Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/iaNQwK7TqicQXttz9piXrg-7STQ.roa
File: iaNQwK7TqicQXttz9piXrg-7STQ.roa (raw, json)
Hash identifier: Q/xD0Csd7FFzWnZCA+vjLh/gRfh7uQnR/vu5NhA98SY=
Subject key identifier: 89:A3:50:C0:AE:D3:AA:27:10:5E:DB:73:F6:98:97:AE:0F:BB:49:34
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 0187BD71B93395B1C51531DE7F397BA8DE02
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/iaNQwK7TqicQXttz9piXrg-7STQ.roa
Signing time: Wed 26 Apr 2023 12:02:39 +0000
ROA not before: Wed 26 Apr 2023 12:02:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15925
IP address blocks: 87.253.248.0/21 maxlen: 21
213.135.192.0/19 maxlen: 19
2a01:7f8::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:71:b9:33:95:b1:c5:15:31:de:7f:39:7b:a8:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Apr 26 12:02:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89a350c0aed3aa27105edb73f69897ae0fbb4934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:a2:22:d5:62:23:7b:72:b9:c6:86:f5:07:
8c:01:29:ad:9c:27:94:81:c4:e3:27:0b:7d:0b:b7:
f1:56:ad:56:a7:8e:e4:7b:72:c2:5c:7c:3e:ba:ed:
f3:36:0e:5c:ba:78:eb:f3:4a:7b:4f:f7:06:c1:1c:
70:07:2e:3a:60:9f:6b:12:97:d5:d0:41:ec:43:2e:
e2:e4:23:2e:cc:c6:11:f7:4e:2c:26:fb:13:8a:92:
9b:1a:4c:12:af:04:19:47:eb:a0:fd:d5:77:04:1e:
94:b7:e4:77:78:1f:02:37:b8:f9:8d:8c:29:d0:64:
30:35:ff:26:a0:0d:2e:ed:d4:e5:5a:f5:15:4b:06:
ce:70:5f:16:23:3f:0e:8e:68:5e:7f:40:20:31:ba:
79:f1:8c:33:07:9a:60:19:9f:8d:77:57:f7:32:ce:
fa:69:d4:31:84:4d:67:f7:58:2a:98:cd:3c:85:92:
c2:6e:ac:bb:11:82:8a:da:86:3a:43:c6:5a:bd:cd:
f7:7b:e6:03:60:4b:44:27:4f:5e:78:61:93:7d:c9:
b1:cc:47:e2:46:55:6d:b0:5d:b6:55:b6:06:7a:f9:
43:d2:83:35:03:87:20:78:2a:a1:fc:0e:7b:ea:f8:
0a:31:13:b9:bb:09:15:7b:16:4e:e7:74:5c:3c:9d:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:50:C0:AE:D3:AA:27:10:5E:DB:73:F6:98:97:AE:0F:BB:49:34
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/iaNQwK7TqicQXttz9piXrg-7STQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.253.248.0/21
213.135.192.0/19
IPv6:
2a01:7f8::/29
Signature Algorithm: sha256WithRSAEncryption
3e:9e:3c:6c:80:d4:c0:dc:e2:90:86:22:54:f6:90:a6:0f:24:
5e:d5:0c:7b:3b:36:ca:bc:52:db:8a:01:90:fa:6a:bb:2f:57:
2a:5b:c5:67:fd:5c:72:1a:0f:fc:13:f3:71:75:a3:fa:ec:13:
76:61:04:cd:88:d9:1f:a0:99:03:c5:04:8a:66:39:f8:75:d3:
88:b2:8e:fd:a0:48:5a:55:2a:4f:05:5e:ab:a9:36:43:06:89:
4d:79:d0:5d:4b:74:44:75:b5:76:aa:f8:94:c5:97:48:4b:20:
5c:f6:5b:77:70:12:48:fc:a1:d3:a9:79:46:fc:e3:e6:a8:6a:
5b:5d:e6:5b:16:87:ad:7d:15:6d:a0:53:17:91:c4:f1:e9:29:
e3:be:22:bb:70:48:9c:b0:b1:e0:e0:7a:4d:fe:78:84:ca:c9:
6c:b9:70:d1:82:78:b8:ac:21:27:51:46:ca:13:ff:bd:b3:48:
0c:cc:65:2a:22:bb:5e:cd:df:6e:61:96:72:31:28:d2:8b:75:
f4:2c:bb:e6:5a:32:87:d8:8e:61:15:b6:3b:04:a7:80:1f:00:
b6:15:d7:77:17:ae:36:d4:75:57:2c:69:e6:4a:f1:31:17:28:
7a:3d:6d:95:9b:53:8e:aa:97:af:51:6f:c0:0e:a7:7e:69:61:
7b:03:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:22 2024 by rpki-client on console-fra.rpki-client.org