Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cmBWIhjkvCyriqm42cPHjMSJBvU.roa
File: cmBWIhjkvCyriqm42cPHjMSJBvU.roa (raw, json)
Hash identifier: Q62c41EK2aN8MRPh4pS7rKKulHFuD0EHmUL+PPFWlPU=
Subject key identifier: 72:60:56:22:18:E4:BC:2C:AB:8A:A9:B8:D9:C3:C7:8C:C4:89:06:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F7B7044A6ACE0E70AB9A1DA97FD0E4265
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cmBWIhjkvCyriqm42cPHjMSJBvU.roa
Signing time: Wed 15 May 2024 08:48:26 +0000
ROA not before: Wed 15 May 2024 08:48:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213250
IP address blocks: 87.120.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 14:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:70:44:a6:ac:e0:e7:0a:b9:a1:da:97:fd:0e:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 08:48:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7260562218e4bc2cab8aa9b8d9c3c78cc48906f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b2:77:9b:5d:e0:52:db:a4:ce:c7:07:63:6b:
cb:d9:2d:ea:04:eb:7d:af:34:3a:a8:7a:23:84:58:
d6:1d:28:ae:4b:c2:d7:0e:18:16:35:42:97:7e:4a:
12:22:3d:4d:17:33:2c:55:af:ac:2c:05:4b:94:aa:
b7:45:ad:c3:8b:e5:4c:21:c8:92:dc:98:9d:55:ab:
5f:c9:90:c4:ac:38:7d:1f:f6:fd:50:d3:b1:12:27:
39:2b:9b:54:60:38:06:de:16:b9:35:c9:b3:8f:cb:
ad:b1:0a:4b:3c:2c:0b:bb:c2:50:7d:2b:08:66:f3:
2d:55:dc:78:06:f7:2f:ee:3b:b0:bd:71:62:b0:2b:
33:b8:12:27:06:56:b3:ba:0d:f8:ea:01:cf:eb:11:
ed:ff:d0:41:8e:f1:b2:63:24:6d:54:53:9e:2c:99:
fb:94:1a:d0:0e:2a:0a:0b:f8:5e:20:b2:35:63:77:
75:df:96:ff:91:22:42:73:0c:cf:59:2f:8b:68:bc:
01:2c:ba:17:a1:5f:f0:09:bf:4c:73:47:c4:2a:62:
e5:a0:38:eb:de:4a:3d:85:47:87:2e:cf:20:fb:ae:
55:e7:ac:d3:2d:33:3f:53:ad:e7:bc:45:01:b1:ab:
19:38:18:4a:13:67:5e:09:29:c5:2e:37:ee:7f:af:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:56:22:18:E4:BC:2C:AB:8A:A9:B8:D9:C3:C7:8C:C4:89:06:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cmBWIhjkvCyriqm42cPHjMSJBvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:75:d6:0f:b9:67:61:f7:9b:e9:63:da:d5:9a:04:36:59:b2:
23:b1:a1:ad:99:39:1f:ab:11:54:fb:70:b3:a3:19:43:fd:8f:
2a:91:73:f9:2a:06:2c:b0:63:08:e9:a4:c4:e1:ab:cb:b1:6c:
d3:7b:fa:38:e9:82:3b:3e:35:3d:56:18:d6:51:0a:be:e2:29:
4d:9a:ac:5a:d4:1e:9a:d7:26:32:46:ad:8c:b2:27:eb:6a:14:
8d:38:08:24:27:cc:1b:87:59:b4:38:09:e1:50:66:39:22:49:
2f:a3:dc:d6:ea:75:eb:dd:39:8e:27:c1:59:42:21:ca:16:40:
a5:22:39:18:53:dc:81:6e:3c:4b:95:29:e5:e8:a3:31:38:fd:
06:d7:9d:1b:80:8a:66:96:c7:92:12:8f:3b:b5:43:41:9f:68:
d5:25:6e:ec:2a:09:4e:f5:f4:3c:7d:64:d3:18:c5:f7:46:8f:
4f:5f:9a:72:eb:53:64:f0:b7:06:b8:13:db:b9:06:17:6a:a2:
d5:f1:56:d7:d0:b3:ec:8d:f7:60:ad:19:7f:5b:80:ba:f9:89:
a2:ae:e7:a0:bf:c8:b1:ee:3e:61:e2:73:67:5b:18:7e:52:fa:
18:5e:2c:55:d7:fe:71:12:31:11:8d:57:88:c1:83:10:be:e7:
96:b9:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 17:42:41 2024 by rpki-client on console-fra.rpki-client.org