Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/pX2kMTStUVVmCzRPu0Fhru8Jjzs.roa
File: pX2kMTStUVVmCzRPu0Fhru8Jjzs.roa (raw, json)
Hash identifier: UvRbCdQNUxRxrYAMH9I8jgcQzmvRHzkWezTMxao+qQ4=
Subject key identifier: A5:7D:A4:31:34:AD:51:55:66:0B:34:4F:BB:41:61:AE:EF:09:8F:3B
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 018CC3B684CC0022ABE02CB4FBFB77F0BE66
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/pX2kMTStUVVmCzRPu0Fhru8Jjzs.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198890
IP address blocks: 87.120.100.0/22 maxlen: 22
93.187.110.0/24 maxlen: 24
2a13:1540::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jan 2024 15:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:84:cc:00:22:ab:e0:2c:b4:fb:fb:77:f0:be:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57da43134ad5155660b344fbb4161aeef098f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:c8:f2:42:4d:9e:1c:06:ab:53:76:1e:f7:
2f:25:bf:73:68:28:cf:13:bf:88:40:bf:81:59:5c:
99:94:58:d4:2a:da:8a:31:50:00:d3:88:e5:89:c5:
e2:f2:6a:74:7f:c2:19:72:88:dd:d6:d6:dd:c8:4b:
24:13:2d:4a:d2:14:2d:32:bc:b2:32:ef:a4:23:ec:
08:90:a1:47:24:9c:08:2e:31:15:92:82:4f:d2:e8:
0d:1e:cd:72:14:13:1b:d3:82:e6:c7:58:31:df:e1:
47:a4:dc:23:05:e7:f0:a7:a0:5a:16:10:66:2b:eb:
52:1e:93:27:c1:e8:bf:7d:28:6f:1a:b1:51:18:1f:
37:d1:33:b4:d5:60:90:11:43:96:b8:cd:0b:40:1a:
f8:7f:99:48:fc:e1:a9:a3:89:21:34:1b:12:a0:cc:
a1:ac:58:c9:cd:6f:b1:e4:d6:42:1e:0b:f3:40:ba:
a1:6b:be:e8:5b:d5:63:bf:a4:d4:da:2a:af:56:a6:
26:84:58:a3:ad:ee:3d:3b:48:d2:47:9a:33:38:9e:
c5:4b:59:f0:b4:39:55:02:32:48:27:61:89:e1:ef:
15:47:87:04:19:26:5a:8c:e5:de:b5:ef:5a:ab:c3:
7a:0d:b8:9e:bc:6f:6b:f0:4d:c7:45:19:90:b7:95:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:A4:31:34:AD:51:55:66:0B:34:4F:BB:41:61:AE:EF:09:8F:3B
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/pX2kMTStUVVmCzRPu0Fhru8Jjzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.100.0/22
93.187.110.0/24
IPv6:
2a13:1540::/48
Signature Algorithm: sha256WithRSAEncryption
80:c3:5e:44:5a:38:23:9a:41:e6:99:db:63:0a:26:e9:93:16:
bb:87:c3:23:29:69:79:1b:da:ee:c8:b0:a6:02:a9:d5:63:59:
a7:4e:c9:ed:c4:dd:32:d6:03:44:80:19:39:68:77:54:6f:26:
5a:dd:9f:68:57:55:a1:c0:8d:85:11:98:03:b4:b5:6b:08:01:
bc:70:39:9e:d2:64:d4:16:3e:5e:fa:81:58:47:34:18:82:24:
f9:0e:bd:eb:91:97:16:1b:56:10:26:42:92:05:fb:a6:8c:76:
83:ae:3f:de:f6:a8:87:38:5d:49:75:8d:45:40:4c:ef:ef:c5:
8f:98:fe:f6:74:bf:91:4e:76:80:b4:09:16:19:f8:70:79:37:
49:29:a8:a4:79:50:5d:65:8b:bf:dc:6f:2b:ae:39:d3:28:1c:
17:dd:ba:3f:e9:f0:8f:5e:e4:b2:65:c3:e0:60:38:4e:f2:f4:
a3:cc:4a:5d:6e:c4:54:54:c2:37:6e:fd:9d:1a:e9:bd:11:fb:
e3:ff:02:bb:e7:c6:7e:04:0e:15:1b:bb:65:0b:69:b0:12:48:
01:cf:74:8b:76:36:c0:73:66:2b:a2:b5:1c:10:21:de:64:50:
5c:69:83:29:fc:9c:71:6f:ce:96:c8:24:d7:57:03:0f:25:f2:
73:af:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:13 2024 by rpki-client on console-ams.rpki-client.org