Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Y7bZ1c0ryKn1aZBk9tc1X1orKbg.roa
File: Y7bZ1c0ryKn1aZBk9tc1X1orKbg.roa (raw, json)
Hash identifier: 99o1Yb8xKatio2X6MB3c5/srgvj3KdPha/weomv9cO0=
Subject key identifier: 63:B6:D9:D5:CD:2B:C8:A9:F5:69:90:64:F6:D7:35:5F:5A:2B:29:B8
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018B9C7F64880BFA769B96CB1536A22A07CD
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Y7bZ1c0ryKn1aZBk9tc1X1orKbg.roa
Signing time: Sat 04 Nov 2023 22:41:16 +0000
ROA not before: Sat 04 Nov 2023 22:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 87.251.14.0/23 maxlen: 23
87.251.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9c:7f:64:88:0b:fa:76:9b:96:cb:15:36:a2:2a:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Nov 4 22:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63b6d9d5cd2bc8a9f5699064f6d7355f5a2b29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:d9:e2:1b:e8:46:b2:76:cc:fa:93:e5:13:
a1:18:9b:13:e7:b9:86:f0:3b:6c:8d:8f:bc:fd:07:
9a:59:3c:09:57:35:8c:12:c6:d3:82:77:45:d3:64:
e4:e9:cb:3e:10:54:ed:b0:82:fc:b3:b1:f6:7b:88:
43:9c:c5:05:4b:09:00:d6:08:e9:b3:25:48:8e:2f:
33:0e:a6:91:b7:f7:37:83:ac:b4:5c:5b:38:c7:1d:
11:74:90:62:eb:ed:4a:78:df:18:01:df:02:a5:d7:
20:c7:1a:64:2d:22:ea:8f:9b:80:eb:66:21:df:74:
c0:17:fe:5b:57:de:13:f9:66:ed:fc:9f:19:a5:3b:
ce:a6:d3:c6:28:dc:79:50:89:34:85:7e:89:c3:41:
7f:fc:c5:fe:e0:31:a5:6b:df:da:6e:bf:fa:3a:68:
5b:32:5c:d3:5f:4e:d3:b3:79:c2:29:fc:6e:cc:37:
5a:5d:e3:1b:65:69:7b:f4:5e:f7:73:36:ae:29:58:
82:08:d9:81:e5:03:b9:a3:4d:df:76:fe:bb:9d:db:
53:bb:a8:07:2b:47:48:57:b8:78:77:ba:36:03:24:
85:78:ee:20:d9:27:e6:5d:96:64:f8:da:0c:f3:d1:
3d:e3:73:62:68:e7:12:af:89:40:db:20:57:e2:d1:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B6:D9:D5:CD:2B:C8:A9:F5:69:90:64:F6:D7:35:5F:5A:2B:29:B8
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Y7bZ1c0ryKn1aZBk9tc1X1orKbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:67:08:1f:3f:9b:9b:dd:1e:40:c2:48:2d:08:68:71:d7:22:
96:50:e4:a2:55:0a:95:f1:d3:f1:4b:ee:c9:d2:58:d8:03:9d:
9d:3b:2e:e8:f1:b1:95:c7:ab:db:e6:61:7d:43:a4:31:ca:92:
66:d2:06:ad:da:0e:c8:65:17:0b:70:27:d6:56:46:74:57:55:
07:01:81:99:c7:1e:29:d4:fd:dc:06:22:27:e4:ef:85:60:ac:
ab:4f:56:ab:ae:90:83:a6:c0:ec:eb:c6:7f:1b:a0:90:f8:ac:
f9:28:7d:87:67:64:d8:31:53:a6:79:8d:01:83:b1:d3:28:b8:
a0:7e:e8:c2:b3:a2:b7:bd:e0:58:44:37:6a:71:fd:95:2e:e3:
1d:bb:8f:88:57:37:85:04:aa:cd:74:30:dd:cd:41:54:2c:8d:
d1:12:e9:e7:03:9a:75:b5:60:54:d5:6b:70:38:8e:11:ae:78:
1e:15:e7:43:8f:69:c0:1a:df:51:a1:20:06:fb:49:07:cf:67:
7a:bf:3a:b1:ad:c3:4a:c0:02:b3:e6:28:a6:30:06:55:8b:dd:
19:55:64:e3:8f:f0:17:c1:1c:8e:b4:4e:df:6f:8a:fe:c0:da:
b2:12:9c:6c:0c:69:3f:fe:43:75:cc:70:a0:d7:33:33:97:03:
34:75:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org