Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bOc-7Si7p6TsrVoJ1uz1G4ox5Rs.roa
File: bOc-7Si7p6TsrVoJ1uz1G4ox5Rs.roa (raw, json)
Hash identifier: 6oJeRleRkzo3GyF9M/1ATNK7TYXfvkh+nunf0RngKZ4=
Subject key identifier: 6C:E7:3E:ED:28:BB:A7:A4:EC:AD:5A:09:D6:EC:F5:1B:8A:31:E5:1B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019143E76B9F7349197DDEEA878005A309A8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bOc-7Si7p6TsrVoJ1uz1G4ox5Rs.roa
Signing time: Mon 12 Aug 2024 00:05:25 +0000
ROA not before: Mon 12 Aug 2024 00:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22781
IP address blocks: 87.121.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 02:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:43:e7:6b:9f:73:49:19:7d:de:ea:87:80:05:a3:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 12 00:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ce73eed28bba7a4ecad5a09d6ecf51b8a31e51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:95:a8:8c:08:85:a1:ff:74:ea:a5:86:32:
4e:51:3c:43:04:21:0e:6b:62:16:8e:77:1d:62:6a:
1d:da:1c:09:57:7f:51:51:b1:ec:2d:bb:14:2d:04:
7b:9c:27:01:5d:4a:1f:3a:00:f5:b2:ed:75:de:b9:
28:35:1e:bf:f8:94:45:9d:3f:0b:6a:ed:a3:01:f0:
24:01:12:f5:b3:3e:ae:4f:b3:07:97:23:79:fe:87:
f3:6f:3c:33:a9:c0:24:66:80:c7:0e:f0:64:03:fd:
16:ac:b2:3b:30:b4:8e:bc:c6:fe:47:4f:4e:c3:e9:
b5:8d:2c:9d:2b:61:92:7b:a2:00:98:be:bc:5b:85:
de:d9:4d:5b:c1:93:80:9c:4f:95:7a:b9:8d:56:d0:
2e:69:cc:3f:c8:14:b8:6c:69:48:22:da:d0:96:a8:
f2:b9:a8:95:b0:c5:77:c3:de:12:f1:14:e1:a8:30:
ac:f6:0c:9d:31:98:c5:b2:22:9c:03:74:11:45:ca:
75:cc:20:23:04:d7:bd:19:1d:77:b7:55:2f:c4:b4:
e1:a4:60:d1:8b:7a:a4:47:ff:03:0e:a4:53:4a:3a:
e3:ee:53:90:d0:7c:40:e0:e0:03:2b:80:51:63:d0:
f9:32:96:98:f7:2d:53:20:bb:55:e1:a4:50:94:7a:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E7:3E:ED:28:BB:A7:A4:EC:AD:5A:09:D6:EC:F5:1B:8A:31:E5:1B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bOc-7Si7p6TsrVoJ1uz1G4ox5Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.147.0/24
Signature Algorithm: sha256WithRSAEncryption
72:86:50:b4:ca:8a:d3:28:2a:b8:42:f7:05:9b:6d:45:98:e8:
94:f8:fb:a5:e6:ae:30:44:2d:4f:d6:21:64:4b:68:27:fc:72:
c3:25:f5:06:86:49:f3:61:09:27:7b:d0:e3:47:bc:2d:2d:7e:
f2:8d:c8:5f:6b:3d:b4:8b:56:fc:ca:3b:3b:96:de:7f:29:eb:
20:22:c5:96:e0:1f:20:0f:02:00:59:dc:25:55:27:21:0d:fb:
9d:c2:bc:ae:14:dd:e3:df:a1:28:77:1c:57:19:d7:5c:37:4c:
08:df:87:9c:c4:53:6a:f4:22:54:e3:35:37:d0:20:2f:4f:29:
01:0b:18:35:72:1a:92:24:95:f3:be:c0:3c:18:d3:e4:f6:12:
ba:26:93:0c:f7:8a:ef:cc:5d:15:21:b2:e1:65:04:aa:d8:60:
b4:8f:c0:10:93:99:22:41:6d:0f:e4:bc:21:ce:fb:a6:d4:93:
3e:8f:a2:82:88:5e:a2:5a:dd:30:4a:ad:2a:18:de:11:9d:89:
6b:77:8f:f0:12:12:a8:41:2e:dc:7d:ac:e8:ef:ff:9c:c0:48:
2f:70:05:ca:2f:a2:38:c8:2e:19:c3:c9:af:a8:49:ea:8d:77:
e7:cf:7b:dc:23:9f:72:43:e2:0e:fe:24:5f:b4:01:dd:c8:67:
b2:62:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 07:18:33 2024 by rpki-client on console-fra.rpki-client.org