Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/psJcs5iK3l3C1scSeAjIfmlicWQ.roa
File: psJcs5iK3l3C1scSeAjIfmlicWQ.roa (raw, json)
Hash identifier: fjpQ9LbwcSvU8xYfwKqYr/pwWEIzaMOrNXl0iY4yJ7w=
Subject key identifier: A6:C2:5C:B3:98:8A:DE:5D:C2:D6:C7:12:78:08:C8:7E:69:62:71:64
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 018CC2DB02044395BD368691F8247D2B28DA
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/psJcs5iK3l3C1scSeAjIfmlicWQ.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 87.236.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 29 May 2024 13:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:02:04:43:95:bd:36:86:91:f8:24:7d:2b:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6c25cb3988ade5dc2d6c7127808c87e69627164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:15:e7:bd:4a:e4:04:33:51:4c:41:68:f3:
da:99:b4:24:1b:38:07:3c:dd:df:90:d0:fe:f1:ae:
42:76:65:d1:ac:f9:7a:ba:8d:13:39:ff:34:af:a1:
f9:96:78:d9:60:51:8f:e1:d2:04:1d:ae:fe:7e:d6:
c0:c2:1a:42:e1:92:23:f8:e1:ab:9b:a8:bc:99:62:
1e:9d:f7:88:be:7f:08:8a:c9:6c:da:10:42:b6:49:
09:a2:ff:3d:89:16:0d:63:57:8f:e0:40:e9:27:d6:
64:4b:06:c7:ef:da:5c:77:24:ab:4f:5f:9c:d2:1d:
e1:6a:b2:7b:fd:b5:b3:b4:ce:b0:bf:4b:f9:7f:f0:
cb:38:20:02:fc:ab:fd:07:cf:e0:ab:e5:c9:fe:ed:
05:8b:b9:12:47:30:fe:fd:51:47:4a:65:c0:06:d0:
ae:b3:98:a5:da:31:a2:b9:d4:99:17:89:7b:7f:81:
b7:da:bd:bb:b0:4a:80:ac:f0:0c:1c:79:1f:04:4c:
c0:a5:c3:40:89:aa:7b:16:1f:e3:0a:12:d7:5a:29:
00:b4:5f:78:8a:07:86:ab:dc:de:49:45:b5:18:46:
49:4c:d9:14:f7:34:a7:50:20:02:03:91:73:c9:38:
90:1f:75:b1:2b:cf:aa:5c:db:7c:01:ad:8f:28:50:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C2:5C:B3:98:8A:DE:5D:C2:D6:C7:12:78:08:C8:7E:69:62:71:64
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/psJcs5iK3l3C1scSeAjIfmlicWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:d0:77:c8:71:58:9b:0f:b5:86:41:f1:dc:36:44:28:fe:a7:
99:eb:9e:36:26:5c:f8:d1:36:34:77:b0:d3:41:a2:65:9e:f4:
4f:f0:f4:44:d5:fd:a4:0c:4b:66:36:b8:91:ee:9a:55:ab:98:
94:78:ae:43:ff:20:20:1d:fd:50:61:12:e8:8f:71:7d:6d:9e:
ee:2a:d3:b9:9f:91:c9:b9:b5:e9:cb:c6:f9:b3:ef:26:9e:55:
e8:7d:e2:4a:2b:47:84:e6:b2:56:f0:f5:d8:b5:16:1d:da:ed:
6c:40:d7:0a:6b:0c:f6:83:73:50:55:3d:8f:cf:9b:ff:c5:97:
a2:ab:20:07:a5:ec:68:cd:0c:8a:1b:1a:d4:af:04:2c:b8:78:
bf:5d:a3:da:84:ee:7d:26:19:41:2b:42:d3:e7:cb:33:37:b3:
ff:01:db:66:37:dc:c0:87:f6:f0:86:8b:72:83:6c:ec:02:33:
a2:96:0b:eb:63:19:27:39:f8:c3:ae:97:06:eb:68:da:ce:49:
19:5b:1e:c2:5c:00:07:24:bf:e4:ce:a3:f7:1f:d0:c0:97:cf:
7d:4d:fc:75:fc:ae:51:ca:eb:95:a7:1f:b0:35:6d:8c:0f:49:
1a:91:13:f0:85:ce:60:c6:74:63:9f:3f:44:fb:e8:6a:71:29:
57:79:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:20 2024 by rpki-client on console-fra.rpki-client.org