Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/neadnc4m8TfQ1h11LCREWxYRET4.roa
File: neadnc4m8TfQ1h11LCREWxYRET4.roa (raw, json)
Hash identifier: eEvZnvguEtMV9992QTchzKN/1suXEMeeQ8Ai4jVGDnE=
Subject key identifier: 9D:E6:9D:9D:CE:26:F1:37:D0:D6:1D:75:2C:24:44:5B:16:11:11:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01926C6A82DA10C34A2C1BD0BAEAB7F86360
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/neadnc4m8TfQ1h11LCREWxYRET4.roa
Signing time: Tue 08 Oct 2024 13:56:12 +0000
ROA not before: Tue 08 Oct 2024 13:56:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.124.0/24 maxlen: 24
87.121.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 08:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6a:82:da:10:c3:4a:2c:1b:d0:ba:ea:b7:f8:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 8 13:56:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de69d9dce26f137d0d61d752c24445b1611113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:52:6b:1a:4c:42:34:ef:20:93:10:7f:a1:
c9:33:ca:8f:2d:c9:10:6b:07:e9:44:ae:f2:bb:6a:
f6:d3:09:5e:f7:19:cb:ee:ef:8a:da:61:90:ff:ef:
d7:1b:89:58:d3:2b:9c:24:71:f1:e3:e5:8f:94:9b:
e4:9b:e8:d2:42:c6:65:04:eb:a8:02:3c:f5:b4:78:
97:59:ea:ea:c8:d1:1a:6b:a4:4d:d9:56:69:75:17:
62:06:7e:6a:f2:ce:38:ac:8f:cb:23:72:93:d0:e0:
d4:0d:e6:d7:69:d4:3f:8f:42:22:bb:b8:b9:25:51:
5d:54:2e:0a:a0:02:b3:f3:aa:e4:fd:c3:4a:dd:92:
18:fd:8b:ca:e9:3e:e1:96:67:7e:61:e1:ee:b2:fc:
89:f1:5e:0d:37:16:eb:64:ad:31:ba:65:1b:5d:77:
72:a9:9b:92:75:7f:ce:ac:6e:4c:f3:a9:ed:8f:cb:
10:af:6a:44:0a:a5:77:63:9f:47:61:c6:c8:60:c2:
1c:8d:03:e0:cb:31:7e:43:21:d5:24:7c:5e:2f:88:
f8:5d:2e:f2:cc:35:d1:99:3c:14:1e:d4:8d:a7:47:
e6:0d:25:d8:ea:b3:84:d7:60:69:2a:53:1e:1d:68:
d3:9b:3d:60:e4:e4:0d:4a:b9:bb:eb:0a:9d:1d:1b:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:9D:9D:CE:26:F1:37:D0:D6:1D:75:2C:24:44:5B:16:11:11:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/neadnc4m8TfQ1h11LCREWxYRET4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
Signature Algorithm: sha256WithRSAEncryption
42:b8:43:99:fd:5a:31:ff:0b:7d:49:73:d4:30:30:aa:cf:f5:
62:4a:df:44:f5:88:02:2d:7c:c6:50:f8:d0:17:3e:fa:b4:c5:
d2:cc:73:ee:9b:e2:81:69:a1:84:36:07:25:6f:17:45:18:12:
52:e8:a9:f2:11:87:5b:ab:51:65:08:c7:0e:4b:c6:44:f8:49:
65:2a:de:ab:71:b5:5c:99:bc:6a:08:00:10:e6:86:83:f1:59:
53:82:89:ce:70:7c:df:c2:46:85:3e:32:2b:08:83:99:e6:10:
8e:8e:e9:54:a4:a8:76:75:04:30:a7:50:7b:a4:98:50:1e:76:
8c:db:d3:d0:b5:20:b6:61:7f:65:9c:5d:f1:93:43:64:31:b6:
20:b1:de:ad:5a:ed:ac:60:bf:01:5b:fe:65:6a:e9:a6:0a:5c:
b0:99:fa:e6:0e:0a:8f:96:fe:09:ef:10:6c:06:b7:7e:85:52:
d2:df:ed:31:22:66:f3:c2:08:6c:da:cc:64:fc:56:18:92:d3:
02:e8:28:20:8c:ac:3d:4e:97:6c:23:d2:b9:9a:a6:15:38:74:
65:4f:2b:fd:94:61:56:33:aa:64:13:30:c2:3c:af:ec:43:39:
e7:89:b4:ff:50:12:4c:5e:ad:be:a1:13:05:83:ba:66:df:75:
5a:18:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 10:37:08 2024 by rpki-client on console-fra.rpki-client.org