Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wCZHOEOb0TbDDQInnIxj9Tx_668.roa
File: wCZHOEOb0TbDDQInnIxj9Tx_668.roa (raw, json)
Hash identifier: Hz/ZVZy6KDLCicKevTxPlvnJfepF5To9/ZjSHdXwHIg=
Subject key identifier: C0:26:47:38:43:9B:D1:36:C3:0D:02:27:9C:8C:63:F5:3C:7F:EB:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C3E021CE91D4F0951C1006B96F7594B47
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wCZHOEOb0TbDDQInnIxj9Tx_668.roa
Signing time: Wed 06 Dec 2023 07:22:54 +0000
ROA not before: Wed 06 Dec 2023 07:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 263065
IP address blocks: 87.120.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:02:1c:e9:1d:4f:09:51:c1:00:6b:96:f7:59:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 6 07:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0264738439bd136c30d02279c8c63f53c7febaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:9d:70:52:4e:5b:38:80:94:85:bd:85:f4:
9e:44:e2:e4:78:c5:89:8c:39:07:b5:73:c8:e1:d5:
cd:6e:ab:61:1b:ba:62:e7:1f:b8:de:4d:f9:5b:75:
ca:74:6d:75:45:d7:e0:62:9e:7d:0b:aa:bc:37:b0:
7b:d2:a3:62:ac:85:31:31:c5:5b:2b:51:1c:c2:bd:
e1:9d:e1:20:19:59:d1:11:33:ef:bd:80:df:47:80:
95:11:d0:9a:bd:58:ea:12:29:08:bf:f5:8c:dc:3c:
d8:c9:82:17:94:b4:3b:7d:f4:f7:d1:66:00:d7:5d:
29:6b:0e:45:63:4d:ef:c4:e6:7d:c2:46:2f:61:78:
d1:cf:59:23:df:bc:81:39:1a:88:bd:69:39:fb:8e:
8f:0e:70:13:2b:38:0d:66:79:42:62:bd:05:b3:48:
8c:9b:38:c3:e6:20:48:45:c2:1c:36:be:cb:f8:ac:
5e:aa:66:77:7e:48:57:17:1e:ed:c9:5f:5a:67:5e:
74:e4:92:51:86:2f:f4:86:72:58:07:42:7a:cf:4c:
74:57:cc:15:5d:a9:14:21:dc:65:ba:11:de:98:a5:
72:9c:c9:1a:91:46:20:fa:c0:93:f5:e9:e4:f3:c8:
a7:79:43:68:56:20:ce:dd:58:6d:02:bd:1d:b7:b8:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:47:38:43:9B:D1:36:C3:0D:02:27:9C:8C:63:F5:3C:7F:EB:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wCZHOEOb0TbDDQInnIxj9Tx_668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.130.0/24
Signature Algorithm: sha256WithRSAEncryption
57:60:30:ad:2b:35:f1:d3:6a:23:c7:3e:55:e6:38:bb:d8:eb:
bc:34:f2:0b:2b:bf:c8:55:9e:93:c2:86:74:56:5d:b2:a0:ae:
fd:9e:9c:40:ca:6d:63:4c:84:00:aa:93:79:b1:c4:ee:03:f4:
46:de:bf:66:54:0c:da:73:51:24:52:e2:04:e5:72:71:98:8e:
ee:85:af:74:16:6a:38:fd:ec:ce:4e:dc:73:e3:56:09:64:7c:
47:3a:b5:19:c9:1e:69:12:29:4b:64:6e:f5:ac:ff:fc:00:8f:
3e:5a:55:c8:8e:d4:d9:6b:08:06:f8:ac:19:01:82:e1:5d:fd:
b4:06:72:00:06:cb:bc:f6:96:92:d1:9a:6f:b1:d3:36:b2:82:
c7:80:5f:01:8d:54:96:0b:49:a4:9d:83:6d:17:30:bd:a9:87:
30:12:23:f6:fc:e8:92:60:e4:ae:98:ce:8a:bb:f8:e9:61:ca:
09:ab:ca:a5:d8:c6:9c:7a:13:d6:bb:f9:4b:46:cc:ac:ce:d4:
c9:46:a6:70:c9:17:69:73:7c:d1:05:db:2c:20:45:8a:6d:4c:
53:5c:10:4c:a8:4b:cf:43:92:1b:e8:27:88:0e:94:29:b9:7e:
d7:dd:e6:1f:a0:aa:67:b9:51:5b:db:38:30:75:7d:7b:e8:68:
71:41:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org