Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bNSk3C510uq2HFgBrNLNtaNXnvM.roa
File: bNSk3C510uq2HFgBrNLNtaNXnvM.roa (raw, json)
Hash identifier: pdN6kH976Kw4r7+2YH1qwhVJPEiB7xEmrIlhDm6BmAY=
Subject key identifier: 6C:D4:A4:DC:2E:75:D2:EA:B6:1C:58:01:AC:D2:CD:B5:A3:57:9E:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DC1F20AD533788319437821F8839E703E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bNSk3C510uq2HFgBrNLNtaNXnvM.roa
Signing time: Mon 19 Feb 2024 15:18:01 +0000
ROA not before: Mon 19 Feb 2024 15:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 87.120.192.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 15:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:f2:0a:d5:33:78:83:19:43:78:21:f8:83:9e:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 19 15:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd4a4dc2e75d2eab61c5801acd2cdb5a3579ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:da:0f:36:a5:2a:01:61:d5:9c:05:00:5e:
66:97:1b:7a:cb:76:8d:7d:80:93:db:79:00:7a:d2:
53:a9:e3:c3:c3:6c:98:70:2e:46:42:79:8f:76:48:
b9:94:95:74:93:64:9b:7c:b7:2f:a2:af:d1:24:4b:
22:fb:2e:4c:eb:20:01:aa:ca:b8:aa:6f:81:78:b1:
fb:f5:73:ef:9e:9a:60:e5:ce:5d:16:cf:41:31:39:
1f:8c:5f:97:4c:4f:82:24:f7:5b:35:0b:66:55:a6:
a0:56:4b:73:1e:0e:d8:9f:0a:f1:13:d2:dd:64:0b:
b0:27:54:e8:69:ee:42:f0:d4:10:b3:6f:5d:65:27:
37:b4:58:5c:52:64:f2:4d:2b:33:32:75:42:23:5b:
7c:95:fc:61:02:29:33:b6:5a:0c:41:98:6c:e9:af:
a5:e4:77:11:be:94:35:c3:41:46:fb:13:fb:28:63:
e7:e2:da:f8:a8:1a:6d:9a:e3:c7:89:24:6c:20:ca:
ac:ef:e9:2a:a6:27:49:a2:64:0d:12:ca:96:6f:52:
95:fb:17:1d:c6:4e:93:f6:a1:45:5b:9e:0b:dd:3c:
89:2f:5a:9a:95:a1:df:3c:93:3e:a4:c9:fa:ba:d9:
26:c8:9a:2a:f5:18:2f:33:b9:85:05:1e:4b:99:bd:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:A4:DC:2E:75:D2:EA:B6:1C:58:01:AC:D2:CD:B5:A3:57:9E:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bNSk3C510uq2HFgBrNLNtaNXnvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.192.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e4:67:ac:f6:f1:67:2b:e3:b2:a0:2b:66:19:43:06:b7:49:
66:19:b0:d5:fb:6a:83:57:f0:ce:11:33:56:4b:ea:4e:1c:77:
79:e7:45:0f:40:b2:49:92:f2:52:77:cd:37:70:05:a9:17:2c:
b9:d2:87:11:8b:51:ac:21:f9:e2:3c:04:d0:65:cf:e9:8b:f4:
ee:fa:82:3e:8d:63:06:0e:7b:88:60:97:48:dc:cc:5b:1b:e0:
08:b3:fc:4b:b7:3b:aa:95:32:e0:d8:43:c0:e0:22:cb:21:0f:
9a:8a:e4:74:9c:7d:2e:32:8c:48:90:cc:92:50:2d:cb:c6:70:
ad:71:a7:99:95:99:00:6e:86:eb:10:a7:00:41:b1:a7:01:b5:
9e:9d:67:13:c2:17:c7:c8:26:c1:79:aa:e0:f6:d4:b9:f2:ea:
65:37:10:c1:f0:dc:6c:67:25:0c:7e:3f:f9:88:d4:03:c7:45:
6c:d9:80:08:e7:84:fc:6f:31:3b:d9:91:14:80:dc:48:5a:b8:
34:cd:8f:0b:75:3a:3b:01:3a:7b:bc:9f:2a:f5:0d:5c:26:c4:
d4:4a:ef:31:cc:08:15:9a:cc:27:43:87:9d:f5:c6:f1:2c:e4:
1e:a0:36:d6:05:18:90:cf:a7:9d:37:22:e6:37:45:c4:11:c6:
e8:df:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:28:11 2025 by rpki-client