Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aUTOl-Fzpby161ZUtw-jBora6e4.roa
File: aUTOl-Fzpby161ZUtw-jBora6e4.roa (raw, json)
Hash identifier: uz0W8ZKsBPiRCgI/gy4dM5tHYacEWTLRQldvXygKmlc=
Subject key identifier: 69:44:CE:97:E1:73:A5:BC:B5:EB:56:54:B7:0F:A3:06:8A:DA:E9:EE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019372868BF876241520AC00352BBBEE5667
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aUTOl-Fzpby161ZUtw-jBora6e4.roa
Signing time: Thu 28 Nov 2024 11:27:20 +0000
ROA not before: Thu 28 Nov 2024 11:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 87.121.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 10:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:86:8b:f8:76:24:15:20:ac:00:35:2b:bb:ee:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 28 11:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6944ce97e173a5bcb5eb5654b70fa3068adae9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:ae:22:77:09:c9:c8:f1:bb:3d:51:90:fd:
59:54:65:4d:f7:d1:1e:09:20:dd:22:ef:4e:12:f6:
e2:14:7c:cf:9d:80:36:d1:97:d6:8c:f5:c7:53:74:
42:2c:a2:ee:ad:08:e9:30:05:0b:42:cf:50:99:9a:
a1:37:c6:36:1b:84:93:ba:35:c3:64:58:ee:f8:5b:
db:c7:ba:32:e4:db:21:6a:41:b1:75:53:a8:04:de:
85:4d:8b:4f:94:8a:e1:d0:a2:52:67:b6:f6:62:98:
be:60:b1:a6:a4:c8:3a:65:34:c6:43:68:68:41:42:
f7:a2:9d:c9:b7:99:51:3b:bd:13:83:1f:68:9e:34:
e5:76:cc:10:58:ef:ec:69:11:62:ea:44:63:bd:32:
e8:d7:5a:cb:eb:87:81:94:03:b2:87:da:05:83:16:
d5:b0:20:ef:1d:3b:7f:8f:51:39:7b:f9:99:10:9e:
fe:87:ae:f5:ca:38:39:35:64:8b:08:93:20:b8:dc:
03:71:31:72:29:ca:08:b6:9c:82:dc:fd:75:ca:65:
0e:d0:d3:24:93:67:fb:13:88:18:85:a3:bf:4e:1d:
5b:18:7a:ea:5f:5a:8b:f5:dd:37:33:cc:5e:3c:86:
7a:5c:15:8c:fe:8d:9a:3e:de:e6:75:48:70:d1:90:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:44:CE:97:E1:73:A5:BC:B5:EB:56:54:B7:0F:A3:06:8A:DA:E9:EE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aUTOl-Fzpby161ZUtw-jBora6e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:95:31:48:55:9b:05:8f:5e:39:98:0a:88:21:90:8a:87:8b:
53:2a:98:0c:51:69:96:4a:82:64:30:ac:ca:f4:1f:c5:e9:90:
40:40:99:4b:48:f5:ab:db:02:fd:fc:5f:5e:57:b1:40:ab:1b:
dc:c8:a7:ff:77:64:62:13:1f:b6:e3:30:98:2f:2d:7d:65:6f:
b5:d8:0a:87:16:a2:60:e5:6b:4a:ce:d6:5b:4b:88:05:e6:ed:
51:48:a4:23:de:33:57:96:5e:05:05:ea:a8:47:47:f9:fe:52:
da:94:f9:e3:9e:96:0d:64:6c:e7:11:17:79:59:e0:98:b3:4a:
3f:3d:3f:41:dd:9b:af:75:51:3f:c7:65:88:2c:9d:b3:c4:1d:
81:0b:04:c4:49:e3:0e:ac:27:de:18:9c:73:de:d8:71:d2:b7:
c6:df:16:74:24:b7:92:1d:0c:51:38:bb:ad:3d:36:d5:62:26:
71:78:92:cd:ab:87:fd:e4:48:4b:d5:de:b7:2c:02:c7:90:c3:
a0:4a:e5:3d:5f:49:88:ee:b0:17:4b:78:d7:7b:62:18:d3:a9:
c3:dd:c0:85:5d:4d:57:92:22:46:58:29:6e:37:af:d3:97:f9:
81:4f:64:bc:cb:de:d9:94:e4:76:c4:d7:02:5a:00:27:08:26:
dc:5a:8c:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNyhov4diQVIKwANSu77lZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTI4MTEyNzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTQ0Y2U5N2UxNzNhNWJjYjVlYjU2NTRiNzBmYTMwNjhhZGFlOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6euIncJycjxuz1RkP1ZVGVN99Ee
CSDdIu9OEvbiFHzPnYA20ZfWjPXHU3RCLKLurQjpMAULQs9QmZqhN8Y2G4STujXD
ZFju+Fvbx7oy5NshakGxdVOoBN6FTYtPlIrh0KJSZ7b2Ypi+YLGmpMg6ZTTGQ2ho
QUL3op3Jt5lRO70Tgx9onjTldswQWO/saRFi6kRjvTLo11rL64eBlAOyh9oFgxbV
sCDvHTt/j1E5e/mZEJ7+h671yjg5NWSLCJMguNwDcTFyKcoItpyC3P11ymUO0NMk
k2f7E4gYhaO/Th1bGHrqX1qL9d03M8xePIZ6XBWM/o2aPt7mdUhw0ZCBnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlEzpfhc6W8tetWVLcPowaK2unuMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYVVUT2wtRnpwYnkxNjFaVXR3LWpCb3JhNmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3nZMA0G
CSqGSIb3DQEBCwUAA4IBAQBvlTFIVZsFj145mAqIIZCKh4tTKpgMUWmWSoJkMKzK
9B/F6ZBAQJlLSPWr2wL9/F9eV7FAqxvcyKf/d2RiEx+24zCYLy19ZW+12AqHFqJg
5WtKztZbS4gF5u1RSKQj3jNXll4FBeqoR0f5/lLalPnjnpYNZGznERd5WeCYs0o/
PT9B3ZuvdVE/x2WILJ2zxB2BCwTESeMOrCfeGJxz3thx0rfG3xZ0JLeSHQxROLut
PTbVYiZxeJLNq4f95EhL1d63LALHkMOgSuU9X0mI7rAXS3jXe2IY06nD3cCFXU1X
kiJGWCluN6/Tl/mBT2S8y97ZlOR2xNcCWgAnCCbcWozj
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:33:30 2025 by rpki-client