Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YqFP-3Zv7hUh9s-BT_qNBLtLXWg.roa
File: YqFP-3Zv7hUh9s-BT_qNBLtLXWg.roa (raw, json)
Hash identifier: rVOInceldWPsoQdU4xUC7Cg8N8kLoMFR22h80sVog/w=
Subject key identifier: 62:A1:4F:FB:76:6F:EE:15:21:F6:CF:81:4F:FA:8D:04:BB:4B:5D:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81FDEDB1B26A29ECDD52F6CF326AEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YqFP-3Zv7hUh9s-BT_qNBLtLXWg.roa
Signing time: Sun 01 Jan 2023 13:25:13 +0000
ROA not before: Sun 01 Jan 2023 13:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199818
IP address blocks: 87.121.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:fd:ed:b1:b2:6a:29:ec:dd:52:f6:cf:32:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a14ffb766fee1521f6cf814ffa8d04bb4b5d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:fc:8a:ea:a7:a0:16:77:cd:d1:91:64:f8:
99:e1:73:dd:53:c2:cc:04:20:d1:f6:76:9e:96:67:
a9:46:13:36:ac:85:ff:50:37:64:88:8b:5e:cd:5d:
30:f3:8b:9c:e1:79:19:a3:a4:da:af:cc:8a:f3:5e:
4d:33:64:af:08:18:7b:c9:78:db:16:71:31:59:8c:
73:c3:88:37:0a:36:e0:b1:7d:ab:89:32:60:c0:96:
15:e3:1d:2b:ad:96:1c:2a:66:69:bc:be:4f:5e:1f:
29:63:26:c4:26:c2:3e:83:ff:8c:9a:6c:7a:52:ce:
bc:54:28:d4:12:b3:7b:0f:f5:52:cf:0f:54:4a:4b:
1d:82:14:41:be:09:13:cf:ef:fa:03:ff:66:19:8c:
ab:45:a8:cb:fb:21:a8:ae:1d:9b:62:02:c8:4b:1c:
3b:f2:a3:6f:13:bc:09:16:a6:4a:8d:a9:4b:ed:31:
7c:3d:8b:b6:3f:5e:e1:e6:c9:d6:ba:3b:02:3f:f3:
1b:3e:45:f8:63:e6:48:29:05:e5:3d:cd:ee:87:fb:
94:88:4b:82:df:1d:dc:ce:8c:62:8a:79:ca:46:0e:
42:31:c8:77:67:8c:f2:34:84:67:2b:36:46:48:26:
74:64:98:c6:3a:1d:04:29:9e:5e:42:56:b4:5b:01:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:4F:FB:76:6F:EE:15:21:F6:CF:81:4F:FA:8D:04:BB:4B:5D:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YqFP-3Zv7hUh9s-BT_qNBLtLXWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:64:20:12:4b:59:2d:6a:81:73:a0:02:6d:24:ca:1e:2c:24:
a7:73:5e:15:c7:52:3d:78:6e:ff:16:ea:98:0a:a3:00:d7:11:
26:98:b4:8f:ff:fb:1e:4b:a5:bd:6b:c4:c8:4e:33:8c:2e:d9:
96:59:36:4b:27:6d:a9:56:a1:31:73:b0:31:4d:a6:9b:cb:d1:
2b:6f:9d:be:a6:77:91:15:c4:44:fb:56:69:5c:4b:94:a9:57:
c2:4d:88:00:5f:17:67:6d:a9:a6:3f:01:e9:4a:6a:8f:28:ef:
78:40:6a:89:9a:c0:ec:0d:fa:1e:d8:b1:3b:67:b6:61:07:c5:
92:8c:df:73:d6:4e:c2:f3:84:51:61:5c:82:6d:3f:2d:ac:2c:
e4:b7:01:0b:18:b3:93:b4:f8:b5:47:ca:fa:70:86:cd:37:cd:
29:11:e7:3e:17:04:43:c8:5f:2e:23:90:45:f8:6d:84:29:d1:
b4:0d:e1:21:5a:48:6f:99:89:60:f6:9e:b0:c0:7f:e8:8e:77:
af:4f:aa:99:0e:0a:cb:07:d0:ad:87:66:25:07:bd:aa:74:cc:
ad:1a:b6:8e:7f:65:74:cb:99:5e:4c:79:68:89:5f:dd:bf:cc:
50:53:42:93:ac:76:03:d2:5a:04:31:33:78:93:59:8e:b1:6d:
c8:60:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org