Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/owC5j9d51wsEGvRSF4De8_-uRV0.roa
File: owC5j9d51wsEGvRSF4De8_-uRV0.roa (raw, json)
Hash identifier: 36ej3ri3/xg9sq3m819iExeDZQO/mYiG7lQQG/I11sc=
Subject key identifier: A3:00:B9:8F:D7:79:D7:0B:04:1A:F4:52:17:80:DE:F3:FF:AE:45:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C8E20BA4623E9E9D92B8A8AB93DE7EB9F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/owC5j9d51wsEGvRSF4De8_-uRV0.roa
Signing time: Thu 21 Dec 2023 20:45:58 +0000
ROA not before: Thu 21 Dec 2023 20:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:20:ba:46:23:e9:e9:d9:2b:8a:8a:b9:3d:e7:eb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 20:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a300b98fd779d70b041af4521780def3ffae455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:66:8d:ec:7c:e6:d5:4e:2a:bc:3f:57:bd:
66:27:52:3a:16:5f:6d:77:96:09:af:ec:19:8d:98:
7e:32:55:f6:92:76:57:b9:c4:bf:0c:f4:ff:f6:a7:
f3:bd:c1:6d:1d:50:85:d8:a3:8c:cb:11:0a:70:ad:
76:60:d5:e2:f7:40:1d:75:63:91:10:bb:e1:ef:b2:
a5:73:74:7c:0c:92:c6:56:d8:e2:6b:2d:d9:96:f8:
97:82:fa:ad:7b:e5:f0:94:e5:15:9d:1b:ad:66:ab:
c3:1a:9e:43:c6:90:ea:74:d7:dc:f6:90:84:fe:b1:
d8:6c:35:f9:5f:1d:03:ad:b3:8d:82:73:f7:58:9a:
0d:93:3f:7d:7d:2e:11:e2:01:9f:76:c4:b0:df:c4:
5e:78:a1:dd:8d:0e:7f:c8:df:93:fe:cd:be:b0:c9:
25:d2:24:4e:6d:88:61:4e:c9:b7:d3:19:5c:34:17:
30:77:e1:2d:9d:e7:7a:fa:5d:06:31:a8:3c:4f:10:
24:bb:5b:98:fd:8a:04:d4:bd:d9:82:09:0c:90:68:
95:b7:f7:55:ff:ea:81:3f:7f:99:fe:de:75:40:a4:
de:1d:80:4e:d2:7c:11:be:f4:8b:0e:08:7f:e2:a6:
a3:b1:88:54:ad:89:ea:ed:ad:ca:b4:b3:b1:52:39:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:B9:8F:D7:79:D7:0B:04:1A:F4:52:17:80:DE:F3:FF:AE:45:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/owC5j9d51wsEGvRSF4De8_-uRV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
76:69:e4:5b:86:ff:65:25:7a:21:aa:98:ab:9d:98:e9:1c:dc:
97:2d:36:00:aa:96:01:c8:67:84:d0:39:6d:3f:f7:a2:b9:7e:
f7:2a:df:e8:f7:75:82:18:88:ec:db:f6:cc:29:35:67:d2:b9:
65:07:10:d7:dd:e0:92:cd:ff:78:77:ed:0f:b3:aa:a0:5d:07:
15:96:32:35:8f:06:60:ca:dd:10:6a:12:fe:a5:eb:27:c8:43:
4e:6e:63:86:da:99:46:1b:c3:5e:7d:20:67:e4:b2:62:57:a9:
d8:b1:4b:8a:85:c4:4d:e1:da:ce:bb:31:aa:8a:3e:49:c5:15:
ff:95:c6:38:4d:29:e3:44:04:d7:58:63:12:14:a6:8a:45:b4:
7c:4f:e3:27:0d:e3:c7:26:2f:a4:75:ba:18:ef:55:2a:98:33:
c3:56:b5:de:22:0b:c4:cc:10:12:b9:34:f2:f0:ce:9a:56:f5:
03:2a:f1:a7:d9:49:25:f5:fb:d7:f9:df:a6:9e:8d:d2:ae:38:
3a:df:b6:27:53:9e:11:c3:e0:c4:0c:eb:06:a3:82:69:ea:d6:
7d:a3:77:45:5f:8f:af:72:aa:a3:36:a2:a4:f2:d9:c8:c5:36:
ff:41:b2:e4:8c:8b:c2:01:b4:01:5e:bc:fe:6b:17:f0:30:63:
11:ed:f5:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyOILpGI+np2SuKirk95+ufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjIxMjA0NTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzAwYjk4ZmQ3NzlkNzBiMDQxYWY0NTIxNzgwZGVmM2ZmYWU0NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jJmjex85tVOKrw/V71mJ1I6Fl9t
d5YJr+wZjZh+MlX2knZXucS/DPT/9qfzvcFtHVCF2KOMyxEKcK12YNXi90AddWOR
ELvh77Klc3R8DJLGVtjiay3ZlviXgvqte+XwlOUVnRutZqvDGp5DxpDqdNfc9pCE
/rHYbDX5Xx0DrbONgnP3WJoNkz99fS4R4gGfdsSw38ReeKHdjQ5/yN+T/s2+sMkl
0iRObYhhTsm30xlcNBcwd+Etned6+l0GMag8TxAku1uY/YoE1L3ZggkMkGiVt/dV
/+qBP3+Z/t51QKTeHYBO0nwRvvSLDgh/4qajsYhUrYnq7a3KtLOxUjlGYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKMAuY/XedcLBBr0UheA3vP/rkVdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvb3dDNWo5ZDUxd3NFR3ZSU0Y0RGU4Xy11UlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3hEAwQB
XXtKMA0GCSqGSIb3DQEBCwUAA4IBAQB2aeRbhv9lJXohqpirnZjpHNyXLTYAqpYB
yGeE0DltP/eiuX73Kt/o93WCGIjs2/bMKTVn0rllBxDX3eCSzf94d+0Ps6qgXQcV
ljI1jwZgyt0QahL+pesnyENObmOG2plGG8NefSBn5LJiV6nYsUuKhcRN4drOuzGq
ij5JxRX/lcY4TSnjRATXWGMSFKaKRbR8T+MnDePHJi+kdboY71UqmDPDVrXeIgvE
zBASuTTy8M6aVvUDKvGn2Ukl9fvX+d+mno3Srjg637YnU54Rw+DEDOsGo4Jp6tZ9
o3dFX4+vcqqjNqKk8tnIxTb/QbLkjIvCAbQBXrz+axfwMGMR7fVf
-----END CERTIFICATE-----
Generated at Fri Dec 22 09:51:43 2023 by rpki-client on console-ams.rpki-client.org