Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XXbJmxSL8zlYLuFSDOz68j_L8kg.roa
File: XXbJmxSL8zlYLuFSDOz68j_L8kg.roa (raw, json)
Hash identifier: YrqzoqLPJhzYLIL0UYNdWg70a19XYvOPrPwNZ2O8NOE=
Subject key identifier: 5D:76:C9:9B:14:8B:F3:39:58:2E:E1:52:0C:EC:FA:F2:3F:CB:F2:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F64CDCD65BF1D34142B10999DCEC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XXbJmxSL8zlYLuFSDOz68j_L8kg.roa
Signing time: Sun 01 Jan 2023 13:25:11 +0000
ROA not before: Sun 01 Jan 2023 13:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60590
IP address blocks: 37.60.143.0/24 maxlen: 24
87.121.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f6:4c:dc:d6:5b:f1:d3:41:42:b1:09:99:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d76c99b148bf339582ee1520cecfaf23fcbf248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:e6:bc:96:35:d0:b1:f8:ad:f8:d2:72:78:
ef:0f:1b:20:12:96:0f:7a:d4:28:7e:37:a4:e0:03:
7b:fe:ae:80:26:68:ff:6d:b6:dd:f3:23:7e:d6:b0:
5c:26:dc:2b:ab:04:58:d8:3d:6c:57:25:33:89:d3:
2a:02:11:bf:a6:18:b6:9f:18:91:8e:c8:d6:0d:2b:
aa:78:b0:b9:60:c7:9c:e3:85:57:fa:3c:05:52:21:
e6:b0:7b:26:14:5b:a7:0a:35:f6:f0:35:bc:ee:d5:
78:98:4d:15:53:1a:69:6f:4e:ed:d5:d9:43:9f:f1:
af:59:da:bf:95:f4:e9:74:8a:c2:0a:8e:94:26:6e:
55:0f:09:21:49:9a:85:ef:1b:e8:b4:33:18:40:21:
8b:ef:ba:90:3d:e0:31:6e:26:dd:25:16:f8:78:29:
ee:00:97:05:58:1c:bd:b3:f5:32:53:27:3b:29:5d:
18:fc:45:3c:8e:74:3e:57:85:c1:6d:d0:7c:41:12:
ba:95:bb:8a:26:c0:1f:d1:ee:a2:9d:82:92:b5:f2:
70:3f:9f:41:32:dd:72:f1:59:56:bb:6c:79:e1:6c:
c9:9a:92:86:a6:aa:4e:12:a6:8d:2e:59:04:61:d6:
8c:e2:03:f1:49:47:67:d2:21:d0:dd:a3:aa:05:a9:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:C9:9B:14:8B:F3:39:58:2E:E1:52:0C:EC:FA:F2:3F:CB:F2:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XXbJmxSL8zlYLuFSDOz68j_L8kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.143.0/24
87.121.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:80:05:f2:dc:dc:87:c4:42:be:8f:bc:16:a2:9f:c1:66:bd:
67:ec:86:47:a7:37:7b:64:24:56:db:44:11:6f:56:c6:28:96:
32:aa:32:75:4b:77:4c:5e:be:1d:78:24:32:cc:fd:92:ef:2f:
6c:ea:37:90:9e:47:d6:29:47:84:3a:3a:d5:f3:eb:3e:f6:80:
1a:a4:5a:fd:68:92:fe:d5:90:9c:8a:e3:d6:22:3a:af:da:6e:
46:67:7a:db:3c:3d:2e:78:06:9e:07:6c:66:71:e8:b5:76:1c:
8c:e5:3b:86:01:67:9b:97:7a:d2:de:84:92:a2:3a:a4:8f:23:
5c:4e:f8:fb:2c:3a:d6:cd:a4:15:0c:bb:bc:f9:ba:38:56:e7:
fe:70:f6:21:ee:51:ce:3b:16:6e:2a:6d:6c:d1:41:6e:56:c9:
4b:5c:b7:fe:4b:7f:45:5d:e4:40:9b:5b:04:8e:ab:66:ce:3a:
46:57:ce:05:55:1b:55:b9:45:9e:7f:0d:41:4f:c0:58:0e:0e:
0c:e2:2d:f8:09:43:06:7c:5a:0f:81:ec:7e:1e:da:62:46:ad:
75:84:d1:cb:e9:6c:2d:30:87:e7:c9:64:0a:77:5f:a1:e3:83:
1c:68:aa:c8:d0:b0:29:e0:34:84:6f:01:c7:00:82:0b:9f:a2:
7c:45:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org