Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XDdKt4MX1oWvQ1ZAiKyyO58seRQ.roa
File: XDdKt4MX1oWvQ1ZAiKyyO58seRQ.roa (raw, json)
Hash identifier: stfrpMA8wQdxqo7IP4sc978WrlGNlIhIHtowwyivQTs=
Subject key identifier: 5C:37:4A:B7:83:17:D6:85:AF:43:56:40:88:AC:B2:3B:9F:2C:79:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191B694AF29DDA2C5DA8C37993260B16D89
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XDdKt4MX1oWvQ1ZAiKyyO58seRQ.roa
Signing time: Tue 03 Sep 2024 06:31:23 +0000
ROA not before: Tue 03 Sep 2024 06:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215292
IP address blocks: 87.121.104.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 09:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:94:af:29:dd:a2:c5:da:8c:37:99:32:60:b1:6d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 3 06:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c374ab78317d685af43564088acb23b9f2c7914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:d6:5c:82:cc:b9:80:e4:27:26:40:14:4f:
39:46:4c:af:77:2f:43:26:5c:4c:91:4d:f3:a8:59:
87:c5:54:4c:96:99:8d:03:ee:7f:69:0c:f1:19:3d:
1d:b7:99:4f:9a:5a:24:ce:29:62:9d:b9:aa:60:01:
18:2b:c2:57:f4:a6:ad:97:48:3a:81:2c:f5:0b:7f:
4c:b9:78:34:7e:a0:fb:5f:04:3b:07:e4:09:d5:3e:
16:8d:84:ca:dc:a0:a5:dc:10:e6:09:fa:a5:b6:d0:
7f:78:f1:64:f9:e8:a9:a8:9b:38:2f:65:a0:1f:54:
e6:45:46:8b:46:77:df:63:be:17:0f:f0:a9:a2:55:
8b:10:ee:87:33:39:9b:3e:97:a5:3d:fc:96:ed:ae:
f0:09:6c:9a:70:34:7c:09:3e:e9:ad:67:cd:5d:a4:
98:51:1e:28:ca:d7:86:84:65:13:df:c4:87:0f:43:
e6:b2:e7:5f:5f:2f:78:84:de:79:4a:da:df:cc:ed:
ee:a6:84:35:c3:8c:74:dd:e1:ba:1c:19:af:d0:df:
37:3d:42:dc:fc:d9:96:bc:7b:9e:8c:a8:73:f8:f1:
15:ce:e1:2b:02:7c:76:da:1b:36:f8:10:2a:3f:f7:
39:3d:64:18:fe:f0:d3:c9:47:cd:01:c4:c6:66:6b:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:37:4A:B7:83:17:D6:85:AF:43:56:40:88:AC:B2:3B:9F:2C:79:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XDdKt4MX1oWvQ1ZAiKyyO58seRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.104.0/24
185.216.71.0/24
193.25.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:07:b4:87:17:18:24:59:36:03:72:4e:b5:35:f2:b5:1e:b9:
56:ba:cd:ad:01:86:f1:f3:7c:6e:d9:9c:34:87:3b:93:67:9d:
21:89:33:56:92:7a:5d:65:30:e0:56:8f:20:12:35:7d:df:1c:
4c:1b:56:9d:37:29:55:e7:4c:bd:d0:89:ab:85:37:51:7e:2f:
f0:f3:da:e0:82:b6:e1:6a:2a:6b:66:42:f0:ad:5e:fc:5c:05:
74:07:bc:72:94:7d:30:0f:fc:99:e7:5d:1e:0a:61:bc:87:88:
b8:79:2d:19:54:c3:41:c4:9c:5c:85:8f:8e:10:60:01:ee:d8:
1d:a1:65:f9:9d:57:9a:2d:19:9b:5c:27:b0:b7:c1:7e:9a:d6:
b0:56:01:f9:c8:16:c5:13:84:dd:01:cd:83:81:ba:e2:1a:4b:
10:30:95:1e:cc:f5:e0:06:b7:25:70:1e:64:38:62:69:33:ad:
a0:66:32:b1:a0:02:e9:74:b4:81:9e:66:80:20:5a:52:3a:6f:
60:7b:89:9a:9e:d7:01:61:5e:38:dd:2b:c1:85:67:05:bd:e0:
5d:03:80:56:64:f9:c2:57:9b:05:58:6f:2f:31:d8:17:36:69:
d1:7e:e7:11:22:3c:5b:f0:83:98:41:d1:09:70:be:82:1f:5d:
5c:8a:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 11:35:53 2024 by rpki-client on console-fra.rpki-client.org