Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/_9C5D1xRDQ_-l-Q3DUHN_2Iyk_g.roa
File: _9C5D1xRDQ_-l-Q3DUHN_2Iyk_g.roa (raw, json)
Hash identifier: vpqxOSq6VHajxlte1Af19JEnX3DeQxvNG7O6HGo2lgE=
Subject key identifier: FF:D0:B9:0F:5C:51:0D:0F:FE:97:E4:37:0D:41:CD:FF:62:32:93:F8
Certificate issuer: /CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Certificate serial: 0186748681700450DDF9EF8E54130419CEB1
Authority key identifier: E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/_9C5D1xRDQ_-l-Q3DUHN_2Iyk_g.roa
Signing time: Tue 21 Feb 2023 15:10:17 +0000
ROA not before: Tue 21 Feb 2023 15:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212598
IP address blocks: 185.102.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:86:81:70:04:50:dd:f9:ef:8e:54:13:04:19:ce:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Validity
Not Before: Feb 21 15:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd0b90f5c510d0ffe97e4370d41cdff623293f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:63:07:1e:cd:27:31:51:b3:d0:dc:9a:08:
4e:94:94:bf:91:db:a4:a5:a3:93:40:90:17:cc:ed:
67:22:9b:00:18:b2:e1:17:61:f3:d3:ed:3b:04:c0:
d3:0b:ff:eb:f6:c9:02:68:4b:61:4c:ae:1a:80:15:
97:2f:3a:62:a2:b6:b5:40:f0:bb:cf:e8:17:c9:03:
43:6a:fb:16:65:eb:df:b9:56:ed:ea:55:9c:13:9f:
1e:b0:0d:47:ff:bf:32:af:f9:b6:f0:81:7a:02:b5:
8a:5e:75:f8:c7:44:4c:a9:3b:73:4b:11:bb:a1:a9:
77:dc:cc:c2:72:42:0c:04:5e:44:56:0e:55:0a:a9:
3b:63:8d:72:58:99:29:a5:e3:2b:6a:56:41:5a:fa:
4e:35:18:23:45:ed:56:ce:58:3b:cc:22:40:2f:12:
f2:b4:05:a5:f6:b7:de:aa:21:ef:a9:d4:84:08:4f:
b2:64:5c:3c:e5:dd:f1:63:66:a7:b3:b6:9f:67:65:
ad:fc:7d:a8:88:08:25:1d:27:b5:e3:6e:56:6e:b0:
77:3c:a7:08:4b:a8:ef:d1:6f:0d:47:f0:c8:24:9c:
55:e6:c8:2d:ef:d6:d5:50:3f:e0:cf:4d:0d:d5:c3:
81:1d:d4:68:22:0c:b0:1f:fa:a1:6e:79:2f:ab:af:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:B9:0F:5C:51:0D:0F:FE:97:E4:37:0D:41:CD:FF:62:32:93:F8
X509v3 Authority Key Identifier:
keyid:E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/_9C5D1xRDQ_-l-Q3DUHN_2Iyk_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ce:5e:2c:f2:0b:8b:14:73:f1:60:79:13:f3:17:2e:01:3c:
37:05:f4:d2:a7:78:42:a0:2c:1a:12:42:05:ac:80:49:47:00:
31:94:0a:26:39:41:11:b0:1c:05:d0:3d:bd:7e:fb:0d:05:34:
ac:53:e5:e6:bc:ee:c6:b3:d1:a6:d4:ef:65:42:0b:86:16:d7:
61:19:b0:d3:b7:90:31:62:5b:05:e7:a3:98:a8:6a:52:df:70:
c1:39:2b:93:e0:4d:d8:16:6d:8d:f9:0b:6b:5c:02:6f:c4:19:
6f:4f:96:56:c5:26:33:1d:44:fa:f5:05:5a:44:3e:5d:84:d0:
c8:0a:33:fa:74:3b:d3:68:45:bc:74:4b:19:5d:96:9a:bf:3a:
53:ca:aa:a5:76:6c:2b:fc:72:c4:9f:4f:db:15:8d:d2:0a:6d:
85:d4:41:57:c8:d7:a0:df:8e:73:a5:bd:86:79:5e:77:bb:c0:
a5:d0:76:2e:8e:05:df:36:7b:f2:62:a7:0e:c9:c9:99:98:70:
ab:dd:55:43:66:a4:68:12:9c:f7:b4:18:a3:7f:2a:11:64:3e:
40:49:bf:1d:80:2a:f3:7e:d3:9d:a5:3b:c9:ed:0f:64:35:e2:
23:4d:67:b7:dd:c1:0d:ab:12:c7:88:8c:89:28:41:9e:77:52:
e3:8a:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:15 2024 by rpki-client on console-fra.rpki-client.org