Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l4keO72X3nr7CLqkr31q6dJSkJU.roa
File: l4keO72X3nr7CLqkr31q6dJSkJU.roa (raw, json)
Hash identifier: 5gqhheJaKRqJ9pVo/Kz7NO+nTCZmrahlHNW3cgZBZ44=
Subject key identifier: 97:89:1E:3B:BD:97:DE:7A:FB:08:BA:A4:AF:7D:6A:E9:D2:52:90:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190833D1E48334587F71F1C1F8C4E6D0B8D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l4keO72X3nr7CLqkr31q6dJSkJU.roa
Signing time: Fri 05 Jul 2024 14:12:18 +0000
ROA not before: Fri 05 Jul 2024 14:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210099
IP address blocks: 87.120.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 14:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:83:3d:1e:48:33:45:87:f7:1f:1c:1f:8c:4e:6d:0b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 14:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97891e3bbd97de7afb08baa4af7d6ae9d2529095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:5a:12:1d:45:69:8c:ed:74:5c:2e:f2:a1:
00:11:32:61:07:f2:7c:b9:82:d2:28:a0:1d:9e:02:
3f:9a:ea:32:ad:ec:5a:77:ca:48:ca:19:b6:7b:d4:
2f:c7:1a:e2:cc:6f:58:7f:b0:8c:07:0e:bf:6c:d6:
46:12:62:ff:cc:61:2b:1e:d9:48:90:46:bd:b5:95:
cc:9b:7b:8a:ac:4e:aa:77:6c:ae:39:ff:f2:d9:fb:
91:92:36:6c:57:79:7e:8a:3b:7d:ff:1f:a4:ea:79:
da:2e:65:6d:8c:73:a1:a3:cc:df:b3:27:cb:b3:4f:
98:1d:5b:01:e2:50:4f:f7:b8:b5:54:ac:14:54:ec:
7d:31:d2:ee:ec:14:e8:ab:99:1e:a5:50:03:13:be:
d7:5f:db:f1:4e:a8:6c:85:b0:e3:00:0f:07:09:d2:
cd:55:00:43:51:2a:8a:14:1b:fc:6b:9b:20:cb:51:
68:65:c8:0e:e5:ff:0c:9d:60:fe:16:0f:6d:ff:2b:
87:68:35:40:f6:dd:e6:a5:25:2e:5d:d4:46:5a:18:
be:fe:41:d5:15:37:54:c3:c9:37:69:2b:cd:8c:00:
7b:e9:64:50:98:f6:f5:fc:5b:f0:6c:0c:05:9d:3f:
da:e6:f6:be:e0:63:4c:ae:27:b9:68:57:67:36:b5:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:89:1E:3B:BD:97:DE:7A:FB:08:BA:A4:AF:7D:6A:E9:D2:52:90:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/l4keO72X3nr7CLqkr31q6dJSkJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a1:43:d4:ec:00:f4:4b:7f:43:74:28:7d:ad:cf:93:83:c6:
f5:e2:f9:b5:5e:2c:cc:c0:ea:85:a3:5a:33:7a:75:93:75:74:
1c:2d:12:ee:8b:56:02:b1:b9:64:40:7d:17:3e:bd:12:cb:bd:
ff:00:62:7f:3a:98:a0:0b:37:7d:8d:5a:38:16:00:a9:e3:d9:
cc:48:44:9d:fb:99:cd:28:51:85:a7:0e:27:c6:1a:de:1a:b0:
6f:89:ff:a4:56:33:b1:14:ae:32:52:95:dd:7e:a6:0c:57:49:
6f:91:e1:ad:ea:2d:90:9b:f8:7a:c8:d0:5b:26:05:45:64:e5:
b7:cb:0f:f2:00:97:1d:cb:eb:75:7e:98:03:6b:07:29:0d:66:
82:2f:d8:e8:70:97:56:84:d2:dd:1e:d7:03:28:ca:02:22:ac:
08:96:a3:64:76:2c:ae:ac:eb:4e:49:19:ed:65:51:db:15:aa:
2f:29:e7:16:4c:43:3e:38:b2:4a:9f:f8:46:34:87:6c:f1:b0:
a2:65:f8:14:77:2a:65:41:4b:fa:af:ae:36:c6:79:6b:26:74:
68:51:1a:d5:92:40:7b:c7:d9:00:2b:2a:b6:2a:13:26:46:18:
b5:5d:fd:b1:39:60:7f:be:19:58:25:a3:d3:54:fc:69:cd:c6:
64:0f:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:28:15 2025 by rpki-client