Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9PdAG-KsfKGqGXmQdICT7GzOk0o.roa
File: 9PdAG-KsfKGqGXmQdICT7GzOk0o.roa (raw, json)
Hash identifier: xZ5F29AyBXQ4nklR5qwtEZWgqwZT65b57GnnW1qvsQY=
Subject key identifier: F4:F7:40:1B:E2:AC:7C:A1:AA:19:79:90:74:80:93:EC:6C:CE:93:4A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC8020589C4244CA30A46741EA64E0AE3
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9PdAG-KsfKGqGXmQdICT7GzOk0o.roa
Signing time: Tue 02 Jan 2024 02:30:24 +0000
ROA not before: Tue 02 Jan 2024 02:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39407
IP address blocks: 87.103.232.0/24 maxlen: 24
87.103.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:05:89:c4:24:4c:a3:0a:46:74:1e:a6:4e:0a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4f7401be2ac7ca1aa197990748093ec6cce934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:2f:9a:0a:30:72:6c:c8:c8:29:35:f6:6f:
fd:6c:07:5b:9a:75:16:ce:72:1a:8a:e9:87:42:4b:
33:78:1a:99:3c:a2:d5:37:ac:db:59:86:95:5c:9a:
8a:27:73:df:9e:c1:76:46:49:95:91:50:a8:fa:91:
dc:41:9e:0b:77:a3:15:94:71:7d:f9:ef:da:2f:a8:
59:d0:be:06:65:42:fa:c3:0f:d3:ce:88:41:f9:05:
a6:c1:d1:19:01:8c:93:3f:68:dc:e7:f3:a0:df:c0:
9c:5e:5d:e5:e4:08:48:ec:cb:5b:b2:31:11:a2:09:
d4:59:17:9b:47:c8:27:86:ec:61:43:97:4b:9b:c8:
50:88:4f:26:b7:b7:0e:1a:7d:a4:f2:e9:88:19:3b:
00:10:aa:56:a3:08:af:3a:2c:52:f6:4b:14:24:f7:
cc:6d:fd:95:25:dc:77:b0:b4:31:82:e4:69:68:c7:
64:46:b7:99:72:de:d0:54:21:30:40:1c:2a:ec:86:
00:ad:a4:ac:11:c7:72:0b:93:28:03:ea:7e:67:6b:
e4:cb:14:6b:42:9e:ea:84:9f:a5:85:90:3f:59:24:
c4:f4:ba:a6:c7:de:2b:bf:7a:43:55:da:6c:2f:69:
14:cc:f1:b2:31:fc:cb:2d:fb:87:39:53:86:3d:2b:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:40:1B:E2:AC:7C:A1:AA:19:79:90:74:80:93:EC:6C:CE:93:4A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9PdAG-KsfKGqGXmQdICT7GzOk0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.103.232.0/24
87.103.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1d:a0:20:a0:c8:7d:5f:be:de:71:19:59:d7:5e:ee:97:a3:
c2:f0:6b:8f:ea:1f:e8:a6:1d:3f:6c:f8:74:24:2c:9a:9a:7c:
48:f2:c7:8c:ce:98:61:40:72:96:3b:4a:01:b5:dc:12:4f:16:
4a:e8:12:58:04:9c:93:82:fe:ee:55:96:81:4e:b0:ae:6e:b6:
80:85:34:b4:e1:62:21:df:ca:7e:29:a8:e1:a1:14:1e:b1:fd:
ab:c5:3d:5a:8a:d7:ac:cb:dc:e8:12:de:b9:0e:8e:4b:75:c4:
37:fb:29:5a:af:8d:cd:f0:ed:17:38:59:aa:bd:4b:43:91:d4:
3c:01:33:6c:eb:81:10:27:fd:cc:de:82:8d:a8:23:5b:01:b3:
45:ef:07:6a:f1:a3:35:12:ac:72:38:05:be:33:52:cd:e2:2e:
81:6e:fd:27:9b:47:e8:82:49:85:81:6e:47:80:92:50:ad:b4:
6a:26:29:94:c4:5f:b9:5c:b5:8f:90:02:5a:dc:04:fe:fc:0d:
08:2f:1c:c7:69:da:90:29:a1:0a:e9:a6:45:fe:39:45:be:e6:
f5:bd:d5:ea:3b:5b:1c:66:ef:7e:67:20:66:6f:36:19:98:a8:
5e:52:ab:2d:52:8a:02:09:cc:16:36:52:26:f9:ef:49:87:c4:
f0:d3:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org