Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5B5V0feOMXD4Gyw9KLpuw9NDQNo.roa
File: 5B5V0feOMXD4Gyw9KLpuw9NDQNo.roa (raw, json)
Hash identifier: u4/rNsF9Op/XoPEnjeoAzHwEKgpGZK41kgs0nlBTtIE=
Subject key identifier: E4:1E:55:D1:F7:8E:31:70:F8:1B:2C:3D:28:BA:6E:C3:D3:43:40:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E3FD7AF0EF887A78403491151E1D5CFF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5B5V0feOMXD4Gyw9KLpuw9NDQNo.roa
Signing time: Fri 20 Dec 2024 12:14:20 +0000
ROA not before: Fri 20 Dec 2024 12:14:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214806
IP address blocks: 87.121.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:fd:7a:f0:ef:88:7a:78:40:34:91:15:1e:1d:5c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 12:14:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e41e55d1f78e3170f81b2c3d28ba6ec3d34340da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:a5:56:fa:7d:6d:6c:1b:25:78:58:de:03:
44:64:33:9e:a9:b8:ec:5b:56:ca:ee:c6:33:a5:95:
f1:5f:d6:69:e7:1f:36:1a:83:6a:a1:4b:24:f1:91:
84:cd:f1:21:d6:60:15:ca:a2:43:a0:15:23:32:1b:
aa:ab:e2:7b:d4:16:57:d3:9a:01:54:bd:21:6f:8f:
f2:fc:70:a8:9e:f2:d0:c9:ba:30:d2:75:37:58:47:
57:bd:a5:3c:b0:32:3a:50:9c:8d:11:9c:da:48:73:
63:ca:42:b0:16:76:cf:34:fb:80:d8:54:33:14:95:
59:37:ee:29:0b:ba:ac:38:e6:4f:e1:bf:29:3a:73:
43:c6:8f:5e:9b:39:ff:97:b6:12:b4:5e:64:3d:8e:
0b:ce:1e:78:4b:87:e6:b6:03:21:5e:fc:18:6c:d2:
6f:e8:b2:48:09:6f:c7:9f:7c:24:94:b6:9d:c5:03:
6b:25:b3:26:45:92:10:3e:cf:d7:ba:b6:18:c9:78:
39:a3:a5:24:db:d7:d7:84:34:d6:e4:d6:c7:39:ea:
11:34:2b:b6:ff:88:96:45:3c:b2:aa:3a:fa:7d:6e:
a0:76:70:30:04:9c:f4:71:1a:32:38:47:10:8a:fc:
cf:ef:2d:df:37:1b:75:8c:0b:ac:bd:18:81:a8:1a:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:55:D1:F7:8E:31:70:F8:1B:2C:3D:28:BA:6E:C3:D3:43:40:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5B5V0feOMXD4Gyw9KLpuw9NDQNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d8:54:11:93:4a:44:bd:46:74:f6:ed:dd:14:c2:18:e7:2e:
59:63:98:32:74:90:f8:9a:f0:ea:14:2a:c0:92:f6:c2:7e:34:
e2:58:80:5f:3d:df:ec:28:d6:b3:d6:76:1a:2c:71:66:8a:3f:
a8:6b:49:05:05:dd:38:bb:a8:f0:20:60:a8:63:ac:30:24:5e:
ef:72:d9:04:0c:e6:86:d8:e6:82:a7:1a:b4:d3:f2:89:cb:06:
ae:7c:04:28:07:96:0a:9e:75:ed:15:c5:c9:a5:08:9f:9b:31:
c4:d9:27:df:86:5a:ae:78:44:8e:3f:b2:d2:10:3f:c7:52:29:
c7:0e:be:5d:9d:35:0c:f4:47:3c:24:59:b0:1f:55:b7:ba:c1:
17:ee:09:d5:ff:68:a8:6e:e0:3c:b7:6d:89:ee:28:71:73:84:
ed:0e:9c:8d:60:01:a0:9f:e5:ae:cc:c9:0c:ab:56:26:6d:87:
e3:1a:f4:f2:4b:d8:00:47:cf:14:9d:fd:7a:86:a8:b0:8f:8d:
24:88:9f:f9:a5:6c:98:96:20:e2:73:ae:38:55:6d:a7:9f:ea:
6c:ee:4b:99:b0:99:2f:d7:5b:d9:9b:64:37:e5:43:4c:af:47:
11:a4:23:89:0d:6c:80:6c:89:5b:4f:50:b5:fe:04:c7:fd:47:
1f:88:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:02:17 2025 by rpki-client