Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rCt6xCcfzoAX6JJndjaheEkXHAo.roa
File: rCt6xCcfzoAX6JJndjaheEkXHAo.roa (raw, json)
Hash identifier: sv/8jZEIRz7I8tOIU9Cdpq1adr9dAhfdAvQmwS680HI=
Subject key identifier: AC:2B:7A:C4:27:1F:CE:80:17:E8:92:67:76:36:A1:78:49:17:1C:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD845D938F5B767661F99383D673E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rCt6xCcfzoAX6JJndjaheEkXHAo.roa
Signing time: Tue 02 Jan 2024 06:29:25 +0000
ROA not before: Tue 02 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 87.121.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 09:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d8:45:d9:38:f5:b7:67:66:1f:99:38:3d:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2b7ac4271fce8017e892677636a17849171c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:eb:9d:e4:02:9f:18:e6:a6:e9:b7:2c:62:
fc:0a:bc:ea:1f:14:37:8a:c6:58:7c:6b:d3:86:f2:
2e:16:7e:1a:ed:f4:d4:f4:e0:ef:3e:bc:fd:98:0e:
6e:2c:81:1a:84:d9:5d:9e:cb:ae:8b:04:0e:2d:3a:
63:a9:2a:53:7a:3e:c5:aa:31:84:cc:b1:29:41:ab:
50:e3:7d:6c:ba:28:c2:d0:70:6b:76:f3:29:fb:d9:
e1:ca:6e:cf:c9:bd:ca:6f:ae:5f:14:84:da:ab:9d:
c6:9b:c2:81:0e:71:8e:64:f3:c4:d1:29:84:f4:e2:
b8:6f:6d:2c:8b:87:48:d1:f8:00:61:66:d1:b3:f8:
19:37:09:76:a4:17:43:c3:30:5d:e3:a5:5c:1a:32:
9f:d1:e0:ca:2b:c0:91:05:9d:a5:e9:62:04:db:a7:
fc:a7:e1:9f:ea:67:6d:12:63:2e:75:be:4a:28:ce:
11:7c:0b:00:53:22:9c:c7:75:d0:35:7a:21:16:14:
0c:c9:b5:5f:b6:17:e6:b0:a5:75:ce:19:e0:af:3d:
4b:41:02:04:80:f6:88:a4:f3:3b:aa:e6:54:02:51:
9d:bd:a0:3f:c3:8f:26:11:56:9a:26:3a:25:7c:62:
f5:b3:89:02:60:e9:54:20:51:3a:bc:78:05:0a:e8:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:7A:C4:27:1F:CE:80:17:E8:92:67:76:36:A1:78:49:17:1C:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rCt6xCcfzoAX6JJndjaheEkXHAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3f:e5:3a:8b:4c:35:bd:53:c5:1d:1a:8d:c6:e1:33:fc:86:
ac:10:7e:03:3c:3b:90:49:9e:ff:f2:f5:a4:3b:41:c4:19:28:
59:d5:4d:e9:d0:76:64:4b:1a:05:81:4f:52:80:89:30:7b:5e:
e3:a4:29:17:93:a8:9c:b7:05:82:5e:f8:6a:82:69:3a:0c:b9:
86:44:7b:77:d6:32:7d:4a:93:b8:45:5e:00:ba:53:bd:86:99:
53:21:a6:01:b6:f9:66:0a:c6:a1:27:0e:9c:59:b9:3a:95:29:
a2:c4:c9:08:9e:18:5b:38:f6:2f:ac:60:ab:0e:11:fc:23:d5:
86:c1:96:a2:51:8e:f6:05:88:c5:3a:3d:4a:63:f4:2a:72:cb:
61:42:51:a1:db:bf:f2:45:53:3b:71:3d:5d:0f:0e:d3:e1:b1:
b8:8a:6e:1b:01:1e:d6:8b:da:21:d3:dc:d1:7f:19:f0:b2:63:
32:33:d8:79:d4:e2:52:6b:c0:fc:0b:02:45:f4:cd:d5:27:cf:
0f:7a:93:e7:ea:65:bf:c2:e3:ca:35:80:ca:e1:9c:85:6f:cd:
4b:a3:64:db:e0:3d:bc:4f:7f:33:6c:70:22:e7:79:69:43:f4:
1b:57:00:5a:c7:a8:d2:be:2e:24:1f:4c:68:76:db:43:55:45:
c1:ff:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:45 2024 by rpki-client on console-ams.rpki-client.org