Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jVYPtFe3K3-PegCmhGiUW2_AKAU.roa
File: jVYPtFe3K3-PegCmhGiUW2_AKAU.roa (raw, json)
Hash identifier: T4wZTtQaY5kvaZWHwyeCguWX/Ss7f6At614p5kcu094=
Subject key identifier: 8D:56:0F:B4:57:B7:2B:7F:8F:7A:00:A6:84:68:94:5B:6F:C0:28:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EB40A8DBCD91BEC77565DD5E94740CE7F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jVYPtFe3K3-PegCmhGiUW2_AKAU.roa
Signing time: Sat 06 Apr 2024 15:32:54 +0000
ROA not before: Sat 06 Apr 2024 15:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.75.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
193.148.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 00:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:0a:8d:bc:d9:1b:ec:77:56:5d:d5:e9:47:40:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 15:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d560fb457b72b7f8f7a00a68468945b6fc02805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:46:7e:9c:fb:95:c6:ce:a9:91:cf:88:df:
b1:21:b4:6c:7c:ac:58:de:7a:51:57:b6:7f:cf:06:
df:36:ca:5a:6a:ee:17:c8:5a:11:4f:51:d5:89:06:
72:b0:a9:72:b2:30:a4:e5:03:1d:c0:3b:53:5f:84:
e8:7d:5d:ed:e1:10:28:65:41:6e:eb:43:38:5f:0c:
57:b6:e9:0a:b4:a9:13:a8:6d:47:d4:93:0a:89:33:
e0:08:4f:ce:e7:52:fe:72:df:0c:09:d5:e9:01:ce:
6c:40:6b:cd:d5:3a:da:8e:fa:ed:73:23:4f:5f:12:
b2:e8:f7:04:38:f2:56:6d:c1:d2:33:bf:6a:c9:73:
69:ae:91:6d:5c:bd:d5:b3:7f:56:e3:c0:58:23:a4:
06:92:c9:3d:e6:38:fe:bc:b4:3e:69:17:17:09:35:
1e:fe:29:80:0d:05:77:dd:8a:c2:5c:c9:ec:e2:66:
9e:78:01:4b:82:ae:43:c3:d8:8a:3d:6d:e5:74:f6:
a4:9d:ba:99:67:50:59:03:dc:86:e4:fd:eb:a0:3c:
39:d6:f6:31:3d:cb:6d:2d:0a:2d:98:6d:07:6c:5f:
54:6b:a5:81:56:11:90:fe:98:64:74:3b:bf:aa:6d:
50:a5:6a:20:66:90:88:d6:1d:55:a4:af:51:c0:f6:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:0F:B4:57:B7:2B:7F:8F:7A:00:A6:84:68:94:5B:6F:C0:28:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jVYPtFe3K3-PegCmhGiUW2_AKAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
185.252.160.0/23
193.148.253.0/24
Signature Algorithm: sha256WithRSAEncryption
95:93:8f:6f:ba:f7:48:a9:17:0a:f8:7e:41:ce:66:eb:35:ec:
34:13:ed:cc:ea:bb:3a:30:16:89:e3:7c:2e:8d:9c:83:2e:37:
3c:53:bc:0d:17:63:84:25:e7:4e:00:de:67:1c:24:5f:61:78:
4a:52:9d:87:fd:ca:16:fd:f4:09:bd:89:1d:08:31:85:a0:fe:
da:91:10:ef:05:58:68:a6:fc:8d:41:39:e6:09:51:b3:bc:07:
bc:e1:0f:ad:ab:83:b9:61:7b:ac:ed:ae:a8:5b:ae:81:b4:50:
d9:9b:f1:2f:c0:f1:83:d6:bf:56:33:de:ad:57:0c:99:36:c2:
82:31:f8:5d:b8:f8:66:ea:5a:db:1f:b2:7d:2b:37:6f:26:f6:
55:fb:f6:59:a9:6e:8b:7f:c8:fd:cd:98:32:ad:47:c3:aa:ff:
63:6b:dd:4d:79:3e:a7:c8:cd:d3:23:6b:ab:de:4d:0a:ee:ff:
3e:6b:06:48:fb:d8:8c:2c:42:ff:92:39:79:20:6d:55:f7:c0:
7a:e6:e1:7f:13:bb:4c:6f:30:01:d8:d5:98:b4:24:90:f5:18:
7c:a2:7d:1d:f1:22:53:b6:0c:5d:84:8c:c2:2c:7c:07:84:64:
f3:99:0e:fa:69:af:5a:63:3b:1b:6e:06:a4:19:7a:95:9a:54:
33:6e:b9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org