Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/mdPySZhpTTDqAr6zmc3mHwwgkm4.roa
File: mdPySZhpTTDqAr6zmc3mHwwgkm4.roa (raw, json)
Hash identifier: Ppd7P8A0WzYNl9ZQHgnRyUAHtjy4vshWnUHMncdmsis=
Subject key identifier: 99:D3:F2:49:98:69:4D:30:EA:02:BE:B3:99:CD:E6:1F:0C:20:92:6E
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018BFC0360A7DE1AC5D4181EAC251C06FD49
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/mdPySZhpTTDqAr6zmc3mHwwgkm4.roa
Signing time: Thu 23 Nov 2023 11:49:21 +0000
ROA not before: Thu 23 Nov 2023 11:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 87.251.16.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:03:60:a7:de:1a:c5:d4:18:1e:ac:25:1c:06:fd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Nov 23 11:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99d3f24998694d30ea02beb399cde61f0c20926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:63:32:f3:ec:0e:b7:3d:64:e1:f2:5c:6d:
2e:8f:4c:03:fb:17:84:5f:49:c1:32:78:15:1b:d8:
57:e1:d5:d1:c4:c0:78:33:f2:66:0d:dc:82:d1:11:
f8:88:2f:2c:d1:7d:f4:bb:d5:d5:07:0b:f2:89:d9:
e3:9b:1c:68:be:18:68:f3:79:6c:cb:78:0c:e1:b4:
17:58:84:e0:39:ca:88:4e:aa:3c:53:f2:ef:c0:f3:
ec:d5:b9:72:cc:79:cf:95:90:c5:26:25:1d:77:ac:
18:d7:54:9c:8d:e3:57:fe:b5:95:21:8e:fa:c4:0d:
1d:0a:d4:35:01:86:3e:14:65:9f:6e:59:f4:1e:33:
e3:c9:f7:f3:d6:7b:64:41:47:32:93:76:87:d3:52:
2e:13:84:3b:19:73:79:e3:d5:33:1b:a1:2f:64:3e:
9e:84:04:50:fe:04:69:de:e0:dd:62:93:59:66:b5:
5b:57:31:6a:cb:0a:46:d3:8e:27:13:05:ae:66:3b:
79:86:98:a6:ea:82:3c:8f:3b:f8:02:7b:b5:11:f9:
33:29:20:34:af:d3:ff:24:c9:83:9d:f3:90:eb:6e:
c5:e6:af:e9:8b:af:ec:ff:9a:a4:da:0a:3e:93:3b:
0a:74:06:5f:dc:d4:32:28:cb:7e:b3:5f:a7:e4:31:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:F2:49:98:69:4D:30:EA:02:BE:B3:99:CD:E6:1F:0C:20:92:6E
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/mdPySZhpTTDqAr6zmc3mHwwgkm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.16.0/24
87.251.18.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cb:4c:4f:73:95:d4:25:fa:bc:87:56:51:0e:5c:bc:9f:54:
ca:7b:18:ed:31:1b:dc:a1:df:97:82:59:eb:d5:bc:3d:ae:37:
9a:d3:80:db:4d:33:48:53:77:18:8c:b5:d9:60:63:22:c2:0b:
81:ec:61:6e:95:84:47:a2:ee:02:40:58:94:3b:27:43:31:f2:
9e:83:c3:75:b6:56:2f:e6:c2:9e:96:e1:2f:c4:e2:a0:4d:43:
c8:ff:e4:ca:58:18:8f:b3:ca:5b:a4:01:36:37:90:43:53:03:
dc:84:b5:d6:77:2d:7b:55:8e:43:a4:53:67:85:c8:74:7a:80:
ce:b1:b4:9a:62:41:1c:36:0f:d7:9e:57:5e:41:5d:3f:c5:49:
d1:ff:7b:a1:ee:44:89:d8:32:ab:be:eb:c5:bc:56:7f:25:d7:
d3:e9:23:0a:21:72:f3:d0:67:55:14:b1:e5:5e:56:d8:33:f7:
8a:a1:a9:9a:d5:40:47:0c:95:d1:81:64:b1:8e:80:0a:6c:c3:
6c:a4:2d:39:c5:a7:43:17:45:b1:96:1e:eb:b2:fa:f6:3c:ab:
11:41:e7:f2:13:69:10:9d:6f:73:65:e1:8d:5a:4d:b3:53:d3:
78:ee:a7:21:1e:b6:0b:68:76:46:18:0e:0c:f3:42:82:8f:01:
c4:b4:fb:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYv8A2Cn3hrF1BgerCUcBv1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjMxMTIzMTE0OTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWQzZjI0OTk4Njk0ZDMwZWEwMmJlYjM5OWNkZTYxZjBjMjA5MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWBjMvPsDrc9ZOHyXG0uj0wD+xeE
X0nBMngVG9hX4dXRxMB4M/JmDdyC0RH4iC8s0X30u9XVBwvyidnjmxxovhho83ls
y3gM4bQXWITgOcqITqo8U/LvwPPs1blyzHnPlZDFJiUdd6wY11ScjeNX/rWVIY76
xA0dCtQ1AYY+FGWfbln0HjPjyffz1ntkQUcyk3aH01IuE4Q7GXN549UzG6EvZD6e
hARQ/gRp3uDdYpNZZrVbVzFqywpG044nEwWuZjt5hpim6oI8jzv4Anu1EfkzKSA0
r9P/JMmDnfOQ627F5q/pi6/s/5qk2go+kzsKdAZf3NQyKMt+s1+n5DHn6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJnT8kmYaU0w6gK+s5nN5h8MIJJuMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvbWRQeVNaaHBUVERxQXI2em1jM21Id3dna200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/sQAwQA
V/sSMA0GCSqGSIb3DQEBCwUAA4IBAQBgy0xPc5XUJfq8h1ZRDly8n1TKexjtMRvc
od+Xglnr1bw9rjea04DbTTNIU3cYjLXZYGMiwguB7GFulYRHou4CQFiUOydDMfKe
g8N1tlYv5sKeluEvxOKgTUPI/+TKWBiPs8pbpAE2N5BDUwPchLXWdy17VY5DpFNn
hch0eoDOsbSaYkEcNg/XnldeQV0/xUnR/3uh7kSJ2DKrvuvFvFZ/JdfT6SMKIXLz
0GdVFLHlXlbYM/eKoama1UBHDJXRgWSxjoAKbMNspC05xadDF0Wxlh7rsvr2PKsR
QefyE2kQnW9zZeGNWk2zU9N47qchHrYLaHZGGA4M80KCjwHEtPtn
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:51 2024 by rpki-client on console-ams.rpki-client.org