Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YpJ21W4yEcgeUVsTzcCtYKAskKQ.roa
File: YpJ21W4yEcgeUVsTzcCtYKAskKQ.roa (raw, json)
Hash identifier: yxCcc6ILbKmggDbOyj3Yx7RPSEBGsMQshRaCXZMkqV4=
Subject key identifier: 62:92:76:D5:6E:32:11:C8:1E:51:5B:13:CD:C0:AD:60:A0:2C:90:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D820CB6FF57497B37BB060183EF149F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YpJ21W4yEcgeUVsTzcCtYKAskKQ.roa
Signing time: Sun 01 Jan 2023 13:25:17 +0000
ROA not before: Sun 01 Jan 2023 13:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206776
IP address blocks: 87.120.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:0c:b6:ff:57:49:7b:37:bb:06:01:83:ef:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=629276d56e3211c81e515b13cdc0ad60a02c90a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:f8:26:2b:c4:89:9a:9a:3f:66:20:c6:0c:
1c:8e:38:5b:5c:a3:da:75:3b:67:16:53:22:90:50:
d5:ef:8c:5f:50:17:69:c1:2f:ab:95:17:e5:64:a1:
63:fa:9d:d6:ec:e7:71:69:74:74:3c:d8:18:c7:0b:
4e:eb:e5:25:ac:3f:ac:f7:41:69:ad:9b:c2:6d:8c:
6f:94:63:a3:47:2e:e8:3f:32:30:e4:c0:b2:4a:71:
71:94:f9:04:7a:dc:8a:79:68:21:9e:7b:2b:63:cd:
be:24:91:f6:be:86:3a:cd:8d:72:97:b6:e7:36:c1:
33:62:a1:c2:45:ca:11:30:fd:3d:71:43:7e:c4:1b:
13:77:ce:3c:8e:82:28:b1:b3:b3:1f:0e:8c:89:85:
26:16:4f:4e:f1:e9:25:e3:9b:77:8c:c1:34:b8:5b:
2d:c0:68:84:43:e6:62:a2:9a:b3:4e:24:fa:2d:a8:
30:a0:f8:39:39:a4:5a:30:dc:b8:24:4a:04:04:d4:
12:e9:a8:14:13:f1:77:12:65:4e:cc:b3:c7:03:0c:
34:43:57:74:c1:d8:47:b4:7e:bf:88:5d:2b:e7:f0:
7b:c0:9e:99:61:50:eb:a5:f2:0c:d9:c5:8e:46:5c:
58:e9:b5:ab:d1:f8:42:d5:20:f9:50:21:8f:df:2e:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:76:D5:6E:32:11:C8:1E:51:5B:13:CD:C0:AD:60:A0:2C:90:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YpJ21W4yEcgeUVsTzcCtYKAskKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d3:27:87:03:98:98:d1:dc:a5:2d:a5:c5:2f:39:d6:35:d9:
a1:ae:8b:c1:7a:e9:95:6c:95:6f:cd:5c:94:4f:53:ad:19:40:
c6:d9:f0:ae:55:5b:e0:6d:21:2e:f3:6d:be:04:9a:ef:ea:2e:
ff:18:4e:94:20:e2:0a:de:be:70:13:57:e9:73:cb:13:0f:02:
d4:04:9d:30:70:b2:3b:50:47:47:ee:99:7b:80:8d:01:4c:8c:
df:d1:65:d8:25:f1:15:c5:fc:f7:f2:e9:53:6e:22:ca:e3:19:
3c:e1:ce:86:76:87:ed:83:8b:96:c7:67:63:9b:ed:7a:bc:86:
85:d6:95:0c:da:5f:cb:68:31:4e:b2:57:88:40:c3:9d:5a:31:
33:ae:a7:1c:cd:a9:8a:b8:45:48:65:45:36:c5:b5:4d:4c:19:
26:08:ee:0d:1e:38:e0:f4:8d:35:35:64:22:0e:fc:ef:4d:1e:
2f:f3:5f:29:49:23:56:75:e1:41:b0:a5:97:d2:cf:04:33:8c:
e4:8d:2c:e3:b2:83:e2:27:ac:9a:ca:ea:88:62:2f:db:73:c0:
24:67:19:e1:39:83:8c:1b:a8:7c:a2:0a:88:bc:3a:49:5b:89:
04:77:52:9f:d0:76:9c:70:c4:26:5b:96:3e:1a:e2:d0:18:3e:
89:61:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-fra.rpki-client.org