Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4CAPg0WO2dPws_R3qQ_nAKwMecs.roa
File: 4CAPg0WO2dPws_R3qQ_nAKwMecs.roa (raw, json)
Hash identifier: 5o6cmB+/lUzIjQtZds4iehF/N+PYUhF6fJiMlAAnGY0=
Subject key identifier: E0:20:0F:83:45:8E:D9:D3:F0:B3:F4:77:A9:0F:E7:00:AC:0C:79:CB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D8468B0EE02BB8DD267F564B0945
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4CAPg0WO2dPws_R3qQ_nAKwMecs.roa
Signing time: Tue 02 Jan 2024 00:31:09 +0000
ROA not before: Tue 02 Jan 2024 00:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 87.237.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d8:46:8b:0e:e0:2b:b8:dd:26:7f:56:4b:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0200f83458ed9d3f0b3f477a90fe700ac0c79cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:a8:91:6f:bc:0e:71:db:c3:bf:f1:7d:40:
e1:3e:46:d5:f8:68:a1:18:19:1a:9e:00:a6:03:8b:
4f:27:e0:7d:da:3b:3b:85:1e:4e:dd:8f:e6:54:11:
b3:23:02:3b:fd:47:51:4b:51:06:1f:07:34:d2:f0:
6e:7b:50:f6:de:fa:18:2c:a5:d8:59:0c:ef:73:46:
5b:e8:4d:29:aa:6b:ad:e5:17:5a:51:a0:08:31:38:
30:83:39:77:27:36:4a:ad:36:56:1f:70:8d:92:63:
7a:c5:8d:4e:1d:79:34:5d:32:6c:1d:6c:57:16:a5:
52:5c:14:c4:5d:8f:8b:e7:9b:12:4c:34:0c:64:d7:
c5:12:ab:36:ac:ad:06:2f:ec:1e:de:da:2e:e6:71:
fd:6c:55:6f:3d:32:73:75:98:27:5f:2b:41:e2:30:
5c:81:84:c7:6e:d9:e1:00:2b:98:34:b7:47:9a:11:
53:6d:10:b5:75:85:9f:6f:5d:88:25:4f:d2:25:1a:
c3:84:9f:c0:f8:69:8e:8c:ab:c7:14:76:6f:d0:76:
0a:ec:7d:ed:26:59:8a:4a:04:d5:65:2d:62:b7:d3:
da:6e:f6:ab:ba:32:d8:5b:7b:ff:e0:02:93:c6:78:
39:2b:b0:35:61:60:ae:7e:31:04:d4:09:7b:03:66:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:0F:83:45:8E:D9:D3:F0:B3:F4:77:A9:0F:E7:00:AC:0C:79:CB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4CAPg0WO2dPws_R3qQ_nAKwMecs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c3:02:8c:cb:30:39:d8:a0:9d:c5:c2:e1:d2:4b:23:37:07:
96:7d:4c:00:fc:f0:ba:da:9f:fd:e1:be:1e:b0:28:53:f8:e9:
a4:98:18:1d:7d:e5:1d:b2:89:a7:cd:0d:8f:14:26:9b:9f:8b:
63:6a:27:0c:ef:17:ec:ce:56:36:b8:f1:de:f7:35:7f:56:f3:
28:62:0f:83:2d:a7:d4:5e:4b:87:5f:db:4f:c6:45:5b:81:2a:
89:85:62:6c:b7:e9:a6:c0:3c:3a:f1:d0:85:51:b2:5a:4b:5e:
5c:3b:c7:b7:e9:44:56:3c:35:94:f7:d8:55:d3:94:85:30:84:
bc:bf:2e:fb:d3:5a:4e:6d:0b:2a:75:c3:ff:2d:e7:a4:03:e3:
31:d9:34:cf:d2:15:25:91:60:92:d3:c0:21:be:cb:cd:56:ff:
77:c4:ae:fa:6e:cf:f5:6a:8a:de:c3:b8:20:4f:94:1e:28:42:
fd:eb:bc:df:6f:5c:75:93:8c:93:52:33:44:d8:a2:f5:03:cd:
f9:76:b7:83:c5:69:77:8b:c8:60:af:fb:eb:3a:dd:fe:03:f2:
b3:17:12:e3:e1:6a:88:b1:b0:2d:c6:1b:cf:64:1a:ef:dd:88:
1c:07:45:05:d6:ea:fa:8c:3b:6b:a6:f6:bb:dd:1f:c9:b1:d6:
6e:dc:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org