Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cYKJBQ5iL-Lhc6YoQmUfZSB8Suk.roa
File: cYKJBQ5iL-Lhc6YoQmUfZSB8Suk.roa (raw, json)
Hash identifier: 8J93CQ8DSqN8mBiebl4Yl6UOUnlWK3vCqFNSljaecPI=
Subject key identifier: 71:82:89:05:0E:62:2F:E2:E1:73:A6:28:42:65:1F:65:20:7C:4A:E9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DA0136580F01302C7E7C674A8FB4117FF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cYKJBQ5iL-Lhc6YoQmUfZSB8Suk.roa
Signing time: Tue 13 Feb 2024 01:27:22 +0000
ROA not before: Tue 13 Feb 2024 01:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22781
IP address blocks: 87.121.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 14:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a0:13:65:80:f0:13:02:c7:e7:c6:74:a8:fb:41:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 13 01:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=718289050e622fe2e173a62842651f65207c4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:cc:51:f3:07:d8:34:25:46:7a:3d:a5:69:
45:91:2a:d8:6f:db:f5:35:01:e6:30:78:38:01:46:
55:8b:9f:14:10:51:a9:93:7e:1e:b9:e6:82:22:22:
33:d0:72:3b:60:27:c9:41:bf:44:2e:1d:66:ac:ba:
10:c7:39:af:d5:5e:e6:8c:e2:c0:bf:e2:a9:ec:9d:
7c:fe:c9:95:6f:6b:f3:a1:08:a8:69:a4:36:0f:aa:
c1:d9:c9:63:68:97:f4:6b:8b:b7:73:c6:d7:ae:4e:
34:98:ec:6f:8f:8e:19:51:1e:88:de:32:07:40:11:
09:ba:62:7b:4c:df:fc:86:93:fd:d5:a3:2e:37:28:
bf:b8:f9:fb:1b:e0:64:f6:8e:e0:bc:06:de:b8:2e:
ef:2d:ef:bc:bf:c4:d3:e2:5f:ed:7a:40:1a:18:4f:
d0:bb:a1:33:78:e9:8a:55:b1:a6:f4:63:2e:20:2d:
72:a5:fd:0f:84:fc:49:8d:00:ff:2c:73:93:6a:cc:
a2:a2:80:f6:8c:6b:77:e2:c2:9c:bc:0b:44:b5:f7:
5f:27:ae:8f:74:e5:ee:ac:bc:55:5d:80:a8:90:c8:
4e:c2:10:d7:35:38:75:fb:76:59:aa:02:94:1b:7b:
06:f6:09:6c:6d:1c:83:d3:7b:6d:53:bb:6a:e4:37:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:82:89:05:0E:62:2F:E2:E1:73:A6:28:42:65:1F:65:20:7C:4A:E9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cYKJBQ5iL-Lhc6YoQmUfZSB8Suk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:74:33:3e:08:bd:9d:47:b3:b9:2c:c9:7f:1b:c8:6c:87:27:
17:bd:58:56:3b:30:02:7d:fe:60:aa:cd:2e:ad:ad:b5:16:15:
6c:33:84:53:ad:79:8c:ff:65:79:ed:6a:ab:16:74:ff:06:22:
f4:4f:67:6a:9b:1c:4a:ce:83:cd:0e:0b:2c:11:1c:3a:83:90:
b5:43:f8:05:c4:40:c8:a3:60:5c:6b:06:af:02:11:7d:bb:06:
6c:e7:8e:62:36:20:25:c1:8b:de:a8:a3:87:d1:d1:a9:1e:ff:
a5:89:fb:2a:fd:46:ae:e9:f9:73:8c:ee:ca:63:c2:54:6f:58:
2e:42:91:81:e4:e6:b7:87:0e:91:8b:6d:b7:0b:14:32:93:aa:
75:5b:25:2b:97:68:7e:45:81:ea:44:c2:2c:ba:05:61:61:27:
55:54:bf:69:2e:fa:b0:41:f6:d1:97:81:b2:39:ed:05:59:60:
ce:ec:6a:ad:de:39:7b:bb:36:08:95:d6:ea:ef:e3:9a:be:4c:
bb:da:5a:1a:38:c7:57:17:0b:e6:5a:68:bc:45:18:34:47:17:
b9:c7:ab:8d:28:57:0d:b1:70:87:24:7f:cb:00:7c:f5:62:83:
73:b4:60:53:e3:79:c2:14:5a:18:86:cd:f2:40:dd:e0:21:bc:
9f:00:8a:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2gE2WA8BMCx+fGdKj7QRf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjEzMDEyNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTgyODkwNTBlNjIyZmUyZTE3M2E2Mjg0MjY1MWY2NTIwN2M0YWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6fMUfMH2DQlRno9pWlFkSrYb9v1
NQHmMHg4AUZVi58UEFGpk34eueaCIiIz0HI7YCfJQb9ELh1mrLoQxzmv1V7mjOLA
v+Kp7J18/smVb2vzoQioaaQ2D6rB2cljaJf0a4u3c8bXrk40mOxvj44ZUR6I3jIH
QBEJumJ7TN/8hpP91aMuNyi/uPn7G+Bk9o7gvAbeuC7vLe+8v8TT4l/tekAaGE/Q
u6EzeOmKVbGm9GMuIC1ypf0PhPxJjQD/LHOTasyiooD2jGt34sKcvAtEtfdfJ66P
dOXurLxVXYCokMhOwhDXNTh1+3ZZqgKUG3sG9glsbRyD03ttU7tq5DeQRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHGCiQUOYi/i4XOmKEJlH2UgfErpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvY1lLSkJRNWlMLUxoYzZZb1FtVWZaU0I4U3VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mSMA0G
CSqGSIb3DQEBCwUAA4IBAQC1dDM+CL2dR7O5LMl/G8hshycXvVhWOzACff5gqs0u
ra21FhVsM4RTrXmM/2V57WqrFnT/BiL0T2dqmxxKzoPNDgssERw6g5C1Q/gFxEDI
o2BcawavAhF9uwZs545iNiAlwYveqKOH0dGpHv+lifsq/Uau6flzjO7KY8JUb1gu
QpGB5Oa3hw6Ri223CxQyk6p1WyUrl2h+RYHqRMIsugVhYSdVVL9pLvqwQfbRl4Gy
Oe0FWWDO7Gqt3jl7uzYIldbq7+Oavky72loaOMdXFwvmWmi8RRg0Rxe5x6uNKFcN
sXCHJH/LAHz1YoNztGBT43nCFFoYhs3yQN3gIbyfAIpc
-----END CERTIFICATE-----
Generated at Tue Feb 20 18:07:33 2024 by rpki-client on console-ams.rpki-client.org