Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_RNCEZ807VVLKiRRX_1Z7t3Io88.roa
File: _RNCEZ807VVLKiRRX_1Z7t3Io88.roa (raw, json)
Hash identifier: dBckdPNAh6tJ1NPT6ps0vCqwBYYSvS+k3Ak3mhq9Luc=
Subject key identifier: FD:13:42:11:9F:34:ED:55:4B:2A:24:51:5F:FD:59:EE:DD:C8:A3:CF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01877BE50DF22EF45616B4AF835BA0AE7FF2
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_RNCEZ807VVLKiRRX_1Z7t3Io88.roa
Signing time: Thu 13 Apr 2023 18:33:41 +0000
ROA not before: Thu 13 Apr 2023 18:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 87.237.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:e5:0d:f2:2e:f4:56:16:b4:af:83:5b:a0:ae:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 13 18:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1342119f34ed554b2a24515ffd59eeddc8a3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:d1:a0:ec:a3:fa:9f:44:9c:6b:89:ca:6f:
3c:46:6e:81:05:bf:1a:5b:a4:80:37:b0:95:dd:1a:
52:f4:e0:eb:df:a1:c9:0d:85:1b:2f:e3:ab:8e:2e:
32:9e:d7:90:ad:a7:2c:56:3a:d4:8d:96:8e:7b:08:
f0:a1:00:39:cd:3a:b3:b8:57:93:9b:9f:db:23:27:
7b:da:46:42:8d:ae:93:28:3e:ea:75:d0:9c:3f:1a:
76:ca:a5:3d:09:be:08:6a:8e:31:73:2c:dd:9e:00:
b0:5c:b1:68:76:d8:99:d0:16:c0:85:38:33:68:e5:
3c:ec:07:74:65:7d:91:c2:2a:20:b7:54:9a:b0:c9:
4f:a7:78:5a:23:48:a4:67:2c:17:86:ee:96:ad:f2:
9b:ff:87:6b:16:44:17:4c:0a:3a:29:9f:87:54:65:
0d:3d:f2:e8:1d:cb:b2:9d:c9:77:e4:d3:59:31:ef:
66:40:bf:00:4b:c3:aa:45:8d:32:02:8a:9a:63:b1:
ad:d5:53:42:f7:80:b4:4b:3e:fb:9c:d3:50:af:49:
35:ba:70:0a:99:95:26:17:41:58:2c:5d:7b:86:a1:
de:72:39:1c:e7:f1:c9:d7:94:d8:da:8c:f0:1a:51:
aa:0f:51:32:f4:42:17:28:3a:99:6b:22:e2:ea:38:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:42:11:9F:34:ED:55:4B:2A:24:51:5F:FD:59:EE:DD:C8:A3:CF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_RNCEZ807VVLKiRRX_1Z7t3Io88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:23:99:90:87:b6:c7:41:a7:5f:6b:b2:9c:4e:59:45:5a:83:
98:15:dc:96:70:4a:f2:9d:9b:2e:dd:c4:e7:58:61:d7:ce:d3:
18:e4:56:cc:3d:c1:30:99:ab:b1:09:c2:a2:75:f4:1e:42:4e:
1d:ad:88:90:bb:f8:92:2d:7e:ae:e7:e8:13:db:51:21:e8:87:
d2:c8:ae:34:97:18:96:6c:02:fa:bc:c3:8c:34:8a:83:22:1b:
dc:77:69:67:b8:b6:df:4b:38:eb:e8:9d:4f:a0:88:5d:38:65:
23:40:59:f0:e4:94:12:4d:48:b7:a1:f9:f8:8c:ca:c9:98:8e:
69:19:aa:d4:5d:67:90:71:6a:1b:4c:49:02:a7:eb:d6:af:ca:
c3:94:1b:4d:f1:d1:93:34:59:5b:2a:87:32:91:d6:5c:b9:df:
78:86:ef:c5:9d:7d:66:ec:1f:71:36:c5:79:a5:3a:e9:f2:b7:
98:a5:9a:b1:0a:71:08:99:13:d1:a3:c6:61:9f:aa:68:39:27:
78:a1:38:cc:ea:a6:ff:5f:60:79:86:6d:4c:b8:e4:9e:a4:03:
3d:83:d6:12:52:d0:17:68:6c:ed:e8:62:cb:5e:5a:c8:d0:6f:
72:a2:83:91:83:74:e1:9f:ef:e0:0d:39:fe:08:42:f0:6f:26:
f9:85:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org