Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/p3T3Zg326MZ1Ux82pL-FEkK_SVs.roa
File: p3T3Zg326MZ1Ux82pL-FEkK_SVs.roa (raw, json)
Hash identifier: ylV+lXWad8M5fJ3SZ0IX8tW2KT6d12tQnDv7WNkSisY=
Subject key identifier: A7:74:F7:66:0D:F6:E8:C6:75:53:1F:36:A4:BF:85:12:42:BF:49:5B
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AEDEBAC9273D1611F0F4C439B76272D34
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/p3T3Zg326MZ1Ux82pL-FEkK_SVs.roa
Signing time: Mon 02 Oct 2023 01:05:59 +0000
ROA not before: Mon 02 Oct 2023 01:05:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.251.17.0/24 maxlen: 24
87.251.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:eb:ac:92:73:d1:61:1f:0f:4c:43:9b:76:27:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 2 01:05:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a774f7660df6e8c675531f36a4bf851242bf495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:ad:f0:bd:92:17:ab:9d:59:fd:54:ff:ab:
7e:41:1a:1e:7a:33:c4:cd:c9:c3:73:94:33:af:ac:
0f:ba:0a:0e:12:58:4a:a3:40:9f:46:b8:e7:77:6c:
b8:ad:a1:98:ef:da:bc:05:4b:de:12:55:d9:fa:c4:
1e:e9:b9:16:8f:81:ca:d6:20:b7:68:80:f8:78:d6:
20:b4:89:56:59:6f:f3:b4:66:e5:25:55:bc:0b:72:
62:a6:f0:f8:d9:53:9c:22:51:57:27:b1:f3:4d:d9:
a7:c6:43:87:db:95:13:94:40:3c:d2:82:6d:ac:96:
1b:f0:f1:a4:57:90:bd:f1:4f:bc:a9:6a:c0:3f:be:
5c:c1:8d:c3:09:20:a5:30:1d:78:f5:ae:62:f8:d3:
f1:4b:9e:ae:b9:e3:dd:73:c0:cd:3f:78:73:d4:89:
bd:bc:42:08:e2:9a:87:64:fc:e7:c9:b1:c3:38:d0:
3f:2f:70:2b:32:bb:40:ce:cf:74:1c:9d:fc:f7:1b:
a5:c4:86:7c:68:72:fa:f4:b1:28:38:7b:9c:12:2b:
44:bc:db:6b:4b:9c:c3:05:20:61:30:9a:80:d7:cf:
12:dc:0d:1c:21:17:6a:b6:0e:db:2d:5c:b9:8e:f0:
c3:4d:32:ef:b6:dd:2f:5b:1d:87:e5:68:ab:bf:07:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:74:F7:66:0D:F6:E8:C6:75:53:1F:36:A4:BF:85:12:42:BF:49:5B
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/p3T3Zg326MZ1Ux82pL-FEkK_SVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.17.0/24
87.251.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:27:4c:20:9b:d2:d4:ef:34:61:1b:f9:c1:09:55:96:5f:e4:
26:48:18:be:48:73:0f:58:0a:18:50:1f:54:87:7d:33:c9:03:
5b:f4:1c:85:4e:b7:12:b1:99:57:26:6c:90:b1:e3:d9:41:2f:
f4:a8:66:cc:26:78:51:8a:c2:c1:fb:b1:2d:c4:00:2e:e2:ec:
3e:4f:64:67:73:b4:a5:6f:34:98:71:61:a1:d2:bc:87:78:58:
ec:bd:e8:b9:53:ff:d3:dc:4e:99:85:27:a0:66:a4:0a:f9:ab:
8b:46:3d:e0:50:0e:9e:85:9c:8b:b1:a1:04:61:c1:09:6e:dd:
52:77:00:0a:d9:39:a3:c3:47:af:52:80:e0:2d:5f:eb:d3:f6:
db:e3:e1:87:0c:8a:80:44:21:a8:14:bd:48:18:77:5f:a6:d2:
69:94:fb:99:61:6d:18:67:7a:02:01:0a:fc:52:a9:38:a0:6c:
d4:55:ea:d7:1b:e2:ad:fb:5a:61:93:60:71:ec:a0:a2:e2:eb:
e8:64:ff:7f:82:e1:48:5c:c3:14:59:a4:d4:53:5d:62:57:b2:
41:50:eb:51:d2:04:71:55:97:5a:79:31:57:4c:75:3f:ed:c6:
cb:65:d6:fb:60:1a:32:f8:83:ec:3f:7e:1b:b7:10:dc:46:78:
34:2e:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 00:30:15 2023 by rpki-client on console-fra.rpki-client.org