Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mdwK9HuibdUKGMDy_W_HGdohe_8.roa
File: mdwK9HuibdUKGMDy_W_HGdohe_8.roa (raw, json)
Hash identifier: +nTmliKTX/j+Sm4ruG27ONOBgkuwfHCk4M1Ra6sT+B8=
Subject key identifier: 99:DC:0A:F4:7B:A2:6D:D5:0A:18:C0:F2:FD:6F:C7:19:DA:21:7B:FF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018835AD88380A0D7BB87925BE0143211E4D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mdwK9HuibdUKGMDy_W_HGdohe_8.roa
Signing time: Fri 19 May 2023 20:22:24 +0000
ROA not before: Fri 19 May 2023 20:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 87.121.45.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:ad:88:38:0a:0d:7b:b8:79:25:be:01:43:21:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 20:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99dc0af47ba26dd50a18c0f2fd6fc719da217bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:2f:a5:f8:3f:14:cc:62:f9:65:99:4f:dd:
e0:a9:9e:97:8c:09:fc:d1:ca:0e:9e:bf:c7:14:86:
10:b3:a7:c4:a3:ae:a3:b8:a7:06:83:23:c1:65:32:
ec:a4:c9:f6:13:a5:ae:9f:12:24:cf:6f:e0:5e:16:
21:1e:58:aa:c3:26:a7:38:09:5f:5a:50:b3:c7:e9:
f0:0e:db:d7:3d:97:7f:93:98:64:11:f2:a0:80:94:
71:e4:b2:50:ed:7b:aa:12:86:1a:7e:72:40:57:c9:
f2:4b:a7:98:0c:a1:1d:9d:ee:0d:f9:db:1d:aa:b5:
b7:9f:b6:a1:3b:33:5c:a2:61:6f:f3:a4:f3:1d:6a:
6d:36:2f:8b:3f:77:3b:04:98:24:6a:80:9d:cd:6f:
ac:5e:df:c5:d7:c9:49:c4:34:be:76:69:16:7e:94:
e7:52:67:b2:5b:d8:28:33:7b:15:77:57:57:03:00:
98:08:cb:6c:f8:5b:4b:96:0a:98:a6:8d:b9:13:6f:
ee:47:31:d0:f8:c6:d3:5a:20:a2:18:22:88:2b:20:
a2:be:16:28:11:ac:35:cc:41:51:80:67:3b:ad:55:
5b:6c:e8:df:63:64:f0:6d:40:c9:30:57:f2:18:f6:
06:43:40:e4:39:68:a5:0e:82:08:e7:57:98:0e:c0:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DC:0A:F4:7B:A2:6D:D5:0A:18:C0:F2:FD:6F:C7:19:DA:21:7B:FF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mdwK9HuibdUKGMDy_W_HGdohe_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.45.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:86:20:cd:4b:7e:8f:15:65:e2:9c:8e:b2:fe:a9:e5:c5:c8:
c7:57:a0:f1:63:f6:69:4e:3c:5c:65:18:3b:f6:b1:e4:94:2b:
37:c7:91:a8:f6:1d:3b:95:16:18:f3:78:21:78:aa:4b:79:a4:
92:c9:e0:a8:14:3d:33:cb:9a:a9:a0:83:e2:18:42:f8:53:6d:
98:6c:30:23:72:96:c8:36:e5:93:37:c8:72:5f:61:c7:ed:88:
ae:07:98:63:38:4a:62:52:24:ce:ef:e3:40:ca:db:e0:61:a8:
b5:b5:c9:08:f0:76:f5:bd:5b:b5:a7:dc:59:74:5a:2e:a7:0d:
a6:70:1f:ff:26:a2:22:c2:7b:d0:7a:5a:ca:e4:48:89:f7:b0:
b9:b1:87:26:64:d6:11:ad:df:82:d9:07:8d:2f:f8:1b:1a:ac:
98:50:90:11:21:49:73:8a:41:11:ce:2c:43:f0:29:be:66:62:
f1:d0:4f:5a:7f:0a:d5:5d:8a:92:5f:99:33:0a:db:26:17:cc:
b7:2c:db:2e:10:9d:e2:d1:a1:68:4e:f4:39:0b:77:0b:da:ed:
ab:68:43:19:18:49:0d:18:8c:7e:eb:72:b4:5c:0d:ac:46:71:
51:de:40:1a:35:9a:71:f8:8a:34:38:84:b7:27:42:35:bc:f9:
9e:12:d8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org