Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZOrzCg1aS5ttd8wAx9e8W1xw__8.roa
File: ZOrzCg1aS5ttd8wAx9e8W1xw__8.roa (raw, json)
Hash identifier: Rf7TrqZW84SWeH/lGU07d2dWQERnQgQXRnCgtm0rqcU=
Subject key identifier: 64:EA:F3:0A:0D:5A:4B:9B:6D:77:CC:00:C7:D7:BC:5B:5C:70:FF:FF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D82050D837506B31186047FD048D061
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZOrzCg1aS5ttd8wAx9e8W1xw__8.roa
Signing time: Sun 01 Jan 2023 13:25:15 +0000
ROA not before: Sun 01 Jan 2023 13:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202160
IP address blocks: 87.120.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:05:0d:83:75:06:b3:11:86:04:7f:d0:48:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64eaf30a0d5a4b9b6d77cc00c7d7bc5b5c70ffff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:cb:bc:37:85:8e:29:c5:c0:32:68:cc:63:
da:df:ff:9d:2c:47:03:19:c9:a4:a7:0e:6d:27:ed:
c1:b7:ec:69:7c:34:bc:e8:c3:7a:cc:3b:10:1d:d1:
24:cd:a4:53:5f:25:6e:90:97:ee:0b:98:bb:52:d1:
83:8d:70:f1:cf:04:3f:f3:4d:25:d4:d4:29:63:97:
47:bc:e8:cc:13:ce:ab:bb:d2:6d:39:5c:39:82:0c:
2c:2d:96:76:68:bc:83:16:a1:52:de:7f:1f:0a:f5:
5e:06:a1:19:a5:fa:19:24:fa:68:85:15:94:4d:d3:
12:8b:3e:a4:f2:64:17:78:3f:1d:f2:d1:1b:00:5d:
58:cc:46:29:cb:ac:84:03:5f:25:9e:c8:b2:dd:a0:
fe:a9:7a:8b:a7:b3:e5:82:e4:88:81:9d:78:a8:dc:
22:72:7e:dc:9a:17:79:03:74:95:0b:98:35:3f:6f:
a7:36:68:38:38:d7:66:ae:b1:f6:a2:21:aa:9c:1d:
66:b5:3b:8e:07:93:fc:2f:83:27:b4:5d:57:6a:89:
ad:90:9d:9c:5e:b4:86:75:f9:8e:49:b9:e2:f5:ea:
ac:77:33:fb:71:a2:41:c9:57:0a:e9:bb:90:2e:2b:
43:c2:fa:f3:c5:e0:49:de:4d:04:68:97:88:fc:f5:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:F3:0A:0D:5A:4B:9B:6D:77:CC:00:C7:D7:BC:5B:5C:70:FF:FF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZOrzCg1aS5ttd8wAx9e8W1xw__8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.142.0/24
Signature Algorithm: sha256WithRSAEncryption
26:13:2f:d5:2f:ea:a5:c7:54:53:92:86:f7:0a:1b:cb:2c:cc:
50:05:0f:f7:03:d4:f1:44:8b:1c:4d:a7:69:ef:e5:d7:6c:e5:
45:1a:11:fa:37:ad:06:0f:6f:98:83:10:44:0f:e8:c6:36:e9:
e4:56:7f:bd:b1:9d:6a:34:51:65:81:a8:fa:a6:a9:a0:59:d4:
83:0c:a8:18:c6:21:76:31:99:57:68:b6:c4:cb:4a:09:f2:df:
5e:e9:30:88:18:45:f1:2b:2f:fe:03:1e:42:69:88:25:01:f4:
25:95:d6:f5:94:4d:3e:f5:13:d8:58:34:e3:0a:42:1f:ee:92:
4e:c1:15:08:5e:68:8a:c0:de:5f:4a:7f:cb:e8:c1:45:0b:6e:
50:6a:40:79:b9:d7:64:0b:9f:0c:ab:0d:fd:34:61:32:a9:da:
8c:8c:04:be:11:64:fb:5d:ee:b4:b1:78:64:a2:5d:41:6e:64:
b8:e7:18:45:7e:37:d9:f4:5c:f2:35:ff:0e:49:fe:e9:e9:86:
c3:77:7f:fa:cf:9a:d4:48:ea:c7:14:32:48:94:eb:a0:73:1e:
cf:2c:b9:b1:80:44:27:cf:f0:ee:da:cf:4c:68:62:33:db:9a:
9b:ff:7e:20:f0:1f:cc:97:7e:10:a5:cb:0a:93:f0:db:f7:fd:
2a:2c:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org