Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VrfIoCnahsWgiV0sW3zXmBBSX1g.roa
File: VrfIoCnahsWgiV0sW3zXmBBSX1g.roa (raw, json)
Hash identifier: i47J26RwgN3dv/otrMH7lXN6A/EQRFHQYjCIP9fcXHA=
Subject key identifier: 56:B7:C8:A0:29:DA:86:C5:A0:89:5D:2C:5B:7C:D7:98:10:52:5F:58
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019333FD7B02015DC6C72F038759907BF76F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VrfIoCnahsWgiV0sW3zXmBBSX1g.roa
Signing time: Sat 16 Nov 2024 08:01:10 +0000
ROA not before: Sat 16 Nov 2024 08:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 87.120.158.0/23 maxlen: 24
93.123.75.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:33:fd:7b:02:01:5d:c6:c7:2f:03:87:59:90:7b:f7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 16 08:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b7c8a029da86c5a0895d2c5b7cd79810525f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:4c:d2:13:64:51:95:01:1c:0d:5f:89:e4:
4d:71:32:f2:7b:17:15:f4:10:17:96:31:fb:f4:3f:
58:1b:10:d1:cc:4f:75:f1:52:fa:f6:f4:a8:d8:5f:
3e:9b:01:c1:02:59:e9:14:be:5c:47:49:ec:7e:95:
9e:59:94:79:0a:bc:a8:55:f4:22:50:57:f6:b1:33:
4c:9f:87:3f:bc:18:1e:20:f1:d1:a1:b8:c5:7b:4b:
2d:d1:88:cc:ef:b7:4e:ec:c3:dd:f2:92:a2:2a:c9:
84:ff:8d:7d:12:cf:07:22:8e:ea:52:0b:dc:94:03:
b5:21:7e:2c:a6:5b:fc:54:f8:2d:d2:96:2b:ec:f9:
28:ae:12:f7:78:09:ec:88:39:95:c4:88:bd:c7:c9:
d5:0a:69:52:f7:5b:80:b1:ad:5c:56:71:57:4d:fa:
52:f5:b7:5d:35:db:fe:de:e2:9f:1d:ba:c9:76:64:
f6:10:ee:36:51:e6:ca:96:18:10:6b:8f:6e:fe:1b:
79:3a:50:20:3b:76:c5:4b:f3:38:fd:46:2c:42:e5:
fb:85:b1:ee:74:23:2d:6e:65:f5:be:7b:9b:bb:b4:
ed:8e:63:1c:db:a2:c7:32:51:01:30:79:51:2a:c9:
a7:79:7e:59:de:46:62:45:6b:82:4b:33:22:9c:ef:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:C8:A0:29:DA:86:C5:A0:89:5D:2C:5B:7C:D7:98:10:52:5F:58
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VrfIoCnahsWgiV0sW3zXmBBSX1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.158.0/23
93.123.75.0/24
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4b:d5:fa:de:b2:b3:87:a1:51:18:da:bb:13:c9:c4:aa:34:
88:c6:1a:43:4a:16:34:39:fd:b8:aa:5a:00:23:f0:f1:6b:4f:
95:29:a8:3f:7e:62:88:97:61:f0:46:21:69:84:e6:da:e3:b7:
2f:fb:0c:8a:20:3c:e3:90:67:83:a1:62:0b:56:cb:88:cd:c8:
a8:b8:ab:95:cb:de:52:a3:7e:3a:25:b7:51:f1:a5:32:ef:86:
3c:15:01:2d:a8:df:c7:f8:aa:10:2f:15:b1:b2:54:d7:2c:97:
f3:39:ce:ef:f7:bd:da:be:32:ee:8a:d7:b0:36:da:9b:52:dc:
73:a3:97:63:6d:9d:8e:58:46:8c:37:04:f0:ce:f0:95:c6:ac:
db:25:e6:05:fe:47:d1:c5:28:0c:61:d5:1c:0a:73:14:19:92:
f6:b0:c5:08:e7:b2:b0:86:d2:a6:bc:98:84:4b:f8:04:a6:c6:
9c:0c:02:f6:76:75:18:67:99:6d:8d:61:d0:06:e4:2a:a0:f4:
29:f0:ea:f6:3e:c7:45:81:f1:bb:87:b4:84:35:44:84:c7:af:
65:dd:82:cd:04:68:70:54:6f:d3:70:2d:a8:c6:f4:8c:54:ef:
b4:77:7a:7c:b9:a9:e2:64:17:be:90:44:f5:1e:54:35:7f:b9:
20:d4:53:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZMz/XsCAV3Gxy8Dh1mQe/dvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTE2MDgwMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmI3YzhhMDI5ZGE4NmM1YTA4OTVkMmM1YjdjZDc5ODEwNTI1ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijpM0hNkUZUBHA1fieRNcTLyexcV
9BAXljH79D9YGxDRzE918VL69vSo2F8+mwHBAlnpFL5cR0nsfpWeWZR5CryoVfQi
UFf2sTNMn4c/vBgeIPHRobjFe0st0YjM77dO7MPd8pKiKsmE/419Es8HIo7qUgvc
lAO1IX4splv8VPgt0pYr7PkorhL3eAnsiDmVxIi9x8nVCmlS91uAsa1cVnFXTfpS
9bddNdv+3uKfHbrJdmT2EO42UebKlhgQa49u/ht5OlAgO3bFS/M4/UYsQuX7hbHu
dCMtbmX1vnubu7TtjmMc26LHMlEBMHlRKsmneX5Z3kZiRWuCSzMinO/UsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFa3yKAp2obFoIldLFt815gQUl9YMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVnJmSW9DbmFoc1dnaVYwc1czelhtQkJTWDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBV3ieAwQA
XXtLAwQAXpwOMA0GCSqGSIb3DQEBCwUAA4IBAQAoS9X63rKzh6FRGNq7E8nEqjSI
xhpDShY0Of24qloAI/Dxa0+VKag/fmKIl2HwRiFphOba47cv+wyKIDzjkGeDoWIL
VsuIzciouKuVy95So346JbdR8aUy74Y8FQEtqN/H+KoQLxWxslTXLJfzOc7v973a
vjLuitewNtqbUtxzo5djbZ2OWEaMNwTwzvCVxqzbJeYF/kfRxSgMYdUcCnMUGZL2
sMUI57KwhtKmvJiES/gEpsacDAL2dnUYZ5ltjWHQBuQqoPQp8Or2PsdFgfG7h7SE
NUSEx69l3YLNBGhwVG/TcC2oxvSMVO+0d3p8uaniZBe+kET1HlQ1f7kg1FPI
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:49 2025 by rpki-client