Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7OncknLz6FHcnYA_PloY41ZkdSg.roa
File: 7OncknLz6FHcnYA_PloY41ZkdSg.roa (raw, json)
Hash identifier: cgZChbqMH8x7uGc51S6mkMUGqg7n3J+jvqqnKLaHKCM=
Subject key identifier: EC:E9:DC:92:72:F3:E8:51:DC:9D:80:3F:3E:5A:18:E3:56:64:75:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019370AA512964DAD2D648D4D82DBA66D4A8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7OncknLz6FHcnYA_PloY41ZkdSg.roa
Signing time: Thu 28 Nov 2024 02:47:10 +0000
ROA not before: Thu 28 Nov 2024 02:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 04:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:70:aa:51:29:64:da:d2:d6:48:d4:d8:2d:ba:66:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 28 02:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece9dc9272f3e851dc9d803f3e5a18e356647528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:e7:b6:cd:35:e8:54:cf:3d:b0:7a:9b:a8:
8a:c8:ad:bc:0f:e9:fd:53:94:4c:65:ef:4c:76:e4:
e9:bb:9b:06:aa:cd:05:2f:58:7d:1f:f2:fe:20:e9:
e5:2e:4f:66:6c:b5:b4:3a:7e:c5:89:68:fb:76:09:
c7:72:b5:7c:d9:a2:17:62:01:32:ab:eb:f9:b9:fa:
04:45:26:8b:99:b8:3b:d3:9e:18:63:6f:09:6f:62:
75:31:bf:ea:f1:19:9a:12:1b:8a:3a:e3:23:1a:cc:
63:06:9f:c8:15:1f:39:7e:55:86:d4:3b:00:a1:db:
4d:06:6f:af:58:dd:c6:53:1b:30:77:af:bd:de:67:
5a:59:15:db:02:69:a0:80:8d:e3:7e:09:47:13:56:
39:2a:16:4a:52:0c:02:0e:e9:dc:53:85:21:f4:7d:
d0:6a:57:b5:d1:b3:1f:81:77:c7:a2:21:22:20:b5:
93:98:87:f5:63:14:6c:e4:78:7e:2e:4c:e0:67:c7:
a4:8a:0e:d4:d6:0f:0e:94:a2:2a:5f:5b:3b:4c:1f:
3c:8c:e8:fd:3e:f4:1d:62:8e:d5:9a:ef:a7:e6:1a:
f3:ed:27:b8:ef:df:8d:99:6e:73:bc:28:d1:5d:e9:
fd:56:5f:5f:8d:9a:cc:3f:17:ae:f6:92:bb:40:47:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:DC:92:72:F3:E8:51:DC:9D:80:3F:3E:5A:18:E3:56:64:75:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7OncknLz6FHcnYA_PloY41ZkdSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
93.123.80.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:11:29:9d:2c:fd:de:a4:b8:e6:53:a2:a3:44:52:df:1a:b1:
f2:26:f8:21:c6:89:51:4d:7d:00:53:e7:b6:ab:d3:7a:d3:d3:
01:ba:22:e0:2b:76:6e:23:31:44:26:f0:f2:84:16:c9:40:6b:
67:3d:86:06:69:6c:fd:1a:c7:0f:72:38:72:e1:d9:69:5c:b2:
7e:9a:db:18:ad:78:27:4a:03:d3:10:76:62:95:62:85:58:f2:
9e:2d:09:11:9a:f1:53:3c:f7:7c:a8:5c:87:05:e5:1b:e4:a3:
d3:8a:30:27:97:4d:10:c8:af:7a:01:05:24:84:76:a1:dd:56:
91:c1:0d:d8:2b:0c:02:07:c1:af:90:a0:ef:f3:0f:10:2e:cd:
87:e8:93:80:03:52:47:ab:94:35:67:ff:43:f7:ba:34:92:39:
ec:83:18:35:2d:a9:eb:ec:d8:f4:52:d3:a0:1f:c2:37:f7:d9:
fd:2e:20:8b:29:ff:cc:93:0a:cc:d9:16:6f:79:99:c7:c7:0a:
bc:49:ab:42:4a:8d:4a:84:19:61:02:98:8f:93:75:93:92:cb:
42:dc:77:6a:28:57:a3:09:7d:14:a3:ff:9d:f1:8d:e8:9a:ab:
f4:d5:8f:fb:34:11:2d:70:fd:d2:38:a3:01:c3:20:d5:d3:30:
8e:3f:00:ea
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZNwqlEpZNrS1kjU2C26ZtSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTI4MDI0NzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2U5ZGM5MjcyZjNlODUxZGM5ZDgwM2YzZTVhMThlMzU2NjQ3NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplXnts016FTPPbB6m6iKyK28D+n9
U5RMZe9MduTpu5sGqs0FL1h9H/L+IOnlLk9mbLW0On7FiWj7dgnHcrV82aIXYgEy
q+v5ufoERSaLmbg7054YY28Jb2J1Mb/q8RmaEhuKOuMjGsxjBp/IFR85flWG1DsA
odtNBm+vWN3GUxswd6+93mdaWRXbAmmggI3jfglHE1Y5KhZKUgwCDuncU4Uh9H3Q
ale10bMfgXfHoiEiILWTmIf1YxRs5Hh+LkzgZ8ekig7U1g8OlKIqX1s7TB88jOj9
PvQdYo7Vmu+n5hrz7Se479+NmW5zvCjRXen9Vl9fjZrMPxeu9pK7QEcQ/wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOzp3JJy8+hR3J2APz5aGONWZHUoMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvN09uY2tuTHo2RkhjbllBX1Bsb1k0MVprZFNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBV3hEAwQB
XXtKAwQAXXtQAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQBPESmdLP3epLjmU6Kj
RFLfGrHyJvghxolRTX0AU+e2q9N609MBuiLgK3ZuIzFEJvDyhBbJQGtnPYYGaWz9
GscPcjhy4dlpXLJ+mtsYrXgnSgPTEHZilWKFWPKeLQkRmvFTPPd8qFyHBeUb5KPT
ijAnl00QyK96AQUkhHah3VaRwQ3YKwwCB8GvkKDv8w8QLs2H6JOAA1JHq5Q1Z/9D
97o0kjnsgxg1Lanr7Nj0UtOgH8I399n9LiCLKf/MkwrM2RZveZnHxwq8SatCSo1K
hBlhApiPk3WTkstC3HdqKFejCX0Uo/+d8Y3omqv01Y/7NBEtcP3SOKMBwyDV0zCO
PwDq
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:00 2025 by rpki-client