Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s_AusDZdj_qmct_uDeDfYhFzuB4.roa
File: s_AusDZdj_qmct_uDeDfYhFzuB4.roa (raw, json)
Hash identifier: q3i2tuS+gF1u7+FjSGW0KcGa0gjmgVNxSwV0j+bBZvo=
Subject key identifier: B3:F0:2E:B0:36:5D:8F:FA:A6:72:DF:EE:0D:E0:DF:62:11:73:B8:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193D441339EA9D23A0AF3F6D27711257368
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s_AusDZdj_qmct_uDeDfYhFzuB4.roa
Signing time: Tue 17 Dec 2024 10:54:23 +0000
ROA not before: Tue 17 Dec 2024 10:54:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213725
IP address blocks: 87.121.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:41:33:9e:a9:d2:3a:0a:f3:f6:d2:77:11:25:73:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 17 10:54:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f02eb0365d8ffaa672dfee0de0df621173b81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:ac:5a:d4:67:09:74:8f:e1:1a:38:9e:ab:
49:77:f7:a2:cb:e7:9e:31:6a:60:e2:53:79:b0:9c:
4c:3b:ce:d8:51:57:44:6f:bc:94:26:b0:68:3f:18:
18:fc:7a:a6:ba:f6:8d:7b:d2:11:09:52:e6:b1:ba:
9a:99:4d:99:0a:dd:f2:52:24:5c:d8:e2:d9:bd:1e:
8d:00:56:82:8d:74:dd:e2:b4:b9:9a:67:80:9b:ba:
0e:96:be:7e:13:0c:b8:cb:0f:fb:8e:8c:69:8a:1f:
4b:0e:1f:0e:8f:0e:4c:4d:00:a3:49:5e:4c:ef:53:
44:8e:f2:9a:e3:92:d2:56:fb:bc:87:f5:e5:03:42:
03:8c:e4:11:b9:f9:59:d8:37:83:e6:7e:75:3c:d4:
5b:b8:dd:73:55:41:61:5a:81:6c:84:f2:41:fe:b7:
f1:50:82:04:8d:6a:31:02:5a:cf:31:f7:b7:9b:a6:
21:6c:19:bf:6d:61:83:5d:c5:49:7a:48:ea:88:f4:
44:29:de:0c:f6:61:67:76:be:27:b0:bd:12:4e:5e:
af:59:2a:57:17:08:25:bd:3f:1c:e8:00:9b:fb:e3:
f6:29:86:90:c3:fe:b9:a1:6e:fc:c9:17:80:b3:99:
28:d8:1e:d7:a2:05:9c:7d:79:ba:bf:01:61:d0:a3:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:2E:B0:36:5D:8F:FA:A6:72:DF:EE:0D:E0:DF:62:11:73:B8:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s_AusDZdj_qmct_uDeDfYhFzuB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d4:76:28:30:e9:c9:54:89:fb:0b:1e:a6:d5:6c:c7:61:3f:
7e:ca:20:74:38:a8:53:5c:f3:d1:12:06:99:fb:33:fa:92:4c:
42:80:7e:cd:62:42:1c:19:c7:66:ae:b3:b4:94:49:72:3b:09:
0f:57:59:35:92:7d:71:7d:1a:49:2e:c9:84:1f:72:0d:de:74:
60:90:29:fe:ab:c6:08:a8:a8:f8:a6:3e:bf:59:de:d6:82:1b:
f3:e2:ee:d1:08:a9:12:e0:69:9b:4a:2c:e1:aa:87:f9:78:47:
61:54:07:47:2f:1f:e8:1b:d6:28:de:21:32:cd:c9:c1:64:90:
6a:6c:04:b5:c5:fc:b5:34:7c:96:1f:d9:fb:37:3b:a1:eb:73:
9d:13:f3:ab:fc:b0:b4:c7:a4:70:a5:5d:fe:a4:87:c0:86:94:
96:0b:f2:6f:45:7f:d3:b3:ac:86:8c:f6:47:f2:dd:4b:22:2d:
ad:b8:82:6b:cd:49:a6:3c:3b:67:cf:e7:ea:8f:35:42:f9:79:
c4:18:ea:c7:75:49:0c:4b:bb:5f:23:43:dd:20:1a:23:3e:0b:
d5:ea:d7:35:a4:ad:99:0d:7b:68:e9:a3:36:c0:d3:3f:c7:80:
84:d4:cd:16:29:68:df:ca:2c:49:23:34:8b:6a:4b:71:87:d3:
1c:88:e7:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPUQTOeqdI6CvP20ncRJXNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjE3MTA1NDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2YwMmViMDM2NWQ4ZmZhYTY3MmRmZWUwZGUwZGY2MjExNzNiODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidysWtRnCXSP4Ro4nqtJd/eiy+ee
MWpg4lN5sJxMO87YUVdEb7yUJrBoPxgY/HqmuvaNe9IRCVLmsbqamU2ZCt3yUiRc
2OLZvR6NAFaCjXTd4rS5mmeAm7oOlr5+Ewy4yw/7joxpih9LDh8Ojw5MTQCjSV5M
71NEjvKa45LSVvu8h/XlA0IDjOQRuflZ2DeD5n51PNRbuN1zVUFhWoFshPJB/rfx
UIIEjWoxAlrPMfe3m6YhbBm/bWGDXcVJekjqiPREKd4M9mFndr4nsL0STl6vWSpX
FwglvT8c6ACb++P2KYaQw/65oW78yReAs5ko2B7XogWcfXm6vwFh0KMgIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLPwLrA2XY/6pnLf7g3g32IRc7geMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc19BdXNEWmRqX3FtY3RfdURlRGZZaEZ6dUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3lPMA0G
CSqGSIb3DQEBCwUAA4IBAQB81HYoMOnJVIn7Cx6m1WzHYT9+yiB0OKhTXPPREgaZ
+zP6kkxCgH7NYkIcGcdmrrO0lElyOwkPV1k1kn1xfRpJLsmEH3IN3nRgkCn+q8YI
qKj4pj6/Wd7Wghvz4u7RCKkS4GmbSizhqof5eEdhVAdHLx/oG9Yo3iEyzcnBZJBq
bAS1xfy1NHyWH9n7Nzuh63OdE/Or/LC0x6RwpV3+pIfAhpSWC/JvRX/Ts6yGjPZH
8t1LIi2tuIJrzUmmPDtnz+fqjzVC+XnEGOrHdUkMS7tfI0PdIBojPgvV6tc1pK2Z
DXto6aM2wNM/x4CE1M0WKWjfyixJIzSLaktxh9MciOf6
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:41 2025 by rpki-client