Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jt7tqFGYMYQRoXUwnj0XTv4sygE.roa
File: jt7tqFGYMYQRoXUwnj0XTv4sygE.roa (raw, json)
Hash identifier: ZPjSkVgiBCGmXcFqyRXaY2myZoAKbWlsYRzGb1PZCIM=
Subject key identifier: 8E:DE:ED:A8:51:98:31:84:11:A1:75:30:9E:3D:17:4E:FE:2C:CA:01
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019256B9A2BA452597E6F3E732DF28147C61
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jt7tqFGYMYQRoXUwnj0XTv4sygE.roa
Signing time: Fri 04 Oct 2024 08:50:59 +0000
ROA not before: Fri 04 Oct 2024 08:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 87.121.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 12:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:b9:a2:ba:45:25:97:e6:f3:e7:32:df:28:14:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 4 08:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8edeeda85198318411a175309e3d174efe2cca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:f1:4c:9f:f7:85:16:02:a5:77:96:85:5a:
9c:ac:6e:1a:e5:7c:2c:e7:07:4e:6d:e8:5f:e5:3a:
20:59:9f:a8:4d:e2:16:c8:27:68:cb:71:6e:ce:cd:
1f:f7:a2:77:6b:4d:f2:65:2a:a3:70:90:c0:f3:5b:
49:cc:cc:e9:87:ee:3f:32:eb:0a:22:9c:6b:8f:24:
29:b9:b1:53:9e:7c:ea:c9:85:fe:c9:e0:f9:d7:4c:
93:90:7b:cc:34:2a:e2:ff:e1:bb:af:5e:09:98:3b:
ae:de:d7:aa:a5:28:d5:fd:bf:f4:bf:2c:b9:00:71:
76:bc:45:0c:a3:3d:bc:e1:6d:3c:87:70:c2:71:90:
41:0c:8c:03:90:31:ee:6a:67:32:32:de:23:b5:92:
55:41:2e:59:0f:2d:c9:9a:d3:c2:b9:1b:a6:ed:5d:
1f:4c:2c:7c:0b:f3:07:bd:ca:ca:04:d9:93:e6:2e:
48:28:2d:d9:23:c9:dd:a7:8c:8a:ab:12:e1:b8:6a:
7d:51:da:be:d3:f2:90:9c:b1:56:ca:03:73:b0:fe:
07:11:be:7d:01:90:3b:3d:ed:50:f1:a5:46:ad:2a:
33:91:db:90:84:52:46:84:d2:67:b4:be:01:a4:be:
6d:2b:7f:c5:08:77:69:f6:f5:05:d3:c1:04:5e:47:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DE:ED:A8:51:98:31:84:11:A1:75:30:9E:3D:17:4E:FE:2C:CA:01
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jt7tqFGYMYQRoXUwnj0XTv4sygE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:af:d4:43:a5:07:9a:f3:e0:53:6f:25:5a:ec:a3:b7:67:76:
84:ae:c0:9c:75:37:92:be:67:af:e3:c8:27:7f:59:6a:c5:8a:
56:eb:88:f8:8c:3b:3c:72:73:6d:9f:37:0d:3e:71:9b:cc:96:
9f:06:d4:6e:a5:14:6a:70:a0:b7:9e:d7:e1:09:d0:45:8d:08:
e1:ac:db:72:38:bd:02:7d:c2:e3:5a:a3:48:24:06:55:4e:b6:
85:19:84:0d:71:f5:c2:b4:2c:99:5d:0c:61:16:d1:c0:15:fa:
23:e3:c4:2d:d0:69:eb:3f:90:ed:3b:7d:81:ff:54:09:ea:cb:
2a:39:f2:9b:f1:cc:00:00:96:b4:d9:6c:f9:fb:35:35:a9:95:
66:e7:3c:ab:01:26:cd:0e:58:2d:a1:c4:fa:a3:78:f5:0e:15:
e2:9e:ba:5d:99:2c:25:90:08:ca:34:26:aa:d5:5a:8c:e3:93:
ac:d0:90:25:04:f8:ed:7c:b5:84:f5:19:b5:8e:f6:60:3e:24:
8b:cb:52:e6:49:ec:00:da:b4:87:b2:8d:1f:b3:6a:9f:6f:43:
a8:6a:62:93:1a:6b:62:cc:1e:32:67:4a:84:0b:2b:86:09:18:
0a:e4:d4:74:40:2a:fb:30:f8:7d:9e:06:fb:29:b8:51:b9:3c:
a9:a6:80:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJWuaK6RSWX5vPnMt8oFHxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDA0MDg1MDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWRlZWRhODUxOTgzMTg0MTFhMTc1MzA5ZTNkMTc0ZWZlMmNjYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJXxTJ/3hRYCpXeWhVqcrG4a5Xws
5wdObehf5TogWZ+oTeIWyCdoy3Fuzs0f96J3a03yZSqjcJDA81tJzMzph+4/MusK
IpxrjyQpubFTnnzqyYX+yeD510yTkHvMNCri/+G7r14JmDuu3teqpSjV/b/0vyy5
AHF2vEUMoz284W08h3DCcZBBDIwDkDHuamcyMt4jtZJVQS5ZDy3JmtPCuRum7V0f
TCx8C/MHvcrKBNmT5i5IKC3ZI8ndp4yKqxLhuGp9Udq+0/KQnLFWygNzsP4HEb59
AZA7Pe1Q8aVGrSozkduQhFJGhNJntL4BpL5tK3/FCHdp9vUF08EEXkcFnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7e7ahRmDGEEaF1MJ49F07+LMoBMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvanQ3dHFGR1lNWVFSb1hVd25qMFhUdjRzeWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3kSMA0G
CSqGSIb3DQEBCwUAA4IBAQBvr9RDpQea8+BTbyVa7KO3Z3aErsCcdTeSvmev48gn
f1lqxYpW64j4jDs8cnNtnzcNPnGbzJafBtRupRRqcKC3ntfhCdBFjQjhrNtyOL0C
fcLjWqNIJAZVTraFGYQNcfXCtCyZXQxhFtHAFfoj48Qt0GnrP5DtO32B/1QJ6ssq
OfKb8cwAAJa02Wz5+zU1qZVm5zyrASbNDlgtocT6o3j1DhXinrpdmSwlkAjKNCaq
1VqM45Os0JAlBPjtfLWE9Rm1jvZgPiSLy1LmSewA2rSHso0fs2qfb0OoamKTGmti
zB4yZ0qECyuGCRgK5NR0QCr7MPh9ngb7KbhRuTyppoD7
-----END CERTIFICATE-----
Generated at Fri Oct 25 13:41:48 2024 by rpki-client on console-fra.rpki-client.org