Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tHWjbfO5NUOkURWTXeqWzqxXNGo.roa
File: tHWjbfO5NUOkURWTXeqWzqxXNGo.roa (raw, json)
Hash identifier: gYZA3tlGUwlR5qHSt7KrEGZ/rU6UAlDhuhsPEuCBL3M=
Subject key identifier: B4:75:A3:6D:F3:B9:35:43:A4:51:15:93:5D:EA:96:CE:AC:57:34:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DD86E35B5C56F2D38B83BB567AFC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tHWjbfO5NUOkURWTXeqWzqxXNGo.roa
Signing time: Sun 01 Jan 2023 13:25:05 +0000
ROA not before: Sun 01 Jan 2023 13:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30860
IP address blocks: 87.120.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:dd:86:e3:5b:5c:56:f2:d3:8b:83:bb:56:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b475a36df3b93543a45115935dea96ceac57346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:ff:d9:3f:04:16:a1:e9:c2:59:0d:f6:a8:
69:29:34:58:fb:42:a0:63:eb:af:01:d9:7f:81:29:
43:12:9c:67:9d:2a:5a:ec:69:70:fc:3f:a8:7d:51:
4d:6f:c5:a4:9e:ae:32:fd:15:79:3c:2a:6a:80:b8:
2b:0c:00:53:e7:28:aa:9d:8a:91:2c:9a:83:d2:99:
cd:a6:89:55:5c:8c:0f:8b:04:95:b5:ac:db:b6:0e:
68:38:79:fc:95:07:6a:f5:76:68:ef:67:92:46:b1:
f4:f1:97:1d:81:5c:23:e0:63:12:7e:63:72:d9:95:
6e:57:4e:c7:5d:bb:87:1a:65:16:cd:d6:e2:67:d0:
6b:d9:5d:8e:8d:45:50:25:34:bd:9c:4f:0a:74:ae:
ab:54:b1:66:89:46:07:e0:b7:05:31:b6:e2:7c:45:
bd:2e:2e:f4:68:22:f6:18:eb:2d:b7:e6:6a:b6:16:
cb:82:80:cb:93:83:93:4e:55:1e:65:86:1c:3e:86:
64:24:04:92:f9:a9:46:5d:65:7f:73:e3:e0:9f:40:
e6:4d:84:f4:b4:66:4f:73:fe:9e:d1:c1:57:65:c0:
e2:1a:c9:2b:a5:c5:31:11:95:31:af:61:fa:51:e9:
7a:84:a7:ea:d9:af:cd:51:6c:6e:11:b9:f2:33:c4:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:A3:6D:F3:B9:35:43:A4:51:15:93:5D:EA:96:CE:AC:57:34:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tHWjbfO5NUOkURWTXeqWzqxXNGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:24:79:42:3d:66:27:52:b0:c3:e3:1a:6d:46:ef:e6:41:7a:
22:8b:a0:70:3b:13:ac:a8:54:b9:3a:82:20:17:f6:2a:9b:8e:
43:15:63:c2:d0:bd:d2:0f:bc:93:94:80:03:ef:62:d3:49:d1:
2c:9e:70:03:04:06:b8:0f:03:ac:02:cf:c5:dc:f4:d1:25:88:
3a:75:84:cc:5d:18:88:bc:68:83:60:c5:f9:10:f1:43:96:58:
a6:dc:8b:b1:70:29:32:73:37:65:a4:61:a7:42:ed:2a:6d:13:
7d:ad:ca:f3:fc:93:72:9f:d7:00:ec:99:c5:0a:f3:b1:9d:17:
46:9d:f4:c7:6d:62:4b:19:ec:68:d2:5a:32:bb:c6:7e:de:d4:
8b:5e:84:fc:6f:4b:f7:1b:d3:2b:70:8e:2d:9b:a0:cb:22:31:
ad:ac:73:dc:1d:36:d2:82:c5:8a:cd:8f:08:32:74:2f:70:80:
64:78:30:32:d0:ee:32:2f:b8:5b:0a:a3:d7:c3:ef:25:af:ee:
4c:93:fb:a2:9c:2f:a5:d4:70:1f:b1:49:4e:a1:ed:81:17:eb:
db:0e:0b:70:98:c5:bc:22:a8:3b:3d:8c:7e:a3:63:1d:c5:9d:
c4:15:1e:e8:6f:18:33:0d:7e:3f:39:34:4e:89:49:86:57:92:
c2:8f:b4:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgd2G41tcVvLTi4O7Vnr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDc1YTM2ZGYzYjkzNTQzYTQ1MTE1OTM1ZGVhOTZjZWFjNTczNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/v/2T8EFqHpwlkN9qhpKTRY+0Kg
Y+uvAdl/gSlDEpxnnSpa7Glw/D+ofVFNb8Wknq4y/RV5PCpqgLgrDABT5yiqnYqR
LJqD0pnNpolVXIwPiwSVtazbtg5oOHn8lQdq9XZo72eSRrH08ZcdgVwj4GMSfmNy
2ZVuV07HXbuHGmUWzdbiZ9Br2V2OjUVQJTS9nE8KdK6rVLFmiUYH4LcFMbbifEW9
Li70aCL2GOstt+ZqthbLgoDLk4OTTlUeZYYcPoZkJASS+alGXWV/c+Pgn0DmTYT0
tGZPc/6e0cFXZcDiGskrpcUxEZUxr2H6Uel6hKfq2a/NUWxuEbnyM8RElQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLR1o23zuTVDpFEVk13qls6sVzRqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdEhXamJmTzVOVU9rVVJXVFhlcVd6cXhYTkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gkMA0G
CSqGSIb3DQEBCwUAA4IBAQCaJHlCPWYnUrDD4xptRu/mQXoii6BwOxOsqFS5OoIg
F/Yqm45DFWPC0L3SD7yTlIAD72LTSdEsnnADBAa4DwOsAs/F3PTRJYg6dYTMXRiI
vGiDYMX5EPFDllim3IuxcCkyczdlpGGnQu0qbRN9rcrz/JNyn9cA7JnFCvOxnRdG
nfTHbWJLGexo0loyu8Z+3tSLXoT8b0v3G9MrcI4tm6DLIjGtrHPcHTbSgsWKzY8I
MnQvcIBkeDAy0O4yL7hbCqPXw+8lr+5Mk/uinC+l1HAfsUlOoe2BF+vbDgtwmMW8
Iqg7PYx+o2MdxZ3EFR7obxgzDX4/OTROiUmGV5LCj7Sr
-----END CERTIFICATE-----
Generated at Thu Jul 20 12:23:25 2023 by rpki-client on console-ams.rpki-client.org