Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Yxg3kCHjeeGjTHwGEKhNtQSsnXk.roa
File: Yxg3kCHjeeGjTHwGEKhNtQSsnXk.roa (raw, json)
Hash identifier: LA/ayXIOe5L3uZmpLseB+fJEjm5XLXwL3juOP4v5KMI=
Subject key identifier: 63:18:37:90:21:E3:79:E1:A3:4C:7C:06:10:A8:4D:B5:04:AC:9D:79
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9CB42B494A5A494FD18E01775568CAE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Yxg3kCHjeeGjTHwGEKhNtQSsnXk.roa
Signing time: Mon 08 Jan 2024 15:57:41 +0000
ROA not before: Mon 08 Jan 2024 15:57:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204497
IP address blocks: 87.229.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 13:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:cb:42:b4:94:a5:a4:94:fd:18:e0:17:75:56:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:57:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6318379021e379e1a34c7c0610a84db504ac9d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:a9:f6:e3:8e:ea:d7:ba:fe:be:5b:df:cb:
4b:7a:39:6f:2f:2b:4e:aa:ea:cf:dc:6d:63:6d:56:
5f:3c:e4:31:29:45:24:cb:8a:fc:b8:8d:04:14:3e:
1f:b3:71:bd:8b:f5:2d:db:f5:44:62:f6:cf:e1:6c:
72:96:0a:c8:c3:7e:a0:5a:9e:77:e2:ce:81:a5:44:
82:f5:63:55:80:f0:0e:b8:ee:a6:79:a3:81:da:80:
d8:73:bb:b4:86:55:fb:af:06:58:8a:fb:87:4c:c6:
81:13:83:d6:b6:70:0e:28:19:51:92:a6:93:4b:df:
be:fb:c9:62:23:3d:7f:a1:19:2a:00:c9:a0:cd:22:
25:12:eb:84:32:ac:86:52:f8:67:f4:4a:a4:47:e5:
d3:4d:01:33:10:4d:2e:b8:a7:d3:23:0a:20:86:d2:
49:1a:a6:70:94:a9:34:0d:1d:d5:d0:c1:73:fa:56:
e0:da:ea:8b:b8:7a:aa:90:b6:fa:5d:f7:c8:99:d1:
28:8a:73:24:31:54:16:af:b0:f1:4f:9b:6e:67:71:
09:85:94:c1:0b:16:f0:7c:9d:55:ea:4e:06:30:28:
76:34:57:8e:ec:d0:c4:4f:21:2e:ce:6b:fe:d9:03:
88:8c:f8:53:69:af:3b:0c:99:2e:8d:81:dd:f4:51:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:37:90:21:E3:79:E1:A3:4C:7C:06:10:A8:4D:B5:04:AC:9D:79
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Yxg3kCHjeeGjTHwGEKhNtQSsnXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.80.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bf:00:49:2b:f1:5c:c3:1d:50:6d:2c:bb:55:b4:4d:2a:10:
69:ec:90:73:81:18:6e:55:d9:da:45:3c:b8:f5:1d:63:6e:62:
98:ad:09:ee:23:0b:c4:ec:59:db:ad:da:42:60:39:6f:ba:d7:
b7:1c:b4:67:6e:80:2e:7e:55:aa:7c:fe:e8:e3:aa:a8:6f:f5:
ea:18:75:90:29:5a:81:29:aa:3a:a5:b7:ff:19:dd:0a:45:88:
01:ab:aa:fc:bd:1f:30:80:7f:10:3f:73:ad:d3:41:fb:82:01:
45:b4:56:9f:41:71:5b:1e:74:8f:62:ee:6c:9d:e0:24:5e:93:
98:83:25:f5:3e:1c:24:b4:23:81:54:00:ea:48:42:46:d0:d7:
c5:44:de:c1:b8:49:03:20:cf:82:4b:97:c1:27:19:76:09:4f:
10:76:b1:06:47:cd:4c:a5:14:13:9b:8d:5a:14:19:c0:82:ac:
31:28:d5:5b:be:b4:c2:67:ac:b8:5e:2b:c2:66:b5:a3:c5:0a:
ed:d3:22:2f:81:07:e6:d0:e9:0d:62:ae:d5:6f:99:a3:07:94:
71:db:10:46:03:5d:83:f0:b3:c9:49:ae:8e:21:92:ca:30:de:
d4:28:91:14:7e:4f:c2:55:58:3f:ed:0f:bd:64:98:00:3a:e2:
a0:f5:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org