Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WUyE0bkQE0CI8xiIVposQf--a2A.roa
File: WUyE0bkQE0CI8xiIVposQf--a2A.roa (raw, json)
Hash identifier: vqpGAa8NCfeZ+fjxYqhzKPUnuYSwU0cj7Cm2frmB2n4=
Subject key identifier: 59:4C:84:D1:B9:10:13:40:88:F3:18:88:56:9A:2C:41:FF:BE:6B:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E2B1BA51BE28ED514988F9292358
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WUyE0bkQE0CI8xiIVposQf--a2A.roa
Signing time: Sun 01 Jan 2023 13:25:06 +0000
ROA not before: Sun 01 Jan 2023 13:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35448
IP address blocks: 87.120.225.0/24 maxlen: 24
87.120.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e2:b1:ba:51:be:28:ed:51:49:88:f9:29:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=594c84d1b910134088f31888569a2c41ffbe6b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:39:1b:1f:50:4f:d3:df:6d:0e:47:88:a8:
13:71:4d:52:bd:47:7e:8b:f5:fa:d3:22:22:30:2f:
bb:a5:74:5f:bf:d3:48:5d:f0:05:d4:72:23:11:74:
43:f6:97:61:9b:e4:a8:29:16:fa:58:39:86:e6:e2:
39:5a:ec:68:ca:4b:d3:c6:13:0c:f5:63:fc:f0:54:
18:c8:49:8b:89:3e:5a:68:8b:88:61:c5:af:32:01:
b7:53:24:2e:1b:c1:69:2e:b5:04:9f:49:ea:8f:fc:
e2:52:c5:89:c6:43:74:7b:c8:63:d7:b7:de:66:4c:
ea:f5:fc:1e:f4:1c:dd:d2:e3:b9:ad:8d:67:05:97:
c9:10:f5:48:b0:61:8e:f2:43:c8:c2:0c:f2:f2:4a:
45:99:60:33:3e:27:5e:ec:c0:09:aa:8e:88:aa:fc:
af:42:05:3f:6b:62:ca:4a:e7:1d:d5:bc:57:20:f7:
2f:99:73:c3:99:9b:dc:40:33:fe:9d:cf:26:0d:ad:
20:9e:42:47:80:04:a1:37:5f:f0:b7:8d:4f:08:e0:
16:d2:e6:3b:67:c6:3a:9d:26:62:ba:56:d5:ac:d9:
7a:60:b6:97:30:62:8b:80:ba:50:ff:5a:ec:ac:20:
79:b7:5e:08:14:d9:99:37:7f:a1:a2:e0:4c:11:ca:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:84:D1:B9:10:13:40:88:F3:18:88:56:9A:2C:41:FF:BE:6B:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WUyE0bkQE0CI8xiIVposQf--a2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.225.0/24
87.120.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:85:8b:87:63:b8:07:2d:fe:ef:d6:04:ed:07:72:c7:67:dd:
14:f2:3c:c8:7f:74:25:52:3a:03:3b:7c:fc:59:96:22:41:61:
84:09:5e:24:fa:72:aa:b0:00:5e:e1:76:dc:f4:e5:38:c9:ac:
27:95:ad:8c:07:43:42:ba:96:1c:e1:f1:c9:1c:c9:c7:f2:c3:
48:1d:f3:84:17:8e:3a:02:52:b5:8b:9f:4f:b2:fa:1a:95:bb:
aa:31:f5:32:0c:8e:cb:ae:b3:7f:d3:95:69:c3:17:84:f4:26:
74:20:c5:58:60:01:66:ba:d7:9a:0d:3c:b1:dd:cb:bc:e2:5c:
90:c9:59:37:5f:a6:ce:cc:cc:26:07:31:8a:16:f6:b5:74:ff:
63:fa:a6:fc:e8:d6:dc:5e:2f:a1:ac:90:c8:cd:cc:35:a7:a5:
bc:37:25:0d:a1:e5:a3:22:48:10:64:48:81:4b:2a:0e:f6:40:
db:5d:d6:5c:45:d6:8d:9c:24:5b:98:c8:32:81:6f:0f:11:f9:
df:81:a0:0c:65:fb:68:b7:98:8a:46:e2:0b:e8:2e:22:fb:c0:
8a:8e:c5:e4:85:ec:c3:82:38:1b:0d:08:f1:d9:7e:3c:b6:5d:
f7:a1:75:b2:86:48:d9:48:80:51:fc:0f:f6:64:28:0a:ac:28:
03:4b:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org