Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/j7VWwpTDOJQ-r8qpCGkn4uVqSRc.roa
File: j7VWwpTDOJQ-r8qpCGkn4uVqSRc.roa (raw, json)
Hash identifier: OcQzOGdrdT4sS5wjdd2aIVteGKU5IUEsCOifSOUYu1w=
Subject key identifier: 8F:B5:56:C2:94:C3:38:94:3E:AF:CA:A9:08:69:27:E2:E5:6A:49:17
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0185729ED1A1C42E968076B134BBFB94CCD8
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/j7VWwpTDOJQ-r8qpCGkn4uVqSRc.roa
Signing time: Mon 02 Jan 2023 13:14:48 +0000
ROA not before: Mon 02 Jan 2023 13:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 87.251.0.0/23 maxlen: 23
87.251.4.0/23 maxlen: 23
87.251.10.0/23 maxlen: 23
87.251.8.0/23 maxlen: 23
87.251.14.0/23 maxlen: 23
87.251.12.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d1:a1:c4:2e:96:80:76:b1:34:bb:fb:94:cc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 13:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb556c294c338943eafcaa9086927e2e56a4917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ab:41:d9:6c:21:a1:e5:2e:d2:f8:2f:a9:d6:
11:d0:96:52:22:a0:53:ff:34:3c:cf:91:bb:c6:74:
2f:26:ac:67:b0:82:5c:ea:c7:8d:82:78:4d:f2:38:
8a:3b:a8:c2:f3:78:bd:d5:08:7f:91:1c:24:4e:00:
cf:4e:82:ec:77:5f:61:7f:08:13:f3:b0:11:65:e8:
68:b7:a0:81:20:5e:ee:1f:cc:43:41:34:17:94:ca:
05:22:9e:3c:cc:87:2b:9a:58:b6:44:8f:60:9a:b9:
3d:d7:fd:f1:42:c5:6e:c2:c3:a0:49:f3:c2:d7:a7:
c3:2f:03:0d:0c:74:ee:8f:4d:82:6a:f2:51:03:75:
1e:be:1a:12:6e:07:4f:ae:4b:35:38:01:d6:42:d9:
66:56:a2:f1:e9:ee:f9:29:a9:14:db:25:f5:82:29:
2a:23:12:76:72:a2:5e:54:5e:bd:be:38:99:71:b7:
9c:88:9d:4f:db:3d:36:98:12:36:43:68:ff:a5:2d:
91:b2:d2:83:36:43:19:fe:b7:47:ad:8e:ba:61:75:
67:62:28:c3:2c:3d:ff:9c:22:ad:19:0f:80:13:d9:
9a:f5:e9:57:2c:26:26:e0:a1:3c:17:64:47:3f:d9:
29:0e:98:26:1f:a9:67:5c:1c:8b:ef:5a:1b:5e:b1:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:56:C2:94:C3:38:94:3E:AF:CA:A9:08:69:27:E2:E5:6A:49:17
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/j7VWwpTDOJQ-r8qpCGkn4uVqSRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0/23
87.251.4.0/23
87.251.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:2c:c1:8a:09:67:44:61:20:8d:15:4c:71:02:8a:4b:cf:7f:
00:78:cd:b3:a1:da:8c:7c:e2:1c:88:54:70:a9:dd:7b:84:08:
54:df:da:d8:90:20:9a:f4:5c:bb:75:d0:09:9d:ee:f1:03:41:
81:3f:da:a2:15:0b:5e:d4:35:92:a4:02:63:71:3a:ce:46:cc:
27:68:74:ce:78:d2:5f:20:bd:9b:b9:96:5c:8b:ae:2d:66:71:
00:25:53:7b:cc:2a:0f:95:65:0c:24:99:83:2e:f4:cb:39:a7:
39:0d:f1:80:c5:bf:50:3b:b1:40:f2:a2:83:c4:59:8c:e8:ee:
8d:63:09:96:8e:2d:ec:e2:40:9a:c3:1f:8b:19:eb:6c:1c:c5:
24:a9:0c:fc:94:d8:20:d4:7d:34:05:8d:fd:76:29:fc:f0:cb:
4d:4c:a6:ed:9b:15:0c:1a:f1:ef:6d:2c:33:d7:5a:3e:55:1e:
48:88:2d:2f:83:ae:61:24:48:a2:6e:22:50:8f:ae:ed:82:9b:
8d:d4:87:4c:92:07:e9:ff:5c:67:30:35:bf:9b:c8:51:94:13:
31:a2:63:8b:12:56:79:22:33:06:0b:d5:2d:8c:d9:a6:9e:6a:
7a:44:d1:50:b4:6c:0b:ee:c1:03:13:6d:4b:d6:ac:01:58:5a:
9c:4f:95:84
-----BEGIN CERTIFICATE-----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 at Sat Nov 4 23:16:33 2023 by rpki-client on console-fra.rpki-client.org