Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dVWKzOlNd_X8Y5ufNWQL0MhX4dI.roa
File: dVWKzOlNd_X8Y5ufNWQL0MhX4dI.roa (raw, json)
Hash identifier: soJ7PJU+XuEbfTxTE7+e43LoqmNEqLo3ZNj/JF/gtAA=
Subject key identifier: 75:55:8A:CC:E9:4D:77:F5:FC:63:9B:9F:35:64:0B:D0:C8:57:E1:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F62ECCCE0594DCFE660D6F7A2B2967719
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dVWKzOlNd_X8Y5ufNWQL0MhX4dI.roa
Signing time: Fri 10 May 2024 14:33:56 +0000
ROA not before: Fri 10 May 2024 14:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 87.120.93.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 13:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:ec:cc:e0:59:4d:cf:e6:60:d6:f7:a2:b2:96:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 14:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75558acce94d77f5fc639b9f35640bd0c857e1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:d5:c7:c6:48:74:0d:95:1d:cf:76:f0:3c:
7e:07:e6:cd:0d:e0:83:f3:0f:56:fc:a9:d5:d5:36:
b7:f8:51:d3:2c:5e:20:38:6b:1a:7b:4b:38:75:30:
08:4c:07:7c:58:ec:f1:65:66:63:60:2b:94:dc:9c:
ae:75:29:f1:b8:af:b6:5c:cb:0e:07:64:40:4f:d8:
4d:80:7b:1c:6d:00:80:64:cc:eb:21:e5:7d:3f:1e:
98:30:ae:fc:df:5f:ef:66:53:71:9e:e2:c0:df:fb:
5d:04:5a:3f:2f:34:66:7a:72:6b:d9:ed:5e:b2:2d:
ea:32:a0:22:2b:10:7b:89:7f:ec:69:dc:77:79:e6:
d4:be:38:12:31:a3:c2:2c:7d:34:85:8a:8b:5b:df:
40:10:74:18:96:19:62:9f:3f:40:6d:bc:88:5e:aa:
23:1d:66:93:5f:22:39:15:d1:2e:e7:02:f9:4b:81:
16:7b:9d:31:c9:72:0a:c8:13:4d:e7:7a:68:78:f6:
29:d9:68:25:a3:18:71:a8:e4:5d:bc:87:04:be:86:
29:b0:9b:93:c1:f2:c4:12:3f:6a:f5:b3:7c:bf:42:
c7:50:f8:b5:bc:4b:3d:8d:bc:ee:bc:72:44:5f:15:
8e:d5:a9:04:ee:5a:89:a9:be:a5:38:47:7f:e6:91:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:8A:CC:E9:4D:77:F5:FC:63:9B:9F:35:64:0B:D0:C8:57:E1:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dVWKzOlNd_X8Y5ufNWQL0MhX4dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.93.0/24
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:43:1d:6d:f8:53:d2:f9:1f:6b:b7:7f:d3:94:24:a4:74:2e:
95:22:bb:fd:3e:8c:5d:6a:73:18:2a:36:f1:c7:e7:ff:f8:96:
5b:37:a4:19:2a:c0:39:78:71:18:7c:2b:24:8a:2e:2b:16:db:
5e:20:83:b6:07:f9:a3:ff:d4:21:c8:bc:f5:f5:43:67:52:ba:
9b:a3:bc:6d:09:96:7e:d9:83:df:c5:63:56:96:b4:e7:a7:85:
75:8b:42:fd:28:5e:cd:a6:39:91:bb:44:1d:fc:be:25:db:b0:
30:0a:01:c8:3b:c5:d4:67:67:bf:20:a5:70:bc:a9:76:2b:09:
4a:bf:04:2f:12:98:f4:8a:dd:63:f7:76:e7:a6:20:ff:ed:87:
e6:c1:9b:37:be:21:d3:29:f8:10:89:fa:6b:dd:8f:5e:56:4e:
3f:05:2b:89:c8:89:c7:38:c6:af:95:6f:ce:79:9a:f9:3e:a5:
58:f6:5c:63:9d:ea:93:c3:c5:68:c5:5c:07:14:b8:85:3d:ec:
04:1b:91:33:ac:ce:11:a3:9e:71:30:8b:43:d7:9a:21:48:e3:
5a:62:b2:80:64:97:48:06:6a:79:21:67:ef:29:82:5f:ff:d8:
c9:88:07:73:d3:9e:9d:f5:42:d8:fa:62:de:0d:42:6a:80:47:
b7:2b:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:46:38 2024 by rpki-client on console-fra.rpki-client.org