:e8:52:fd:56:d7:65:35:b2:ce:a4:61:a6:e6:d6:
2d:2b:fc:b9:b8:cb:3d:49:38:d0:dc:83:1e:6e:35:
d6:20:86:5b:e2:dd:44:9d:6c:93:42:02:c6:82:05:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:FF:47:1A:53:68:18:00:7F:56:0C:41:05:E9:F2:70:DF:3A:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vkz_RxpTaBgAf1YMQQXp8nDfOoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.228.0/23
Signature Algorithm: sha256WithRSAEncryption
11:0e:df:33:a1:83:ca:7e:91:9a:06:24:41:43:46:f8:ab:43:
6c:3f:e8:6e:b3:55:d5:31:98:7e:ea:12:64:78:80:9b:e8:8a:
9b:6b:f6:ca:81:3c:0a:dd:cc:86:d9:ad:51:bb:90:96:16:28:
87:01:c5:5b:de:8d:d4:88:f1:45:67:a7:7d:1f:3e:f7:d0:69:
1b:3c:af:17:04:25:6d:e6:0f:31:5d:bc:1d:e9:2e:57:43:ad:
f7:a2:8f:b3:10:4a:b1:28:85:66:5f:1b:24:2c:ed:0a:c0:15:
64:00:c4:c6:b7:7e:e6:55:0e:8a:64:97:03:a6:26:bb:c6:6c:
f8:3e:0e:cd:b3:0f:62:ef:00:71:51:26:c4:1a:e8:25:a7:37:
29:2b:23:89:66:90:3f:be:3c:5b:b0:ac:cd:0f:69:77:af:a1:
51:28:f3:09:a0:b4:16:d8:33:94:53:59:af:6f:fa:b0:c0:b3:
25:3b:55:f6:a6:6b:5f:72:97:23:50:e7:01:a0:92:0c:8b:43:
ad:88:a3:97:f3:a1:3c:b6:09:62:18:29:7e:b5:01:3f:d4:40:
54:e6:c6:5b:89:1a:3d:c8:cf:65:4b:5b:19:9c:a0:15:ec:b4:
65:87:90:b9:40:5c:98:65:de:a8:e0:15:c6:95:f7:37:f2:0b:
cb:68:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org