Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/xj_bU_AeYpFZwMfy_WhlE0161AM.roa
File: xj_bU_AeYpFZwMfy_WhlE0161AM.roa (raw, json)
Hash identifier: gxRpnwqiTTtgRa8dwfgNzDjxoFuwL1PSO169v4Dr0WI=
Subject key identifier: C6:3F:DB:53:F0:1E:62:91:59:C0:C7:F2:FD:68:65:13:4D:7A:D4:03
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CAB45EFA0CD9F36BBAE0DEA8B4832E932
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/xj_bU_AeYpFZwMfy_WhlE0161AM.roa
Signing time: Wed 27 Dec 2023 12:35:36 +0000
ROA not before: Wed 27 Dec 2023 12:35:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41047
IP address blocks: 87.237.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:45:ef:a0:cd:9f:36:bb:ae:0d:ea:8b:48:32:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Dec 27 12:35:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63fdb53f01e629159c0c7f2fd6865134d7ad403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:ba:9a:15:f0:2a:62:78:6f:d6:3e:2b:94:
1b:39:30:91:2a:29:a1:5f:12:e1:bf:f7:a0:c8:27:
9d:8e:1a:97:06:18:6e:53:6c:3f:b7:e1:35:d2:cd:
bd:99:49:9f:69:fd:de:58:9b:5b:03:55:df:7c:f8:
d6:96:27:cb:e9:e5:c3:00:d3:ef:ed:07:f3:77:5f:
76:7b:04:f2:66:36:d0:4b:79:8c:05:f3:39:fc:11:
9c:dc:bb:5f:c3:03:9a:27:18:54:78:63:2f:0b:85:
8b:5c:3c:e6:01:26:2e:48:df:1d:66:8b:69:ff:3e:
6d:01:90:9f:61:24:da:af:a4:89:41:59:e6:b7:9c:
83:97:cf:d0:2a:7b:0d:fa:f4:d0:d2:54:1a:cd:34:
7f:fd:18:80:85:c8:2b:16:00:c6:d3:23:c4:99:e5:
30:5b:28:4e:bf:f8:f0:6b:c1:d5:4c:e9:e0:93:7c:
07:a0:3b:01:ce:38:96:dd:e3:8d:0e:41:68:18:5f:
b8:9f:75:18:4d:cc:e9:da:89:cc:49:f5:2b:37:d2:
40:17:44:f9:9b:6b:e6:ba:71:5b:24:92:7e:64:24:
52:31:95:60:7b:bf:36:4a:e1:32:14:06:6f:e0:a1:
21:e5:91:dd:62:18:50:66:b7:ae:8c:e5:09:08:27:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:DB:53:F0:1E:62:91:59:C0:C7:F2:FD:68:65:13:4D:7A:D4:03
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/xj_bU_AeYpFZwMfy_WhlE0161AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fc:38:67:08:16:c2:be:e7:57:83:51:a2:c1:a5:6b:55:d4:
55:40:78:7a:c9:ae:48:54:d2:09:a0:13:28:da:ca:eb:95:8c:
56:00:0d:fb:85:d0:34:89:11:24:fd:b8:06:1c:bf:72:df:da:
7f:78:ec:77:06:52:b5:9c:92:a4:1c:5c:04:2b:e1:12:c6:08:
9f:d1:fd:ab:1e:0e:78:c7:78:8d:f2:11:fd:57:76:a6:79:b5:
ba:0a:b9:a1:c7:e1:64:03:6a:37:d7:15:b1:f2:04:a0:9b:51:
66:2e:dd:9e:bf:79:fb:5f:ca:7a:89:8f:23:42:91:ea:59:10:
fb:72:c6:2a:8c:66:76:e4:32:49:2e:e0:46:8b:00:08:f7:76:
d9:d6:50:3a:38:06:c3:f3:3e:53:ad:f4:d5:10:f0:1b:f9:72:
98:5b:80:e2:07:43:01:72:d9:05:6e:fd:8a:ed:8a:8f:65:93:
d0:0f:9f:10:b5:3a:04:2d:4a:c0:0d:b0:c0:f6:38:9f:cb:4d:
fa:34:ab:40:7a:ee:8f:10:de:a5:e5:32:9e:60:48:80:6b:5f:
ee:bf:7c:57:e2:ee:a2:b5:01:42:b2:69:b1:ac:57:73:02:a4:
12:32:57:6a:c3:2a:7e:32:a3:df:3c:0e:5e:12:24:6b:c3:87:
b3:1f:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org