Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7eBJbG0STVX69IleujU5i4bv3GU.roa
File: 7eBJbG0STVX69IleujU5i4bv3GU.roa (raw, json)
Hash identifier: VIOF+GUgmFdpE98sdLG15spBx7TQUIWcdaI2KdMrmog=
Subject key identifier: ED:E0:49:6C:6D:12:4D:55:FA:F4:89:5E:BA:35:39:8B:86:EF:DC:65
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01937C680199D4F6FF39301551868EABA7ED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7eBJbG0STVX69IleujU5i4bv3GU.roa
Signing time: Sat 30 Nov 2024 09:30:11 +0000
ROA not before: Sat 30 Nov 2024 09:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 87.120.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:68:01:99:d4:f6:ff:39:30:15:51:86:8e:ab:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 30 09:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede0496c6d124d55faf4895eba35398b86efdc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:5b:a1:aa:17:1e:15:be:6e:6d:e6:0e:a3:
b6:eb:09:93:47:b7:ad:04:be:b9:5b:4b:86:56:49:
f9:41:92:04:00:c1:87:d1:a5:8e:9a:f6:35:39:13:
6d:0a:50:51:d7:d1:c9:a2:f7:09:1f:b6:b9:d2:1a:
c3:0b:0b:12:98:48:88:a5:69:36:fc:53:f2:14:91:
57:c7:38:1f:83:0f:95:f6:5c:6b:a0:9a:e1:b3:b6:
95:c7:af:00:02:5e:79:56:05:cc:1e:15:ed:4b:21:
62:4c:fc:cd:31:12:5e:14:43:03:56:f3:32:a4:24:
96:ff:d3:a9:7b:71:7f:79:33:e3:63:67:a4:ff:ec:
ff:c7:ae:7a:4f:7d:b8:0c:5a:d1:67:5f:3c:95:65:
dd:fe:73:d9:b9:12:cd:3c:90:96:3a:a5:4d:35:42:
92:2c:10:7b:d1:40:6f:03:28:bc:18:9d:1d:b6:84:
af:51:46:79:fb:3d:b4:6e:d8:31:c1:5b:38:ce:03:
62:9b:e7:87:76:22:f0:79:a2:d9:63:96:ae:ef:a8:
4c:13:f6:49:c4:f0:07:6c:59:10:00:27:07:66:c0:
4e:7f:95:07:09:5b:eb:9a:f5:a3:df:e0:d5:b4:95:
b6:a5:55:3d:18:0d:82:8d:1f:d2:71:7e:3a:7d:3b:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E0:49:6C:6D:12:4D:55:FA:F4:89:5E:BA:35:39:8B:86:EF:DC:65
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7eBJbG0STVX69IleujU5i4bv3GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:50:56:5e:4d:eb:f2:c0:b2:7c:b0:d1:f9:1a:84:e5:6d:95:
43:be:42:67:d7:85:24:eb:47:b9:22:53:b7:cc:c8:dd:57:6a:
df:9a:ef:c1:c3:3d:57:c7:f3:d7:5d:25:1e:b6:f7:c6:71:a4:
66:34:ce:8e:24:2e:45:0f:27:cf:1e:fa:aa:bd:27:39:29:d1:
3f:d4:9e:c8:75:72:56:b7:cc:5e:63:51:dd:0f:ee:23:11:98:
72:53:cc:f4:68:f5:e2:f9:53:68:70:9f:f8:50:d5:50:58:af:
6a:a0:6a:d8:23:1d:d4:fa:69:99:9c:c8:19:3b:bb:59:87:14:
cc:77:24:20:8b:33:64:c9:cb:43:9a:f9:bc:62:d6:e4:82:51:
c8:48:e6:a5:1c:ee:67:58:51:aa:b6:a0:03:d3:35:74:27:7b:
d7:82:bb:a5:78:96:8e:60:af:c3:cb:af:12:62:d0:ff:de:c5:
a2:13:84:1c:8a:ea:fe:12:05:71:4b:51:c8:ab:1b:ce:4a:aa:
3e:9c:7d:af:64:98:8f:13:6a:c5:ba:b3:d6:4b:e3:d9:ec:c3:
75:79:76:5e:13:68:67:27:2d:b1:80:a7:c1:7f:f8:e3:a6:b2:
8a:77:9c:f2:25:e6:30:0f:70:1e:4f:86:65:95:f3:c1:6d:d5:
ed:e4:fa:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN8aAGZ1Pb/OTAVUYaOq6ftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTMwMDkzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGUwNDk2YzZkMTI0ZDU1ZmFmNDg5NWViYTM1Mzk4Yjg2ZWZkYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz9boaoXHhW+bm3mDqO26wmTR7et
BL65W0uGVkn5QZIEAMGH0aWOmvY1ORNtClBR19HJovcJH7a50hrDCwsSmEiIpWk2
/FPyFJFXxzgfgw+V9lxroJrhs7aVx68AAl55VgXMHhXtSyFiTPzNMRJeFEMDVvMy
pCSW/9Ope3F/eTPjY2ek/+z/x656T324DFrRZ188lWXd/nPZuRLNPJCWOqVNNUKS
LBB70UBvAyi8GJ0dtoSvUUZ5+z20btgxwVs4zgNim+eHdiLweaLZY5au76hME/ZJ
xPAHbFkQACcHZsBOf5UHCVvrmvWj3+DVtJW2pVU9GA2CjR/ScX46fTs4kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3gSWxtEk1V+vSJXro1OYuG79xlMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvN2VCSmJHMFNUVlg2OUlsZXVqVTVpNGJ2M0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gkMA0G
CSqGSIb3DQEBCwUAA4IBAQB7UFZeTevywLJ8sNH5GoTlbZVDvkJn14Uk60e5IlO3
zMjdV2rfmu/Bwz1Xx/PXXSUetvfGcaRmNM6OJC5FDyfPHvqqvSc5KdE/1J7IdXJW
t8xeY1HdD+4jEZhyU8z0aPXi+VNocJ/4UNVQWK9qoGrYIx3U+mmZnMgZO7tZhxTM
dyQgizNkyctDmvm8YtbkglHISOalHO5nWFGqtqAD0zV0J3vXgruleJaOYK/Dy68S
YtD/3sWiE4Qciur+EgVxS1HIqxvOSqo+nH2vZJiPE2rFurPWS+PZ7MN1eXZeE2hn
Jy2xgKfBf/jjprKKd5zyJeYwD3AeT4ZllfPBbdXt5Ppi
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:46 2025 by rpki-client