Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uN_FiGOIDy0vA-4PkTx9pW-KJMI.roa
File: uN_FiGOIDy0vA-4PkTx9pW-KJMI.roa (raw, json)
Hash identifier: RBNnC/OLrnxyNph7XKPbF1nAdszdbBX5UJhToYeJTK8=
Subject key identifier: B8:DF:C5:88:63:88:0F:2D:2F:03:EE:0F:91:3C:7D:A5:6F:8A:24:C2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D4D402CDC802CD634A7A217C9B41
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uN_FiGOIDy0vA-4PkTx9pW-KJMI.roa
Signing time: Sun 01 Jan 2023 13:25:03 +0000
ROA not before: Sun 01 Jan 2023 13:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15504
IP address blocks: 93.123.19.0/24 maxlen: 24
87.121.107.0/24 maxlen: 24
87.121.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d4:d4:02:cd:c8:02:cd:63:4a:7a:21:7c:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8dfc58863880f2d2f03ee0f913c7da56f8a24c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:38:01:26:66:98:72:8f:50:cb:63:20:ac:
03:36:0c:e6:db:b9:ec:17:9e:54:74:83:65:35:d2:
b3:5a:1f:1b:ea:c0:da:a7:88:c1:25:04:78:73:49:
42:04:8e:4b:3d:7b:6c:16:98:34:84:3e:4c:f6:3e:
5a:d3:cc:29:ba:aa:1e:fa:3e:fa:3a:45:67:02:ab:
60:28:e1:92:48:d9:45:fe:1a:6d:2d:19:27:48:bc:
28:31:9c:9c:6f:05:9d:ab:5c:2f:17:f6:fe:64:b9:
f2:1c:40:ef:24:e4:45:9e:5b:b4:22:bd:c6:e7:53:
f8:dd:21:c1:32:67:c9:bb:93:1c:27:9a:2c:45:e6:
6d:06:61:a9:ce:c2:1f:4a:33:62:f1:ad:69:38:2b:
37:64:46:ed:5f:01:51:ce:f7:35:de:ed:9c:08:89:
71:94:c9:b9:b8:a0:71:24:0a:bb:0e:77:bf:3a:b0:
52:03:42:d2:88:af:df:5d:bb:54:2c:38:e4:c5:e6:
b0:af:30:2f:1e:95:4e:79:74:d4:d1:ff:6c:a8:c6:
21:c5:85:20:d5:9c:ad:27:61:61:44:54:96:e6:36:
69:f6:a3:61:08:0c:85:d6:f8:d2:92:ad:42:4c:85:
a2:7b:d2:9a:c6:f7:5c:4b:32:32:68:7b:78:c2:23:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:C5:88:63:88:0F:2D:2F:03:EE:0F:91:3C:7D:A5:6F:8A:24:C2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uN_FiGOIDy0vA-4PkTx9pW-KJMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.106.0/23
93.123.19.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0e:5f:e5:2f:85:a9:f6:3f:9a:a1:26:8d:95:64:5f:e2:4f:
95:c5:13:7a:13:73:c3:1e:0d:91:18:85:0c:c8:1f:4f:f9:7e:
7a:61:9e:f1:54:73:b8:f6:6f:5b:b7:c5:03:39:af:7c:94:21:
e7:9f:39:2a:8e:20:be:90:5e:5a:5d:a3:05:a3:65:d5:17:89:
96:9f:bd:b9:fa:48:0c:57:8c:1e:3c:4a:dc:04:c3:b2:1e:a6:
7f:9d:18:52:0e:14:4a:06:4b:af:f4:ae:ce:ac:25:94:31:fc:
6b:43:d6:7b:eb:8b:4e:4a:17:f3:1a:f9:b6:d6:9e:c6:37:06:
d3:be:48:8a:06:8f:01:09:d6:e0:b4:ec:30:7c:8e:bb:18:9d:
64:ea:4e:7f:b6:3f:4d:6c:af:42:04:54:5c:1d:fa:a3:5b:4d:
c9:47:59:a8:d5:6a:5f:ca:b8:46:cb:46:71:01:3b:21:aa:b2:
55:3f:61:96:9a:f8:85:a0:e0:3c:7b:0a:c2:15:e9:78:29:da:
97:a7:24:ca:a3:72:ab:04:f6:5b:23:86:63:9a:16:1e:1a:34:
f1:d4:19:49:ec:65:f5:6b:66:9f:d8:de:96:77:b1:a9:3e:3b:
e7:82:e8:fa:7e:1b:67:38:da:65:1e:df:a9:2c:ca:0b:07:bb:
e2:95:ea:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtgdTUAs3IAs1jSnohfJtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGRmYzU4ODYzODgwZjJkMmYwM2VlMGY5MTNjN2RhNTZmOGEyNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wo4ASZmmHKPUMtjIKwDNgzm27ns
F55UdINlNdKzWh8b6sDap4jBJQR4c0lCBI5LPXtsFpg0hD5M9j5a08wpuqoe+j76
OkVnAqtgKOGSSNlF/hptLRknSLwoMZycbwWdq1wvF/b+ZLnyHEDvJORFnlu0Ir3G
51P43SHBMmfJu5McJ5osReZtBmGpzsIfSjNi8a1pOCs3ZEbtXwFRzvc13u2cCIlx
lMm5uKBxJAq7Dne/OrBSA0LSiK/fXbtULDjkxeawrzAvHpVOeXTU0f9sqMYhxYUg
1ZytJ2FhRFSW5jZp9qNhCAyF1vjSkq1CTIWie9KaxvdcSzIyaHt4wiM/zQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLjfxYhjiA8tLwPuD5E8faVviiTCMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdU5fRmlHT0lEeTB2QS00UGtUeDlwVy1LSk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3lqAwQA
XXsTMA0GCSqGSIb3DQEBCwUAA4IBAQCADl/lL4Wp9j+aoSaNlWRf4k+VxRN6E3PD
Hg2RGIUMyB9P+X56YZ7xVHO49m9bt8UDOa98lCHnnzkqjiC+kF5aXaMFo2XVF4mW
n725+kgMV4wePErcBMOyHqZ/nRhSDhRKBkuv9K7OrCWUMfxrQ9Z764tOShfzGvm2
1p7GNwbTvkiKBo8BCdbgtOwwfI67GJ1k6k5/tj9NbK9CBFRcHfqjW03JR1mo1Wpf
yrhGy0ZxATshqrJVP2GWmviFoOA8ewrCFel4KdqXpyTKo3KrBPZbI4ZjmhYeGjTx
1BlJ7GX1a2af2N6Wd7GpPjvnguj6fhtnONplHt+pLMoLB7vilept
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:49 2024 by rpki-client on console-fra.rpki-client.org