Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/usClN8R8XpvaUpe_mwZckI2Liwo.roa
File: usClN8R8XpvaUpe_mwZckI2Liwo.roa (raw, json)
Hash identifier: 30GaygwpQoVL+WbVxKqzYS+cM7bp9tw8cCmczEOwFY4=
Subject key identifier: BA:C0:A5:37:C4:7C:5E:9B:DA:52:97:BF:9B:06:5C:90:8D:8B:8B:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E6DC7C535242D5ADA779AF5D38CC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/usClN8R8XpvaUpe_mwZckI2Liwo.roa
Signing time: Sun 01 Jan 2023 13:25:07 +0000
ROA not before: Sun 01 Jan 2023 13:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42446
IP address blocks: 87.120.197.0/24 maxlen: 24
2a00:1728:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e6:dc:7c:53:52:42:d5:ad:a7:79:af:5d:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bac0a537c47c5e9bda5297bf9b065c908d8b8b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:55:7c:6d:90:6b:fe:ae:2f:57:f4:c2:43:
7b:fa:58:65:95:5b:52:8d:b8:f9:d0:b8:ee:ad:2f:
3e:6d:44:8f:00:6e:70:85:02:0e:a6:96:a4:6b:db:
57:73:68:8c:a1:6f:47:49:c9:0b:08:cd:69:86:79:
6e:45:86:4e:0f:6e:86:48:bd:9b:05:4d:5c:5b:f2:
35:c6:c6:90:1e:38:1b:24:4b:98:9f:85:82:03:ce:
fa:e7:5f:72:ef:f6:a3:de:27:75:98:9a:17:17:bc:
12:ed:f0:b8:28:c4:6a:2b:e5:28:6a:db:a4:6a:21:
95:09:3b:c6:7e:ac:0e:b1:7f:53:2e:fd:8d:5b:cf:
21:50:ef:07:31:dd:55:17:fa:9f:60:57:50:bc:a0:
da:44:78:43:94:ef:bf:f1:76:82:7e:41:1a:a4:ff:
3d:af:3b:67:69:6a:74:8f:9c:39:ef:19:16:e4:f6:
4c:2f:42:32:41:f2:0e:d3:e2:ab:bf:87:c6:e2:9b:
b1:0a:6c:e4:3e:a6:4d:fc:35:7d:46:32:b1:7e:e4:
89:87:9f:3d:40:61:10:1b:d6:b7:83:3e:60:de:b5:
51:37:ca:5b:ac:6b:d6:2a:dc:27:b7:09:32:c9:75:
dd:80:fe:57:38:4c:53:d4:2a:4a:f2:5d:f0:ff:50:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:A5:37:C4:7C:5E:9B:DA:52:97:BF:9B:06:5C:90:8D:8B:8B:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/usClN8R8XpvaUpe_mwZckI2Liwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.197.0/24
IPv6:
2a00:1728:30::/48
Signature Algorithm: sha256WithRSAEncryption
99:8b:a7:14:c1:93:69:3f:f7:2c:ec:b4:0a:82:57:a3:31:66:
42:74:79:4a:ae:f2:67:c9:8c:e5:64:e3:45:ed:70:6d:c5:49:
39:40:73:73:fd:07:9a:01:51:8b:a5:a6:55:0b:32:63:53:03:
f8:75:fa:dd:9b:62:6b:1b:0b:9b:fb:4c:d3:e1:8c:ef:8a:19:
4d:4e:f7:20:ab:7d:1c:ee:55:3a:b4:f0:2f:5e:88:b9:4a:1b:
9f:cf:27:69:65:4d:b6:c1:3c:6e:9c:90:18:7c:15:52:78:12:
23:ba:1f:5c:5b:cc:b9:c8:0e:d3:dc:30:3f:b1:ea:27:25:d1:
80:1b:07:5e:e2:a0:80:bd:ea:cd:4c:5d:76:56:fd:4d:c1:2c:
8b:6f:e8:00:3d:9e:ac:aa:af:e1:d5:b2:e7:a1:c7:8e:b9:70:
b5:3d:15:64:b8:c2:ae:e6:e1:55:60:92:5d:8a:20:56:7f:e0:
16:88:b7:d5:63:9a:50:e1:7c:6c:aa:1e:4f:7b:49:c5:8c:d7:
f7:2c:e9:14:29:17:5a:82:d8:02:a4:2d:f5:34:4a:9f:b4:10:
8b:53:e1:e5:ed:54:66:71:6a:07:f5:be:19:31:98:8b:8a:34:
d4:42:de:da:89:93:78:08:e3:5d:60:92:94:b6:b6:56:26:1d:
50:1d:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:45 2024 by rpki-client on console-ams.rpki-client.org