Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qye2ybRMk1TPkIGvaauZTGRjfR0.roa
File: qye2ybRMk1TPkIGvaauZTGRjfR0.roa (raw, json)
Hash identifier: YqjmbZ3vY8+5Kh0KIO7UpWgZG7brnIaoRKsbYuSsMag=
Subject key identifier: AB:27:B6:C9:B4:4C:93:54:CF:90:81:AF:69:AB:99:4C:64:63:7D:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F52F8A2DB3C8C12B6D30701E123381582
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qye2ybRMk1TPkIGvaauZTGRjfR0.roa
Signing time: Tue 07 May 2024 12:12:57 +0000
ROA not before: Tue 07 May 2024 12:12:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
193.148.253.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 19:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:f8:a2:db:3c:8c:12:b6:d3:07:01:e1:23:38:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 7 12:12:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab27b6c9b44c9354cf9081af69ab994c64637d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:85:e7:2f:a6:42:b2:9b:d6:c2:b4:12:ba:
e6:e8:35:fb:be:27:f1:3b:d9:08:5d:b1:99:38:f5:
dc:98:fa:ba:df:99:09:fa:b8:11:7b:fc:0f:fc:8a:
9a:1b:5c:fe:b2:cb:94:da:2d:79:b0:7f:c7:5d:e1:
d2:5e:07:56:07:a5:5b:9a:d7:22:f9:1f:ca:59:21:
f8:91:20:5b:9c:77:54:21:e6:91:69:21:20:80:6b:
42:65:00:4d:9f:c8:60:7d:b0:c1:44:0c:3a:f1:26:
47:4d:29:3e:07:b5:f9:8d:17:11:b8:a5:79:31:68:
53:e7:5e:8e:49:a7:b4:f4:23:5c:65:b5:e6:e2:77:
80:d0:52:a9:ca:f0:21:dc:1f:00:6d:99:03:56:46:
9c:e4:a7:03:b0:bf:6a:d7:b1:37:cd:3e:9a:75:ea:
92:ce:3e:5e:17:c8:4c:a6:ea:9b:9b:06:ea:09:2f:
4e:24:23:75:f8:44:ed:c4:fe:e9:0d:dd:03:8b:ba:
a0:7d:bb:e8:2d:8a:4f:04:f6:93:82:d4:b1:f4:99:
14:4e:4f:43:53:42:13:65:79:10:d5:42:45:54:d3:
96:b8:06:0d:22:e7:e3:0b:9a:66:65:db:b6:4e:7d:
54:22:0d:ff:e5:6b:f9:ba:e5:c5:f2:c4:ff:15:ad:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:B6:C9:B4:4C:93:54:CF:90:81:AF:69:AB:99:4C:64:63:7D:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qye2ybRMk1TPkIGvaauZTGRjfR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/24
185.252.160.0/23
193.148.253.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
92:07:b8:5e:73:46:a2:5f:f8:4b:b2:e7:90:17:83:e7:0e:75:
32:69:79:12:43:a8:bc:16:ce:c1:11:a9:96:41:9d:ac:e2:a8:
29:02:85:12:db:6a:88:cb:6e:8e:c5:7b:6a:c6:3a:24:ec:c2:
a2:10:a9:0f:4d:5b:df:64:77:93:f8:4b:d7:92:d8:df:39:b0:
d0:cd:ab:9d:ea:c7:4d:bc:1a:92:1b:9c:6e:4c:58:65:d2:00:
60:a4:d9:5f:55:44:dd:5d:43:43:9f:f2:c9:78:00:4d:80:51:
ae:29:bd:48:b4:58:3e:cc:d4:ce:0d:6b:de:45:81:ef:28:cc:
b9:3d:4b:31:36:f3:dc:a0:b8:00:90:0e:ea:9e:13:ac:22:48:
ba:29:a2:21:e2:aa:d4:1f:fe:05:69:d5:2a:01:ec:22:a2:dd:
f6:ed:42:ea:f0:69:d5:f8:84:51:50:59:8c:84:c2:73:d8:b0:
ad:33:5c:31:7d:e5:60:22:47:2a:07:85:b3:92:15:9a:8b:96:
09:f2:f0:e5:92:ee:8b:ec:cc:c6:0a:57:69:eb:c2:e7:53:9c:
a9:a5:0c:c2:ae:2a:d7:cd:0a:69:47:21:32:cb:bb:76:ca:5c:
fc:6d:86:9e:8f:c7:f7:d9:ef:ce:b9:8d:3a:95:76:ef:8b:0e:
c5:90:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:20 2024 by rpki-client on console-fra.rpki-client.org