Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/34xJ_7oGoRGT3j8-jRclfZrB638.roa
File: 34xJ_7oGoRGT3j8-jRclfZrB638.roa (raw, json)
Hash identifier: isdwq0vIMMin/dXJQIlhO3O7Aw/99rF0FPP++LhxjKA=
Subject key identifier: DF:8C:49:FF:BA:06:A1:11:93:DE:3F:3E:8D:17:25:7D:9A:C1:EB:7F
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB66C370736673683B61DB15B25FE3
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/34xJ_7oGoRGT3j8-jRclfZrB638.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.138.0/24 maxlen: 24
87.248.139.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 19:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:66:c3:70:73:66:73:68:3b:61:db:15:b2:5f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df8c49ffba06a11193de3f3e8d17257d9ac1eb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:e5:bc:ff:82:db:33:e3:f0:c6:05:8c:27:
99:8d:34:2f:cb:fd:19:6b:e2:cd:4b:58:00:09:b0:
78:5e:3a:96:56:42:2f:a6:00:2b:76:65:fe:40:ee:
89:ec:93:a2:02:a1:57:f4:a6:da:34:95:40:4d:5f:
bf:87:de:e8:37:2b:48:b5:c6:68:b4:27:21:08:b2:
57:1f:c5:71:23:ab:0f:c2:7c:65:8b:78:88:eb:fd:
47:18:e4:2f:87:2b:e3:9b:32:e0:a0:74:9c:76:f6:
12:bd:4f:38:83:fa:12:1b:f5:d8:1a:e2:c3:3d:68:
1b:78:85:f5:e9:79:a1:c8:fb:21:10:14:d2:d6:2b:
b7:de:77:5a:9e:a7:78:dc:07:b9:33:b2:d7:8c:68:
48:11:6e:d6:b6:fe:8c:56:0c:0e:a6:ac:77:c4:08:
53:f3:e3:d4:06:eb:a6:c6:e4:bb:ff:61:75:f3:0d:
1b:65:90:ce:c1:c1:f0:a6:dd:b0:53:6e:65:0f:51:
85:6b:40:02:cc:1b:cf:0f:31:97:bd:b8:4e:64:08:
1f:aa:51:2e:b6:55:9a:40:de:ba:58:ea:b8:a7:07:
ec:bd:a4:48:cb:72:af:69:4c:55:90:b7:4c:6a:34:
8f:3f:c4:ce:55:40:d2:d5:12:9e:8a:56:ad:2f:ba:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:49:FF:BA:06:A1:11:93:DE:3F:3E:8D:17:25:7D:9A:C1:EB:7F
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/34xJ_7oGoRGT3j8-jRclfZrB638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0-87.248.139.255
87.248.150.0/24
87.248.152.0/23
87.248.155.0-87.248.156.255
Signature Algorithm: sha256WithRSAEncryption
88:04:a5:36:3a:34:95:5b:a5:e6:a0:7a:d5:08:75:76:ab:c5:
f2:a3:e0:d4:7f:97:68:27:c6:ef:0d:1e:6f:b4:ab:0c:ca:ac:
9e:2f:e5:43:27:65:2a:d0:7b:a8:19:d4:41:6f:17:6c:44:89:
b0:e8:81:a5:9c:3c:fd:aa:b0:e1:77:7a:5d:08:34:59:d4:7d:
89:55:59:c5:13:99:f7:64:b7:d2:69:48:19:27:d4:4c:f4:7e:
ba:c2:57:d0:dc:81:7a:d7:c1:da:3b:66:23:cf:79:1d:6c:39:
d4:e3:6b:c9:8b:00:30:5f:5f:00:0d:d7:41:50:b4:e7:24:d9:
73:f2:c6:4b:f1:0a:8b:f7:60:23:9d:48:6c:cf:8e:56:93:44:
91:76:12:b1:42:f2:77:06:0e:78:5d:b4:c5:a9:92:41:02:06:
e1:14:b9:f0:d4:ff:b3:c5:98:92:1e:5a:cd:76:15:e2:d9:8a:
d4:e9:57:5c:e9:d1:37:cd:c4:07:d9:23:cd:01:bb:33:ea:72:
37:c9:28:8b:58:85:28:6e:d9:42:b5:3d:4a:ce:33:23:c2:19:
68:03:3e:09:54:58:61:ac:f0:a3:59:75:11:57:30:1c:c3:e8:
51:79:e8:27:f6:11:22:99:5d:4b:1a:2f:e8:f4:78:d9:26:9f:
08:07:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 22:08:31 2024 by rpki-client on console-ams.rpki-client.org