Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZlFtdEauq0c50rOc7VHwjDcYCs.roa
File: eZlFtdEauq0c50rOc7VHwjDcYCs.roa (raw, json)
Hash identifier: pzQMcVuyYu3/np3OivZqlwLDRsK4ScvVhOog7uv195M=
Subject key identifier: 79:99:45:B5:D1:1A:BA:AD:1C:E7:4A:CE:73:B5:47:C2:30:DC:60:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B7ADED5094B160CBB17C463C3B682494
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZlFtdEauq0c50rOc7VHwjDcYCs.roa
Signing time: Tue 25 Apr 2023 09:10:41 +0000
ROA not before: Tue 25 Apr 2023 09:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 87.120.89.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
87.121.56.0/23 maxlen: 23
87.121.100.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:ad:ed:50:94:b1:60:cb:b1:7c:46:3c:3b:68:24:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 25 09:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=799945b5d11abaad1ce74ace73b547c230dc602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:13:1e:5e:03:27:31:87:6b:fe:76:8a:b9:
ea:32:53:7a:24:14:ed:64:b5:7a:d8:52:23:7d:50:
f0:90:db:95:63:31:76:24:08:ad:39:17:62:36:df:
eb:cd:bd:10:4e:2d:b1:2a:fe:78:b5:40:aa:43:d3:
c1:3d:20:39:4c:12:df:7a:a7:e0:af:38:0b:0a:c9:
56:6e:4f:9b:73:7f:12:8f:1a:91:db:5d:bb:44:66:
26:5a:9d:f8:3e:3a:e1:78:dc:04:95:c3:09:1a:cf:
9d:4a:64:c4:cd:32:5f:5d:0f:f8:3a:7e:6d:66:8e:
7c:e4:7a:4e:92:ec:82:34:95:c7:b5:dd:0b:a1:7f:
aa:e4:00:fa:7c:54:25:18:3d:f8:09:2c:bc:5e:f5:
db:33:c2:3a:f7:65:f7:96:2e:ac:4f:3b:d7:19:7c:
02:fb:b0:cd:5e:e9:3a:b5:ab:6c:8d:a1:6c:a6:a1:
c3:dd:b1:11:9b:08:c4:a9:6f:f4:c1:1a:50:10:15:
72:61:30:4d:34:83:92:39:36:79:a7:4c:39:f4:1d:
7f:fc:05:81:59:eb:6d:67:05:93:64:81:c7:a6:ef:
3a:67:c5:ee:34:ae:df:20:ba:30:fd:b8:7d:fa:92:
c3:4b:4d:ea:d6:07:a6:f3:be:96:81:75:75:60:a0:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:45:B5:D1:1A:BA:AD:1C:E7:4A:CE:73:B5:47:C2:30:DC:60:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZlFtdEauq0c50rOc7VHwjDcYCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0/24
87.120.89.0/24
87.121.56.0/23
87.121.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:cf:4a:bf:b7:65:a3:b9:6c:cf:86:9f:66:20:11:01:64:2d:
31:d2:92:cd:8f:60:a7:35:78:72:5e:01:30:70:28:4b:8b:6a:
33:a3:6e:ea:d7:9b:b0:79:a6:08:90:39:27:c2:8f:5d:2d:d9:
6a:08:e6:c0:3c:02:bf:52:c6:ea:f3:c6:f5:9a:46:e7:51:20:
0d:cb:89:4a:1f:1e:f2:0a:d9:d6:5d:00:7f:fb:1d:e3:2e:4e:
76:77:da:df:51:aa:86:a1:0f:47:18:24:1b:7b:29:50:59:4f:
8c:f8:82:fa:25:d8:dd:6a:3a:8a:5a:9c:d0:f9:84:08:79:e3:
fe:1e:d2:75:39:21:1a:b5:f2:8b:0e:b4:9e:73:b6:a0:8a:9f:
d0:95:8f:9b:69:f3:c2:5f:3c:23:0b:70:3e:04:da:3a:e8:94:
63:13:b1:78:bf:eb:a5:61:84:6b:dc:b7:11:29:59:71:8d:94:
a0:8b:4b:36:e8:a4:57:cd:5c:96:e6:87:c2:f6:62:76:04:ab:
0f:96:85:13:78:3a:52:d9:87:a2:61:cd:1f:17:d7:7f:3d:46:
0c:b3:87:82:40:bc:a2:f9:65:cc:f4:e5:de:f7:e9:34:65:fa:
81:92:f3:26:6d:9b:b5:1f:55:dc:bd:66:9f:29:61:dc:6b:a4:
a2:dc:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org