Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xANv6KfLbCOyas-6uaUHGK9HOXU.roa
File: xANv6KfLbCOyas-6uaUHGK9HOXU.roa (raw, json)
Hash identifier: Xpa9NwmW3AHKHEdOEyxlwrxt0qeHP+ojB+f283rSB2k=
Subject key identifier: C4:03:6F:E8:A7:CB:6C:23:B2:6A:CF:BA:B9:A5:07:18:AF:47:39:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D8210D3264CBBECED96724D68E08009
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xANv6KfLbCOyas-6uaUHGK9HOXU.roa
Signing time: Sun 01 Jan 2023 13:25:18 +0000
ROA not before: Sun 01 Jan 2023 13:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209628
IP address blocks: 87.121.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:10:d3:26:4c:bb:ec:ed:96:72:4d:68:e0:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4036fe8a7cb6c23b26acfbab9a50718af473975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:77:e9:73:81:03:97:68:6e:0e:a3:d8:35:
97:09:93:b2:9f:50:22:12:f3:0c:80:98:bd:3d:7e:
60:19:2e:e9:75:c7:54:25:73:74:93:67:de:e9:bb:
ce:27:38:c1:bc:8e:fc:a2:d9:ea:97:60:4e:7c:ab:
ef:19:73:26:5c:09:e2:e7:35:0d:6d:a3:8f:47:fa:
94:d0:84:d6:cb:ab:db:50:f9:63:24:bb:68:dc:a9:
60:2f:26:52:8b:af:36:33:60:1b:f8:59:70:0c:fe:
90:6c:0b:23:fd:63:c1:f0:e8:54:82:d3:86:58:b9:
9a:f1:66:f5:fe:30:7a:d3:0b:8d:f3:dd:04:05:b0:
26:92:9b:2e:bf:bb:4d:5e:db:e8:e6:27:31:18:59:
d5:f6:15:6e:a9:77:09:55:09:df:5c:0f:93:96:19:
bf:c8:43:a1:62:c5:ad:48:98:e0:fd:e8:f6:ff:38:
19:ba:53:5c:69:32:90:34:16:73:6d:61:4c:a5:b5:
f4:e1:24:6d:aa:d4:6e:71:d3:38:51:df:77:9f:9a:
fa:3c:e6:83:72:a8:5f:e1:30:06:52:e1:af:e0:18:
8c:39:99:ae:18:97:ca:81:e1:b7:c0:3e:8a:73:fc:
3c:5e:ab:58:3a:64:53:af:4b:48:38:b4:55:20:fe:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:6F:E8:A7:CB:6C:23:B2:6A:CF:BA:B9:A5:07:18:AF:47:39:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xANv6KfLbCOyas-6uaUHGK9HOXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:87:b0:b0:ed:2a:74:4c:94:62:82:9f:9d:86:9f:b4:a8:da:
be:cc:a9:d1:9b:ca:0e:03:b3:5a:ab:99:7c:4f:cc:dc:42:96:
1d:b3:4b:79:ad:d7:34:79:f8:b4:5d:95:50:ef:3d:18:18:83:
b7:38:8e:9f:46:71:94:80:2c:57:91:40:86:a5:5b:18:73:be:
f4:c2:e6:21:8f:07:96:12:b9:de:01:64:ae:0b:d9:13:be:b5:
ad:34:b0:e0:89:c4:d8:7a:04:02:66:fb:9e:0b:e2:6e:9e:22:
2f:0f:2d:f9:ed:59:da:0e:fc:13:73:0a:0f:1a:cf:cd:cb:eb:
cc:2e:3b:8b:1e:bf:a7:b7:28:05:37:70:4d:ca:cb:68:57:4e:
6b:fc:6b:4c:86:11:33:14:78:f9:8a:0e:cc:6d:62:c3:fc:fb:
d9:4d:66:f0:2b:fb:57:da:29:6d:d8:fe:b3:9e:8b:d7:d9:b6:
80:91:63:16:b1:dd:cf:8e:41:0a:a9:18:d8:8a:8e:2e:84:fa:
b0:a3:d3:c9:b7:68:0a:0d:a0:57:cc:24:8f:df:a2:b6:5a:81:
d6:74:7b:c3:7f:be:93:69:9d:63:0a:00:93:dc:79:03:09:ac:
ff:6d:40:95:cd:d4:0b:66:b6:6e:ce:ac:c9:26:c6:87:89:c6:
a8:92:30:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtghDTJky77O2Wck1o4IAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDAzNmZlOGE3Y2I2YzIzYjI2YWNmYmFiOWE1MDcxOGFmNDczOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3R36XOBA5dobg6j2DWXCZOyn1Ai
EvMMgJi9PX5gGS7pdcdUJXN0k2fe6bvOJzjBvI78otnql2BOfKvvGXMmXAni5zUN
baOPR/qU0ITWy6vbUPljJLto3KlgLyZSi682M2Ab+FlwDP6QbAsj/WPB8OhUgtOG
WLma8Wb1/jB60wuN890EBbAmkpsuv7tNXtvo5icxGFnV9hVuqXcJVQnfXA+Tlhm/
yEOhYsWtSJjg/ej2/zgZulNcaTKQNBZzbWFMpbX04SRtqtRucdM4Ud93n5r6POaD
cqhf4TAGUuGv4BiMOZmuGJfKgeG3wD6Kc/w8XqtYOmRTr0tIOLRVIP453QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQDb+iny2wjsmrPurmlBxivRzl1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveEFOdjZLZkxiQ095YXMtNnVhVUhHSzlIT1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3k2MA0G
CSqGSIb3DQEBCwUAA4IBAQBKh7Cw7Sp0TJRigp+dhp+0qNq+zKnRm8oOA7Naq5l8
T8zcQpYds0t5rdc0efi0XZVQ7z0YGIO3OI6fRnGUgCxXkUCGpVsYc770wuYhjweW
ErneAWSuC9kTvrWtNLDgicTYegQCZvueC+JuniIvDy357VnaDvwTcwoPGs/Ny+vM
LjuLHr+ntygFN3BNystoV05r/GtMhhEzFHj5ig7MbWLD/PvZTWbwK/tX2ilt2P6z
novX2baAkWMWsd3PjkEKqRjYio4uhPqwo9PJt2gKDaBXzCSP36K2WoHWdHvDf76T
aZ1jCgCT3HkDCaz/bUCVzdQLZrZuzqzJJsaHicaokjDy
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org