Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WDQBcJD6zn-6CxsYZXK6oT8H3Lw.roa
File: WDQBcJD6zn-6CxsYZXK6oT8H3Lw.roa (raw, json)
Hash identifier: +pNWIGkxOutvLqTuKeLDZv8STZUDmaZqIuY4PO/94dM=
Subject key identifier: 58:34:01:70:90:FA:CE:7F:BA:0B:1B:18:65:72:BA:A1:3F:07:DC:BC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DAF5F1B7E6D88306F5F12F79EFAC3A763
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WDQBcJD6zn-6CxsYZXK6oT8H3Lw.roa
Signing time: Fri 16 Feb 2024 00:44:22 +0000
ROA not before: Fri 16 Feb 2024 00:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:5f:1b:7e:6d:88:30:6f:5f:12:f7:9e:fa:c3:a7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 16 00:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5834017090face7fba0b1b186572baa13f07dcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:12:3d:39:e8:dc:13:fb:58:9b:75:96:c7:
18:27:4a:66:80:00:e3:13:8d:77:57:1c:ab:97:2b:
b6:c2:e0:c9:1e:18:07:88:95:05:68:ad:fa:3f:39:
94:29:1b:53:57:c9:11:be:ed:1f:c2:49:73:39:be:
8e:8a:de:60:f8:88:14:a2:fb:36:a5:a0:27:81:3f:
b7:e8:d8:bb:15:09:93:e4:24:ce:57:b7:51:5c:84:
9b:b8:38:6f:b1:41:76:8c:b1:2c:52:75:aa:b8:37:
bc:d6:f9:e5:ea:97:06:32:db:cb:ba:57:64:94:5d:
40:e2:98:ba:2b:91:a2:85:8a:58:e6:0e:fa:49:81:
36:32:71:05:54:3f:a6:fb:a2:72:e0:a2:1a:a1:cb:
75:60:b3:99:97:bc:7b:8b:79:60:62:c3:ab:ea:0a:
d4:42:ed:d5:48:04:91:dd:78:26:c8:b0:85:3b:7a:
0c:ab:47:81:14:79:67:37:84:4f:97:c7:ec:82:97:
c5:57:81:86:ab:d3:d3:3f:c3:67:fe:1f:e1:da:26:
c7:b5:87:89:94:05:58:ad:c6:9d:4a:e6:13:dc:85:
9f:c0:5f:39:28:ff:55:e5:77:18:5c:cd:91:c1:3d:
62:a6:5d:01:27:7c:1e:66:56:d9:4d:43:ae:c5:68:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:01:70:90:FA:CE:7F:BA:0B:1B:18:65:72:BA:A1:3F:07:DC:BC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WDQBcJD6zn-6CxsYZXK6oT8H3Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.60.0/22
87.121.114.0/23
93.123.75.0/24
93.123.80.0/24
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
97:19:3a:f3:e2:e1:7c:cc:95:51:2c:16:97:84:86:0b:bc:2a:
ae:47:31:0c:9f:7a:d5:29:ac:c7:42:62:03:aa:c0:1a:5f:ba:
07:7f:13:b4:3a:be:ee:bb:fa:54:d6:d7:bb:56:2b:b9:7e:d0:
21:7a:3a:c0:fd:fa:ca:05:f9:af:5a:e9:8c:d5:f9:6b:df:4f:
1a:34:cf:8e:8f:15:e5:f5:58:71:ec:de:87:cf:87:a0:88:02:
49:c9:92:05:da:8c:b6:2f:74:5f:c8:9e:8f:9c:bc:4e:71:0d:
e5:31:5e:b8:d1:f2:10:b3:55:3e:a2:70:b5:92:ff:0c:43:d9:
68:94:d7:be:ae:27:e8:42:26:0a:b7:8e:99:6f:ce:11:97:29:
df:60:0a:9e:eb:da:b2:40:f9:43:8b:94:f1:53:11:4b:63:3c:
25:7d:8f:85:85:53:c4:18:ec:7a:49:21:cc:75:2d:25:95:84:
9d:a5:28:3d:27:5a:d4:cc:72:2b:72:a6:a6:1a:4a:74:3b:83:
db:51:6f:8b:c2:7b:38:d8:0a:9b:4d:22:13:f5:2d:16:61:23:
a1:f8:a5:09:6c:5a:f6:73:2e:5f:7a:aa:d0:99:d7:66:ad:7d:
79:52:bb:de:6c:d5:9c:27:e6:95:18:2f:04:30:50:0b:ed:dc:
65:d2:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:15 2024 by rpki-client on console-ams.rpki-client.org