Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s0RLh58kFVo9iB9k1J7RKXrz9nY.roa
File: s0RLh58kFVo9iB9k1J7RKXrz9nY.roa (raw, json)
Hash identifier: pe9lMgNONooQDHQ5cFDSxL9lf1/wBbkf7lp6rVhT4Bs=
Subject key identifier: B3:44:4B:87:9F:24:15:5A:3D:88:1F:64:D4:9E:D1:29:7A:F3:F6:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A83BF5A0D3689B3FE0EBAF77605F94297
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s0RLh58kFVo9iB9k1J7RKXrz9nY.roa
Signing time: Mon 11 Sep 2023 10:17:50 +0000
ROA not before: Mon 11 Sep 2023 10:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 87.120.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:bf:5a:0d:36:89:b3:fe:0e:ba:f7:76:05:f9:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 11 10:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3444b879f24155a3d881f64d49ed1297af3f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:17:35:c0:2a:d5:41:cc:81:8f:5c:ba:a9:
e2:81:9f:f8:c0:9a:b6:36:81:16:62:87:ef:a3:f3:
bb:f1:7a:bf:c7:df:1d:1a:b7:00:7c:51:e1:9f:a8:
9e:11:fa:b7:65:f6:b2:3d:1a:24:54:d5:1d:d9:b2:
f2:32:15:1c:f8:8a:fe:f3:b5:f2:99:c2:32:3c:c2:
78:65:0f:07:c0:ac:c1:e7:ac:9f:2a:0b:17:ae:6c:
8f:a0:39:18:90:fe:ca:16:af:cb:23:ba:0f:ed:3a:
c5:eb:e0:e3:7a:3f:c8:ee:39:b2:85:2d:7e:1f:d9:
20:41:a2:14:94:6c:56:11:3a:4e:6f:54:9c:e2:ee:
d5:8e:d4:10:a4:9a:f9:41:2a:76:51:58:91:59:7b:
67:4b:b8:39:72:ee:97:05:df:9b:bc:72:6b:2b:4e:
40:22:c0:da:be:cb:5c:e2:83:d0:b1:dc:1e:d6:a4:
4d:9d:1e:9f:94:39:65:c4:bf:4b:79:c9:9f:bd:ad:
05:6c:dc:47:92:76:1f:48:0e:49:4e:a5:19:9d:a1:
40:53:5a:dd:cc:f6:04:1b:79:7d:0d:5a:d2:f4:d7:
b3:71:2c:59:6c:c4:cf:f7:5e:6e:d1:e5:6b:2e:e1:
5c:4d:b9:a4:a1:43:b2:92:c7:fc:00:64:fc:d6:27:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:44:4B:87:9F:24:15:5A:3D:88:1F:64:D4:9E:D1:29:7A:F3:F6:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s0RLh58kFVo9iB9k1J7RKXrz9nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e2:93:4d:cf:82:6d:0f:64:17:f0:32:e3:2b:1b:72:6b:dc:
4a:ea:08:0d:b1:d9:29:7d:1a:b5:7a:96:e0:06:aa:7c:d3:cd:
8c:86:f0:14:99:7a:a9:a7:00:15:40:97:1a:19:2b:04:b2:19:
89:e2:74:9b:f5:e5:82:47:f8:b9:43:78:2d:ef:dc:c8:0e:45:
1d:1c:b4:75:d5:4c:ce:7a:f0:e6:5b:6b:f0:5b:04:b5:dc:96:
34:8f:ac:ec:ae:cf:fe:19:8e:f1:28:a6:33:94:fc:b3:d7:17:
ba:7f:ae:c7:b7:7b:b7:04:69:0f:25:48:c5:fb:5e:84:f1:2c:
4e:62:5a:cc:28:4a:ac:dd:4b:e5:49:73:3e:c7:7b:db:2a:b4:
76:99:7c:df:c7:93:ac:e9:18:eb:27:b8:22:b7:23:22:56:f8:
34:c6:85:5e:67:ad:41:7f:8d:58:fb:0b:9e:36:e7:c4:7c:99:
6e:4e:a0:4c:94:18:6c:40:aa:ae:bb:fa:72:9e:4d:f1:70:dc:
ea:a8:01:11:73:55:30:8b:87:48:a4:e2:5b:3b:ae:eb:7a:54:
da:d1:b1:8b:5e:85:56:78:44:cf:d6:9f:c1:ec:9e:38:17:ea:
cd:1c:b4:87:41:f3:2c:c9:ec:2c:38:ed:88:53:11:d8:c2:aa:
3f:62:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 11:32:04 2023 by rpki-client on console-ams.rpki-client.org