Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d83FqCNk6bn-eqCem8lSKXlMIus.roa
File: d83FqCNk6bn-eqCem8lSKXlMIus.roa (raw, json)
Hash identifier: C5jMzi5S7FdRpi9SLZzY55JPR9yXUcMfUkPvrNym+vU=
Subject key identifier: 77:CD:C5:A8:23:64:E9:B9:FE:7A:A0:9E:9B:C9:52:29:79:4C:22:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190BB6238C7AB5B436DA4E6026BB5ABA9E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d83FqCNk6bn-eqCem8lSKXlMIus.roa
Signing time: Tue 16 Jul 2024 11:51:34 +0000
ROA not before: Tue 16 Jul 2024 11:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 87.121.86.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 05:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:62:38:c7:ab:5b:43:6d:a4:e6:02:6b:b5:ab:a9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 16 11:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77cdc5a82364e9b9fe7aa09e9bc95229794c22eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:77:b4:85:af:86:4b:bf:1a:8a:59:70:5b:
5e:f5:7f:26:a3:a4:03:5f:e9:27:b1:04:96:47:f8:
12:78:1e:98:b9:2b:b1:d0:9e:ac:57:b0:5e:80:ec:
a9:77:dc:bf:d8:a3:38:1f:b9:ff:a7:70:a4:51:db:
1b:c1:48:92:39:7b:bb:73:8c:63:77:9e:aa:e0:3b:
4e:8f:54:08:1c:56:3f:82:02:20:ca:88:b5:dc:ed:
e6:22:a9:39:ac:17:7f:11:13:f2:c4:8d:f8:57:81:
64:cb:54:d3:29:fb:d2:13:2f:3a:b8:0f:58:b1:ae:
aa:54:56:2f:ed:da:ec:02:08:40:bd:2c:39:ba:07:
b4:00:8f:dd:c9:5a:94:6f:4d:78:02:c8:8e:39:89:
29:8c:d6:02:99:02:6f:11:8c:b9:93:e7:f5:76:4b:
9e:16:3e:94:f4:dc:11:e9:e6:9e:b9:24:fb:39:77:
6c:4e:87:97:27:81:eb:aa:8f:bd:cf:5b:56:cb:2a:
1b:ff:8a:3d:55:7e:46:e3:50:c6:ab:09:ca:00:cc:
a8:37:17:67:40:39:88:01:26:a2:97:8b:9a:69:02:
7c:1b:c2:88:41:e8:62:d0:d5:98:a8:a4:03:c7:5e:
1c:85:ab:c2:f0:88:42:ab:84:dd:33:a9:22:f9:60:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:C5:A8:23:64:E9:B9:FE:7A:A0:9E:9B:C9:52:29:79:4C:22:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d83FqCNk6bn-eqCem8lSKXlMIus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.86.0/24
178.215.227.0/24
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:78:9a:f7:33:42:cc:f4:f0:03:f3:9d:87:bf:2b:fc:7d:b3:
9c:f6:b9:8c:0e:c5:80:22:31:bd:c9:e4:9c:1d:f7:a2:4a:61:
51:27:e6:d9:2f:40:3b:6f:4d:2f:e7:a3:e1:5f:bf:26:67:cd:
15:f5:19:41:3a:30:26:42:b8:61:23:3a:12:bb:d3:33:4d:d0:
c6:9b:91:95:8e:b0:42:32:a5:1c:8f:9f:58:27:e3:f1:6f:16:
0a:5a:3b:bb:ed:c1:2e:3d:8f:0e:ff:cf:e6:6c:18:bc:cb:e4:
d9:ae:72:c4:6c:31:6e:f8:0f:c6:81:1d:2c:eb:5d:65:7b:49:
a2:95:14:6a:16:61:79:66:ae:2a:0a:4a:58:67:15:45:eb:6e:
7b:84:19:40:38:09:f3:7e:e6:90:52:74:d3:f0:8b:29:6d:d0:
a3:29:bc:22:8c:89:2d:78:73:f6:4e:d3:95:f1:7e:b1:3f:71:
14:00:0a:c9:9c:82:93:7c:27:00:69:c4:12:9f:22:f9:e8:5a:
b1:d9:dc:d3:32:a1:5d:78:f2:be:54:96:57:f0:ad:66:a0:59:
b1:4d:06:6a:7b:b0:f0:a8:ac:07:1a:09:65:56:03:1a:9e:4f:
21:86:76:7c:51:c5:d2:76:fe:a6:ef:73:67:65:55:a3:53:89:
28:8a:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 08:34:02 2024 by rpki-client on console-ams.rpki-client.org