Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q29OyHWCe32WJYBlKt8r7qwjVcw.roa
File: q29OyHWCe32WJYBlKt8r7qwjVcw.roa (raw, json)
Hash identifier: 7T32e3pkW+b5H9m01TQCdnokmoud2UOoH62G1wxGN2Q=
Subject key identifier: AB:6F:4E:C8:75:82:7B:7D:96:25:80:65:2A:DF:2B:EE:AC:23:55:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CD83D0C3D81030ED7BF99355D7AC33D83
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q29OyHWCe32WJYBlKt8r7qwjVcw.roa
Signing time: Fri 05 Jan 2024 06:08:48 +0000
ROA not before: Fri 05 Jan 2024 06:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.162.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 15:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:3d:0c:3d:81:03:0e:d7:bf:99:35:5d:7a:c3:3d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 5 06:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab6f4ec875827b7d962580652adf2beeac2355cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:d7:9f:11:45:6d:5e:a2:a9:46:21:b3:89:
9a:83:3a:63:d8:93:ef:a5:5d:16:cc:47:07:13:ef:
a8:34:a2:b8:71:64:2b:c2:e7:cd:ef:3e:9d:d8:86:
fa:2b:a4:4f:24:93:d9:68:e9:67:8c:86:ee:f3:44:
16:17:b5:df:56:37:4a:95:b1:59:76:4e:bd:89:db:
34:db:db:98:51:ea:96:82:15:4b:95:36:12:49:31:
2b:86:46:2f:03:b5:39:4f:8d:6d:1c:be:75:b6:5b:
40:97:44:27:6e:4e:15:3c:83:f0:72:9e:d4:ff:04:
c2:7e:58:90:e7:b4:b3:69:10:99:76:04:8d:c7:b3:
76:fe:09:f2:16:7c:10:2b:52:f6:a0:55:ac:3c:86:
68:52:35:3b:70:04:ef:b0:02:73:38:76:18:38:ae:
e3:81:ba:54:fd:9a:55:05:7c:42:61:84:90:35:ec:
15:9d:c0:38:58:73:e8:c1:15:2e:59:78:6a:b4:4f:
cf:d6:ba:64:70:ef:8d:0e:47:0a:c3:9e:7a:26:07:
30:43:79:7f:8e:56:1c:ff:4a:e2:08:1d:6e:85:7e:
7d:09:d0:1c:e5:cc:14:37:00:60:42:fe:00:11:33:
95:6d:a2:59:46:58:ea:fa:0a:06:50:63:90:5f:80:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:4E:C8:75:82:7B:7D:96:25:80:65:2A:DF:2B:EE:AC:23:55:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q29OyHWCe32WJYBlKt8r7qwjVcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.162.0/24
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
08:05:32:8b:0b:9e:76:26:62:4d:a0:0c:ad:1f:97:64:0e:77:
50:b5:2d:65:e7:4a:f9:70:6b:b6:6a:89:0e:01:bb:ae:ad:bd:
5e:cd:a0:0a:a3:fc:c7:69:aa:e3:f2:5e:a4:85:c8:37:bb:d7:
6d:79:d2:3a:16:2a:1e:2e:30:41:c8:5b:85:39:7d:6c:21:81:
85:f8:5c:7e:60:82:59:1d:b6:b2:d1:31:0b:a3:5e:8f:bc:84:
76:37:62:48:ea:d7:ae:72:24:14:a7:a7:96:5f:84:b5:fc:d0:
95:38:a6:08:64:f5:b8:f4:ab:2c:4b:5a:15:8e:af:30:fd:20:
71:68:e8:74:99:08:eb:0e:d1:eb:4d:d5:55:e3:67:9e:a1:ac:
a7:a4:3e:bf:14:31:e5:87:bc:ff:8c:81:1f:06:21:02:49:4e:
c1:95:fe:4e:c4:0b:40:8d:bd:b2:82:bb:5a:35:5e:3b:e5:f8:
48:7e:70:d2:12:a4:0c:c8:92:64:58:75:0a:17:c5:96:96:1a:
66:a8:5a:3b:3f:a1:f3:9d:ed:8c:33:55:c3:38:8d:ab:4c:81:
0c:92:c3:43:70:63:01:b5:fe:2b:4a:6b:6f:e7:56:c5:6e:f9:
b3:87:19:58:59:36:77:eb:59:9b:b7:71:84:37:45:bf:fb:1d:
28:19:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 20:08:13 2024 by rpki-client on console-ams.rpki-client.org