Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/M7xMcYquwgAEs8JxsNMJYZ667Vc.roa
File: M7xMcYquwgAEs8JxsNMJYZ667Vc.roa (raw, json)
Hash identifier: mGuJ7q2ft/a/9KWsyMXg3wppAd+AZppy6wqTm45BjV0=
Subject key identifier: 33:BC:4C:71:8A:AE:C2:00:04:B3:C2:71:B0:D3:09:61:9E:BA:ED:57
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F19250C9A6B6A7582EFEDF40AA1DB4
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/M7xMcYquwgAEs8JxsNMJYZ667Vc.roa
Signing time: Mon 02 Jan 2023 19:24:49 +0000
ROA not before: Mon 02 Jan 2023 19:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21325
IP address blocks: 87.246.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:92:50:c9:a6:b6:a7:58:2e:fe:df:40:aa:1d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33bc4c718aaec20004b3c271b0d309619ebaed57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:79:cb:cb:fb:2e:f3:60:18:ac:4c:9c:30:
ab:b2:9a:af:26:bb:6f:e6:16:8b:c6:87:54:87:92:
d9:68:8e:3e:30:74:a4:42:9a:10:e6:1c:12:7d:91:
c6:79:d7:0b:6e:14:2a:b7:99:b2:83:05:c8:a1:49:
f0:34:00:19:ae:ec:bf:f0:d1:2c:f7:2f:9d:de:47:
e7:0e:90:d3:03:57:ac:80:27:04:9b:1e:f0:06:8a:
9c:6e:a3:2b:2e:fb:27:68:26:7a:08:e8:e2:3b:2a:
7e:9b:c8:33:90:20:89:c4:7d:3f:d9:92:2a:4a:dc:
52:53:ce:42:7d:c8:56:0e:2a:a0:dd:17:b3:79:11:
76:a3:74:90:d1:f4:41:03:df:54:2b:94:aa:ab:ba:
c5:df:10:56:87:cb:55:a4:f7:79:b3:c5:ef:2a:a7:
3b:36:37:ee:48:11:03:6a:a1:e6:e4:e8:7b:b2:b2:
97:57:1e:a2:03:45:7f:08:75:ce:ab:9f:e0:1a:ad:
fe:f4:9a:2e:c8:5d:e2:ff:3d:54:34:3a:a7:03:6d:
f3:1b:e1:3e:a6:56:ba:54:52:a2:78:77:53:a4:61:
1b:b0:2f:95:26:07:2f:bf:6d:fd:53:cd:30:35:34:
e6:23:ac:0e:e5:18:c0:06:3f:f8:d8:fb:df:a6:00:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:4C:71:8A:AE:C2:00:04:B3:C2:71:B0:D3:09:61:9E:BA:ED:57
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/M7xMcYquwgAEs8JxsNMJYZ667Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
30:0d:43:40:95:dc:ed:b9:5b:fb:59:a8:01:fd:b3:cf:e6:03:
ed:9c:ba:12:b2:f3:f2:b6:a3:ce:a0:3a:3e:b3:93:f0:c3:55:
15:f1:2c:3e:ca:f9:09:4e:63:0f:8a:42:ef:bc:0c:1d:c1:64:
b6:88:f9:a4:10:00:8a:2f:07:64:ab:d3:0c:5f:ca:30:51:4a:
cc:f3:ff:88:ec:68:53:f3:42:2b:fc:13:3a:c0:af:b1:3f:c8:
63:46:8f:ab:5b:81:c7:c4:9a:e5:98:13:db:12:87:3c:60:cb:
3e:ac:d7:e7:c3:dc:75:47:fa:df:85:67:45:4a:f8:39:22:17:
80:38:e5:38:89:ce:65:25:61:3a:07:c0:7c:93:f6:fa:92:28:
95:d7:23:51:d1:47:0c:38:51:a0:2f:33:1b:58:bd:21:ba:15:
ee:50:29:de:5a:d0:87:00:72:83:55:34:e8:9c:76:77:bc:97:
11:71:09:02:a8:02:b2:e7:f6:62:88:13:5a:65:cf:40:62:15:
c0:3c:b6:47:45:c0:1c:98:54:91:ab:74:83:8f:8b:25:8d:83:
6f:d1:84:4a:97:5a:56:10:02:19:a1:fa:dd:21:4a:3d:40:89:
0b:ff:7a:9d:f3:da:f1:63:f1:47:61:9e:13:d2:c0:3d:5e:12:
8e:9e:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org