Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9tYv1UbgT-gVCJGWhZjBSGStxQ.roa
File: f9tYv1UbgT-gVCJGWhZjBSGStxQ.roa (raw, json)
Hash identifier: XkIXT1Nk3V+1KnoilKuQftdsv0CkWA/N295yMlQUgFE=
Subject key identifier: 7F:DB:58:BF:55:1B:81:3F:A0:54:22:46:5A:16:63:05:21:92:B7:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BFAF721282DCADEF0479DC883123B9108
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9tYv1UbgT-gVCJGWhZjBSGStxQ.roa
Signing time: Thu 23 Nov 2023 06:56:21 +0000
ROA not before: Thu 23 Nov 2023 06:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.162.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 07:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:f7:21:28:2d:ca:de:f0:47:9d:c8:83:12:3b:91:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 23 06:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fdb58bf551b813fa05422465a1663052192b714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:70:f4:7f:53:45:66:d4:fa:10:b0:05:db:
0e:ed:65:e3:2a:42:11:1b:7b:50:46:76:ca:31:f7:
c3:7c:f6:79:b7:5c:b2:b8:17:03:1e:57:96:8b:63:
1b:8e:ba:ad:d5:73:3a:37:cd:af:02:8a:4f:35:02:
0c:af:46:33:9e:25:59:e5:4d:83:5b:2a:b8:b6:48:
b4:d4:58:08:18:1b:3c:4d:e9:3c:13:2e:69:f3:6f:
7a:74:2f:19:77:87:54:79:85:7d:fa:8d:0c:c2:90:
cf:42:97:12:94:0c:9f:95:0f:04:50:cc:fb:f3:31:
97:cd:b0:5d:fd:f6:7a:2c:cf:61:56:8e:ec:4e:d1:
b2:7c:0c:01:18:d1:5b:d1:c4:f1:7b:ed:e1:28:02:
08:68:09:49:51:8d:31:01:0f:66:fa:c8:7a:fd:64:
49:18:ad:56:38:5b:91:41:56:b2:5b:54:c6:fc:e0:
09:af:6e:1d:a6:f2:47:38:dc:6e:46:fa:ea:62:00:
a0:d8:d6:6a:d9:81:f3:53:59:27:89:b3:42:3a:b2:
4f:41:58:ff:47:e6:41:1b:f3:5b:66:aa:b3:c2:06:
fd:a6:6a:c1:14:05:ea:c8:46:17:8f:1f:a8:1a:ee:
90:24:f0:12:2e:f7:50:79:27:7e:71:c5:be:9b:7d:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:58:BF:55:1B:81:3F:A0:54:22:46:5A:16:63:05:21:92:B7:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9tYv1UbgT-gVCJGWhZjBSGStxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.129.86.0/24
87.121.162.0/24
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
08:68:84:16:3a:13:26:3b:83:8d:ca:0f:3e:eb:b4:e3:09:65:
77:3f:ef:27:35:14:f4:33:f8:8b:2c:ac:b4:ca:ad:b6:40:45:
a6:d7:f3:79:6e:30:5e:c2:23:4e:44:3b:d3:5b:3b:33:c9:b2:
92:fc:f5:92:d3:0c:b8:b4:19:19:e7:f5:1c:6a:c4:07:9d:3d:
25:4e:99:5e:a6:29:d2:db:02:dd:5f:05:2e:3e:ef:95:bb:52:
4e:2b:9c:94:66:60:ff:e6:b7:23:02:e1:98:4b:0f:25:20:96:
e4:b5:32:51:93:a9:05:32:12:85:47:93:ba:1c:77:33:85:28:
77:31:e5:bf:1b:61:dc:78:62:14:da:31:44:19:52:f3:87:1f:
6a:f5:e4:57:78:d2:d5:8b:a4:35:e3:3f:f4:4d:63:a3:8b:23:
50:5d:00:18:f2:20:14:e1:51:b9:68:56:0a:e4:36:57:f0:b9:
7f:b3:c3:7f:8c:ab:e7:7a:a3:24:48:7a:fa:1c:17:fd:77:4c:
24:75:f4:b1:70:ed:07:48:de:48:55:c8:e2:bb:94:90:b6:ef:
e9:ee:92:88:69:23:dc:8a:54:e4:51:24:b4:bf:99:fa:df:fb:
cf:66:00:94:7f:87:0d:2b:b9:98:4b:ea:84:5e:b8:8d:93:e0:
6c:0a:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:16 2024 by rpki-client on console-fra.rpki-client.org