Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GgIf-rRqbHjP_TEoAZcNqPfatiE.roa
File: GgIf-rRqbHjP_TEoAZcNqPfatiE.roa (raw, json)
Hash identifier: 4R/G5XWagX5ncdaJOI2zcbBoyc83SXGs6xbZ5MHPEU8=
Subject key identifier: 1A:02:1F:FA:B4:6A:6C:78:CF:FD:31:28:01:97:0D:A8:F7:DA:B6:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B6A7613EF6FE73CBFA0F4759E4955B26
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GgIf-rRqbHjP_TEoAZcNqPfatiE.roa
Signing time: Wed 11 Dec 2024 16:57:22 +0000
ROA not before: Wed 11 Dec 2024 16:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214943
IP address blocks: 87.120.84.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 15:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:a7:61:3e:f6:fe:73:cb:fa:0f:47:59:e4:95:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 16:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a021ffab46a6c78cffd312801970da8f7dab621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:cd:c0:b0:a1:6d:72:df:8f:3f:58:83:39:
43:f0:7a:1a:77:4a:f2:ac:e4:a0:42:84:74:94:ca:
0a:78:f9:53:6e:4a:27:dd:09:c5:11:55:29:6a:5a:
2f:e8:3e:0f:90:de:f2:6b:6f:8a:a4:fe:08:3a:14:
38:ea:e9:95:82:04:f9:01:9d:ee:ff:e9:ab:27:42:
dd:db:6e:38:ac:14:9c:42:f5:65:e1:e2:3d:15:65:
f8:9c:d4:32:41:7f:13:3b:d4:cd:db:be:ec:91:b6:
3a:b1:ee:a5:7c:15:a0:35:fe:c6:05:18:e7:30:3d:
cd:66:cb:d9:15:32:26:c2:a2:0c:6b:3d:ed:75:d3:
e3:14:70:b5:c6:48:d2:53:d3:94:c0:6c:2e:76:4d:
3b:ad:5f:32:77:d4:6b:32:3b:43:96:e4:cd:34:ed:
db:c3:39:d0:c5:c6:8b:96:ee:6c:3a:16:56:f9:ef:
29:a3:f7:ff:f0:aa:12:16:72:ca:a3:66:ee:84:cf:
38:64:0e:dc:3d:06:e4:97:3b:d9:df:e4:fa:b6:08:
6e:84:5a:a5:f0:79:5f:02:a6:a3:b1:55:ce:84:62:
1b:33:db:4f:fb:75:d5:69:32:71:57:35:c4:01:28:
f2:7c:99:4d:fc:f5:1c:da:6e:34:2d:f0:75:6c:97:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:02:1F:FA:B4:6A:6C:78:CF:FD:31:28:01:97:0D:A8:F7:DA:B6:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GgIf-rRqbHjP_TEoAZcNqPfatiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
94.156.177.0/24
94.156.227.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2c:1d:92:05:1c:a2:bc:d9:cd:7d:72:27:1c:6c:d1:b2:01:
26:66:6d:f9:1c:5a:20:a5:3e:d2:fa:a8:5d:c5:5d:26:5b:51:
b2:67:64:47:77:c2:d1:a1:34:21:ea:7e:66:f9:c4:f7:da:6b:
f7:92:ef:fb:5b:48:15:8c:a4:c1:7c:e2:cb:eb:1f:1d:40:5b:
7e:c0:e4:ab:ef:9c:eb:65:9f:c3:c4:64:10:2b:af:b3:46:da:
88:da:dc:15:c2:15:a5:0b:26:14:79:72:4b:dd:bc:49:29:73:
3d:4b:73:09:8a:7d:75:ef:fb:4a:84:13:ce:ca:87:b6:cd:46:
5e:11:74:30:52:ff:ea:36:3e:14:4a:de:a9:f0:39:1b:b0:39:
ce:e5:bf:5d:f1:ec:b2:99:dd:6f:39:30:71:fa:96:04:ee:c0:
67:7b:88:4f:16:21:f7:8e:21:d5:5e:9a:ef:d3:15:71:9f:b9:
11:7b:68:50:5f:89:0f:c4:32:09:54:2b:29:86:ad:ec:76:7f:
1f:6a:22:17:31:c6:9a:2f:1b:72:a8:77:31:d3:9a:d3:46:0b:
14:ba:c9:06:1b:21:8e:f5:fb:50:33:0b:94:72:7e:83:34:4f:
31:ef:31:df:45:c9:9e:0d:c3:f4:d2:96:1d:99:41:43:50:0f:
9c:15:90:51
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZO2p2E+9v5zy/oPR1nklVsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjExMTY1NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTAyMWZmYWI0NmE2Yzc4Y2ZmZDMxMjgwMTk3MGRhOGY3ZGFiNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyfNwLChbXLfjz9YgzlD8Hoad0ry
rOSgQoR0lMoKePlTbkon3QnFEVUpalov6D4PkN7ya2+KpP4IOhQ46umVggT5AZ3u
/+mrJ0Ld2244rBScQvVl4eI9FWX4nNQyQX8TO9TN277skbY6se6lfBWgNf7GBRjn
MD3NZsvZFTImwqIMaz3tddPjFHC1xkjSU9OUwGwudk07rV8yd9RrMjtDluTNNO3b
wznQxcaLlu5sOhZW+e8po/f/8KoSFnLKo2buhM84ZA7cPQbklzvZ3+T6tghuhFql
8HlfAqajsVXOhGIbM9tP+3XVaTJxVzXEASjyfJlN/PUc2m40LfB1bJewPwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBoCH/q0amx4z/0xKAGXDaj32rYhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvR2dJZi1yUnFiSGpQX1RFb0FaY05xUGZhdGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV3hUAwQA
XpyxAwQAXpzjAwQAudhHMA0GCSqGSIb3DQEBCwUAA4IBAQAILB2SBRyivNnNfXIn
HGzRsgEmZm35HFogpT7S+qhdxV0mW1GyZ2RHd8LRoTQh6n5m+cT32mv3ku/7W0gV
jKTBfOLL6x8dQFt+wOSr75zrZZ/DxGQQK6+zRtqI2twVwhWlCyYUeXJL3bxJKXM9
S3MJin117/tKhBPOyoe2zUZeEXQwUv/qNj4USt6p8DkbsDnO5b9d8eyymd1vOTBx
+pYE7sBne4hPFiH3jiHVXprv0xVxn7kRe2hQX4kPxDIJVCsphq3sdn8faiIXMcaa
LxtyqHcx05rTRgsUuskGGyGO9ftQMwuUcn6DNE8x7zHfRcmeDcP00pYdmUFDUA+c
FZBR
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:20:50 2025 by rpki-client