Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kilz4fVqhHaxI5e4hl7ZJisiauo.roa
File: kilz4fVqhHaxI5e4hl7ZJisiauo.roa (raw, json)
Hash identifier: z2jV3gYhFoasXrUf6NFd5NR471jS1MWrBZCK4SatYlM=
Subject key identifier: 92:29:73:E1:F5:6A:84:76:B1:23:97:B8:86:5E:D9:26:2B:22:6A:EA
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AEDEBAD29EB4E945AA28BB65CCD2AE40C
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kilz4fVqhHaxI5e4hl7ZJisiauo.roa
Signing time: Mon 02 Oct 2023 01:06:00 +0000
ROA not before: Mon 02 Oct 2023 01:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 87.251.16.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:eb:ad:29:eb:4e:94:5a:a2:8b:b6:5c:cd:2a:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 2 01:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=922973e1f56a8476b12397b8865ed9262b226aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:d3:d9:de:e9:e5:15:e4:da:31:3c:76:7c:
aa:6f:4b:3d:ed:25:03:23:fe:55:f9:f9:f5:4e:bd:
fd:53:4b:b1:6e:b3:97:59:9b:69:b0:fe:45:f5:60:
4d:97:11:36:00:1b:95:70:51:ed:af:04:65:6e:3f:
bb:a6:7f:44:9d:fa:67:f4:13:db:78:b9:3d:fb:1a:
65:53:1e:fc:ae:26:c4:1b:a0:d6:6f:3f:ba:a2:9b:
2e:91:d7:18:44:4e:87:5d:4d:91:e2:01:1e:a4:c2:
82:c7:80:8c:d8:72:05:8c:86:6e:68:cb:1b:f9:a0:
f4:f2:6a:b4:72:f7:d8:5f:12:ed:e1:a3:97:1c:6a:
42:b4:25:86:40:d6:53:7a:99:0e:a5:39:22:81:e2:
13:c0:bb:3a:ff:6c:3d:83:a2:74:30:62:49:63:48:
bd:45:09:05:28:9b:93:d0:15:41:53:c8:36:4c:27:
79:a7:36:f9:42:09:f4:6f:3d:b8:c7:b5:af:75:60:
86:8a:be:34:fb:0a:ee:9d:2d:a3:ea:79:34:c1:e4:
2d:e7:3b:a0:0f:66:e7:58:e5:e1:4b:58:9b:40:1a:
89:5e:04:f8:0d:b6:15:92:29:31:d7:9e:f1:e8:19:
fe:ae:17:bc:c8:39:64:50:2d:99:1b:b2:03:2d:b9:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:29:73:E1:F5:6A:84:76:B1:23:97:B8:86:5E:D9:26:2B:22:6A:EA
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kilz4fVqhHaxI5e4hl7ZJisiauo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.16.0/24
87.251.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:04:58:91:32:fa:c0:ce:25:93:78:55:9c:3d:9a:df:40:80:
75:90:2d:24:86:8a:6a:0e:25:c0:51:c9:f9:9f:55:4a:f3:49:
ec:1f:85:5c:41:44:6f:06:1a:88:3a:70:c3:b7:df:9b:c6:b3:
cb:a7:4c:c4:31:68:b4:32:71:1e:9b:75:f9:6e:82:b0:09:19:
1d:52:af:54:7a:5b:96:85:60:44:ec:99:48:fb:ac:d0:f4:f0:
9c:5d:11:d4:d9:07:88:e2:21:52:6f:71:18:f6:fe:65:78:f0:
12:38:89:de:40:ff:83:9d:e1:16:ac:dd:1b:59:09:77:0c:ab:
ae:fb:6e:6d:79:18:22:5c:0d:45:48:d6:39:65:2b:11:0b:08:
14:24:33:00:29:f6:7a:a7:50:21:6d:48:5d:c1:4d:99:19:41:
60:db:d1:3e:56:63:e7:95:fe:df:8b:c2:ac:56:fd:b6:e3:c0:
d7:d4:0d:e9:cd:a4:f1:d2:31:b2:80:e9:ea:0c:e6:de:5e:37:
35:95:b8:c1:84:fc:8b:fe:88:d7:04:5e:aa:d4:02:ee:22:15:
66:80:e9:3c:fe:4b:af:b1:2f:13:96:8e:f3:25:1b:50:0a:24:
31:f3:5e:5e:57:e8:a3:78:22:76:a9:39:06:47:f0:95:b5:6e:
43:55:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 02:32:21 2023 by rpki-client on console-fra.rpki-client.org