Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kUoPuydpGRKqBTt3wc9shK0qcTw.roa
File: kUoPuydpGRKqBTt3wc9shK0qcTw.roa (raw, json)
Hash identifier: n/sIvko5VZrZwhTufy9Bn/bHDsyQx00BG2PFidNALYA=
Subject key identifier: 91:4A:0F:BB:27:69:19:12:AA:05:3B:77:C1:CF:6C:84:AD:2A:71:3C
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AA9DDF49DEA88B8E664772D0D43B49452
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kUoPuydpGRKqBTt3wc9shK0qcTw.roa
Signing time: Mon 18 Sep 2023 19:56:50 +0000
ROA not before: Mon 18 Sep 2023 19:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.251.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:dd:f4:9d:ea:88:b8:e6:64:77:2d:0d:43:b4:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Sep 18 19:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=914a0fbb27691912aa053b77c1cf6c84ad2a713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:1e:37:62:45:60:4e:dc:7c:96:62:79:db:
73:3e:61:b6:5f:e1:d5:86:f4:07:07:b6:d1:2a:8c:
de:86:a0:87:dc:8f:9f:27:12:74:0b:06:8e:37:1d:
4a:1a:5c:e0:96:5f:65:10:7d:db:c8:67:cc:ed:c4:
77:0d:72:c7:90:34:6e:a9:ec:1e:24:7d:e5:30:f9:
e7:6d:67:97:0e:78:12:f2:c9:3e:13:44:26:92:04:
7a:f9:66:69:3e:49:33:7c:a5:c7:db:b0:d4:1b:cd:
c7:99:1a:66:fd:b4:d6:22:65:9c:32:11:41:ce:5e:
df:8e:06:d9:9b:d9:18:72:9e:c2:3d:41:22:05:12:
b5:ef:67:c9:7f:0b:bf:72:66:30:ae:ed:28:21:f2:
9a:9d:06:b4:43:8a:ab:4c:41:f4:f9:47:78:b6:6b:
9c:2e:2a:f1:92:c2:ce:de:b6:c7:4c:40:75:dd:fe:
80:93:9d:37:d4:04:2e:8c:da:c2:00:95:b7:5f:ea:
07:65:50:68:d9:ba:4a:0a:ce:7d:30:65:9f:27:de:
1c:f9:09:55:49:22:4b:40:e9:27:5a:97:8d:6a:e5:
e4:d5:f2:cf:a2:c8:83:3c:be:50:2d:d4:fa:da:ac:
84:cb:99:89:3b:ae:a9:54:9d:1a:49:7a:91:ac:9b:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:0F:BB:27:69:19:12:AA:05:3B:77:C1:CF:6C:84:AD:2A:71:3C
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kUoPuydpGRKqBTt3wc9shK0qcTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.20.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f9:e7:9d:b7:d3:53:b9:bd:55:de:3c:75:19:f0:47:fa:a9:
58:8b:62:be:45:bd:f2:53:be:fd:51:3d:23:a2:fd:c1:48:93:
7c:3e:07:6b:3f:1e:a5:3a:a4:4f:20:ad:ae:5f:68:61:3c:ae:
74:87:50:57:28:59:04:f0:f6:c4:69:47:88:a8:d2:6a:f0:84:
85:98:06:aa:b4:ce:35:fe:60:2c:1e:d7:2f:f4:45:9d:05:e9:
b1:6e:00:5d:1a:c5:16:bc:76:81:dc:5b:76:20:8d:1c:63:78:
b0:90:82:12:47:7f:cf:89:b0:8e:fd:56:04:9a:c4:21:d9:f6:
84:1d:32:7a:18:d1:b5:78:23:e2:0a:2a:59:22:47:46:07:47:
82:59:dc:d8:59:2e:64:3b:db:3d:ba:ec:51:64:2c:f2:88:ec:
7f:94:f1:40:00:3b:34:9d:d4:53:3d:75:ea:5b:ff:3b:44:7d:
ec:63:85:85:c8:fe:b1:f4:d1:19:1f:21:67:71:05:c2:35:19:
a4:32:11:d3:4b:f3:52:b2:4a:3c:bb:ac:35:cd:33:52:9d:f3:
96:df:94:2b:11:13:17:a4:ce:d6:b6:f3:57:af:37:c3:aa:c4:
cd:c5:0c:2b:eb:c6:ec:80:20:79:ef:9f:2a:66:8d:9c:98:a8:
23:84:41:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 01:40:58 2023 by rpki-client on console-fra.rpki-client.org