Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/muTQ1DqRpUSqfuRlJ2wDBvgnJG8.roa
File: muTQ1DqRpUSqfuRlJ2wDBvgnJG8.roa (raw, json)
Hash identifier: QgRjQetdLAt4Gl/r4J1s70vGIhAqZlwrHgpXw8NSHxk=
Subject key identifier: 9A:E4:D0:D4:3A:91:A5:44:AA:7E:E4:65:27:6C:03:06:F8:27:24:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCECB6487CAF74E0D4AC08EA620F3E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/muTQ1DqRpUSqfuRlJ2wDBvgnJG8.roa
Signing time: Tue 02 Jan 2024 06:29:30 +0000
ROA not before: Tue 02 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50368
IP address blocks: 87.121.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ec:b6:48:7c:af:74:e0:d4:ac:08:ea:62:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ae4d0d43a91a544aa7ee465276c0306f827246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:4b:3d:11:f4:37:fa:05:90:f6:5c:16:b8:
1f:24:ea:6d:e0:14:b6:a0:8f:d0:48:82:34:0a:e8:
d6:80:13:b6:c2:45:e0:75:e8:cb:bc:f7:88:8a:7c:
2f:05:04:a3:93:9e:6e:a0:5a:cc:80:bb:51:61:72:
0e:f5:af:12:00:2f:62:16:69:6d:45:c0:bd:32:4e:
88:4b:ed:5e:cd:b0:9a:33:61:a6:f5:be:cb:15:91:
54:c0:d4:e0:74:f5:43:72:d9:07:2b:b0:60:e4:97:
dc:84:0e:ea:e0:c5:43:9f:73:14:ac:4d:35:4a:67:
14:a7:92:cb:47:65:87:34:66:bc:64:34:54:04:8d:
d9:79:b3:8b:9d:71:38:69:8c:54:74:c6:6f:78:12:
ba:65:28:cc:68:6e:30:a2:06:4e:ad:c4:48:45:6a:
c8:44:c5:58:1a:27:7f:6e:84:68:34:9a:b4:be:fc:
50:99:c2:66:7b:84:65:f4:fa:5a:09:1a:5e:21:fc:
57:97:66:e8:a3:ac:69:43:4e:62:7b:f5:c2:54:11:
f3:5c:3d:57:2c:a3:58:a9:04:84:49:ac:eb:f1:03:
0d:18:c4:d3:e8:39:d3:79:c3:d0:6a:38:cb:34:08:
49:8e:b0:41:62:54:73:ad:a4:78:c9:22:fa:ce:b0:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:D0:D4:3A:91:A5:44:AA:7E:E4:65:27:6C:03:06:F8:27:24:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/muTQ1DqRpUSqfuRlJ2wDBvgnJG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:d1:ba:ca:78:df:a4:19:31:de:8c:c5:d5:33:fe:d8:a2:fd:
dc:5e:1a:bf:88:6e:ea:c0:bb:bf:d3:1c:4f:0b:d4:4f:f9:a2:
89:5d:37:3a:66:38:a2:39:4b:cf:e4:27:69:e1:21:73:71:8a:
8f:e4:7b:22:1f:b0:c2:b2:74:de:04:f3:76:1a:dd:33:00:c5:
74:74:80:27:d4:0c:c3:0e:70:0a:ec:6f:63:76:94:6c:46:d5:
76:c9:06:00:fa:49:42:4c:ef:55:2a:c2:0e:18:71:aa:de:98:
ef:b4:88:a7:53:7a:ba:a2:bb:66:af:43:16:ce:4b:fa:5a:84:
02:2a:44:dc:f9:c4:0a:fa:5c:75:1c:d5:af:1f:58:06:cc:81:
52:bf:ca:7d:55:47:9b:ae:e4:44:73:52:2e:47:ac:85:a5:f5:
6f:2d:f0:fd:ec:c6:a6:1c:10:cd:2d:fd:8d:72:e4:5d:6a:0f:
d3:34:d9:fd:8f:e0:8b:f1:64:05:bc:89:3f:fa:56:3f:70:95:
c1:8d:dd:c6:69:4f:4a:90:ea:8a:11:d9:3b:fb:c1:46:d8:83:
f2:da:ff:e2:0c:f6:bd:d6:2b:b9:fb:8c:e9:4f:e4:43:7d:bd:
35:97:d1:11:8f:f0:57:66:fb:da:27:29:c3:d3:db:da:96:78:
dc:fe:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:12 2025 by rpki-client