Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/FqDIAzzXy9Xt7vBVbne3P1t8S7Q.roa
File: FqDIAzzXy9Xt7vBVbne3P1t8S7Q.roa (raw, json)
Hash identifier: Ujab1F3huJezLMY0/GTl1wlrRh70B2Psr2ONTjmTFU8=
Subject key identifier: 16:A0:C8:03:3C:D7:CB:D5:ED:EE:F0:55:6E:77:B7:3F:5B:7C:4B:B4
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018BAC9AF4CAF7DAF9D71A8B007F5B3374A2
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/FqDIAzzXy9Xt7vBVbne3P1t8S7Q.roa
Signing time: Wed 08 Nov 2023 01:45:18 +0000
ROA not before: Wed 08 Nov 2023 01:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.251.0.0/20 maxlen: 24
87.251.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:9a:f4:ca:f7:da:f9:d7:1a:8b:00:7f:5b:33:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Nov 8 01:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16a0c8033cd7cbd5edeef0556e77b73f5b7c4bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:1f:f5:8e:b8:7f:42:eb:bf:bf:3f:a6:f4:
49:14:e8:a0:1d:52:66:62:fb:b0:e2:fa:3f:b3:cd:
4a:03:e6:bb:00:1a:97:16:8b:23:fd:a8:2f:ae:71:
f2:8f:7b:b1:3a:1f:50:19:50:ca:3d:27:42:15:a1:
99:a7:16:21:4d:51:69:a5:11:3b:f1:2f:17:fd:fe:
7e:5d:22:7e:12:19:ac:90:e2:5f:92:cf:9a:8c:30:
c5:9b:20:5f:32:fe:89:8a:cb:49:e4:83:e4:c0:db:
c2:b5:3a:18:67:17:e7:7e:94:76:4e:eb:30:9e:7f:
90:e2:a7:75:3f:f6:88:8d:9e:4a:67:c5:fa:12:f5:
15:f4:37:6c:47:9f:a6:0b:3d:b2:1a:52:9c:12:74:
de:e2:72:df:6b:ca:41:71:30:cc:75:72:eb:7c:31:
6e:6e:19:27:44:bc:9f:a0:35:fd:e6:e1:6d:0d:71:
18:a2:8c:1c:a8:5c:f7:c1:ca:20:91:5c:31:20:9c:
88:a0:ba:a6:a5:7b:21:81:f9:df:75:b6:c4:fe:5a:
fb:03:36:fa:e9:0d:68:09:b8:8a:41:a2:15:25:88:
21:78:0a:ac:f4:17:70:b3:91:91:7f:2f:3a:f1:bc:
37:19:c9:48:a3:d8:9d:5c:bd:d1:93:1b:91:76:7d:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:C8:03:3C:D7:CB:D5:ED:EE:F0:55:6E:77:B7:3F:5B:7C:4B:B4
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/FqDIAzzXy9Xt7vBVbne3P1t8S7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0-87.251.19.255
Signature Algorithm: sha256WithRSAEncryption
69:eb:f0:17:5f:b6:14:c1:66:22:ae:8d:5d:b3:0f:ff:04:36:
e4:98:37:a9:44:5d:55:85:a0:01:81:f0:96:21:d6:d6:59:2f:
28:48:2f:8d:aa:7b:ab:d6:41:60:b0:3c:c9:c5:78:3e:6a:36:
48:59:3d:4a:67:49:dc:79:a1:c9:18:ad:97:c6:ed:10:e1:28:
ad:40:94:18:90:9d:43:b3:5c:fb:4e:94:53:2d:8b:10:76:68:
54:58:76:e9:25:ba:ea:27:53:aa:02:f3:5e:93:ef:cc:f0:85:
e0:c7:2c:85:31:10:59:3b:e5:4e:bc:67:a1:cb:2d:03:e7:5c:
9b:2f:29:73:8f:e3:ca:1a:5d:ba:1e:4b:94:a8:c7:0d:e0:21:
21:54:cd:eb:71:56:34:2e:ed:1d:ac:32:eb:bb:f7:04:22:d6:
82:43:a7:3c:4e:f5:80:f1:78:4f:f0:bc:6b:7e:8f:20:0c:af:
aa:4a:c7:ff:c4:33:40:12:80:1a:14:87:20:47:e1:84:30:d7:
94:1e:f0:6d:3e:67:0e:ef:28:a1:8a:34:7c:dd:ee:1d:0a:95:
48:6a:b0:03:97:c4:0e:4d:a5:01:03:b1:c3:41:23:31:83:72:
cd:cc:b0:38:11:af:13:89:c2:21:f0:59:e8:6c:47:1d:bb:bf:
d7:bf:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 02:31:25 2023 by rpki-client on console-ams.rpki-client.org