Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pU9Q6SCqCHWbnTU87RP3pzOaIBQ.roa
File: pU9Q6SCqCHWbnTU87RP3pzOaIBQ.roa (raw, json)
Hash identifier: JjZtKSriun0G5d5B+hTOraMEGJtCxKU7ZBWRpQK4xY8=
Subject key identifier: A5:4F:50:E9:20:AA:08:75:9B:9D:35:3C:ED:13:F7:A7:33:9A:20:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019414241F9AA749F4BC4517D97C97D7D070
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pU9Q6SCqCHWbnTU87RP3pzOaIBQ.roa
Signing time: Sun 29 Dec 2024 20:38:19 +0000
ROA not before: Sun 29 Dec 2024 20:38:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216078
IP address blocks: 87.121.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:14:24:1f:9a:a7:49:f4:bc:45:17:d9:7c:97:d7:d0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 29 20:38:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a54f50e920aa08759b9d353ced13f7a7339a2014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:df:fe:f2:c3:73:41:f7:55:c9:7e:63:07:
06:b1:3d:8d:5e:da:c1:8f:5a:4e:29:58:77:52:22:
dc:82:75:cf:4b:e8:73:af:79:6f:ad:0e:97:44:61:
f6:43:08:a0:25:c2:4a:61:c0:36:f8:48:8f:93:36:
6c:25:d8:66:ea:05:c4:71:8c:71:d0:49:da:e3:b4:
7a:0b:9b:2c:25:60:83:a4:15:01:69:f2:1a:f0:27:
ad:bc:42:21:f6:9c:2b:9c:f1:d4:58:02:c1:7c:26:
6e:f2:fc:db:6f:cc:1d:1f:a5:6f:77:b7:90:53:c8:
7d:ef:e1:06:55:dd:8c:76:21:b2:76:5d:a2:12:43:
4c:ff:47:05:da:0b:52:6c:b7:48:ab:d4:db:8d:fe:
5c:f0:a1:0e:1d:39:a1:fb:7e:f0:f1:22:30:f2:cb:
79:d2:51:48:6a:31:5c:91:5e:de:f7:26:55:05:24:
ca:7f:86:ec:bd:e1:57:15:ef:00:83:1e:ec:93:e5:
5d:a2:98:5b:c0:6b:50:b5:70:d6:e6:d5:c7:d8:99:
68:c0:f3:cf:f8:ee:e7:d8:01:5b:65:46:41:62:3d:
9d:3e:6a:ab:b9:02:ad:eb:01:b7:9f:e4:14:8c:20:
47:ff:c8:95:5a:2f:1a:9d:c3:c0:fa:1a:71:ed:7e:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:50:E9:20:AA:08:75:9B:9D:35:3C:ED:13:F7:A7:33:9A:20:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pU9Q6SCqCHWbnTU87RP3pzOaIBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:12:ae:a6:63:94:73:7a:7d:80:12:80:ec:c5:16:7c:58:c4:
e7:f5:3e:06:d7:0f:1a:2e:a4:7d:bb:e1:89:88:42:69:bb:75:
b8:8b:0b:2e:a0:c5:e2:0b:23:65:04:7f:04:be:d4:b2:3c:61:
23:75:29:f0:b7:44:64:15:b1:c6:98:e3:4b:ef:f4:49:e9:bc:
3d:b3:24:7d:33:cd:e6:e0:87:03:52:84:59:12:e0:7d:e3:41:
32:04:4c:9f:70:74:21:d0:bd:0e:b2:00:e0:d6:da:06:41:0d:
7f:d3:81:37:25:41:de:3f:ea:ae:bc:8c:67:b5:84:88:62:54:
24:c3:0b:d8:71:4b:d5:76:c5:c7:cc:10:13:1c:31:fc:0f:26:
15:1e:86:e1:d6:6a:1a:ee:77:f8:c0:1b:14:63:f2:1b:0b:a3:
95:21:99:49:d9:25:c3:41:fa:61:15:8a:25:72:12:ae:55:7f:
16:b9:35:b4:b1:40:73:7a:1f:ae:ab:d9:15:3c:3b:7e:03:d7:
b7:6a:3c:32:69:b4:d8:89:1f:24:13:e7:7d:dc:07:0c:af:15:
b7:b9:67:ca:b4:37:45:1f:1f:c1:b2:f6:19:0c:5d:00:18:02:
34:e9:a7:71:0b:da:08:4f:cc:8b:38:16:a2:f3:36:9f:e3:42:
f4:dd:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:31:34 2025 by rpki-client