Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/4r5YcpbWYz9lDbpx1xk0kHZnZ3M.roa
File: 4r5YcpbWYz9lDbpx1xk0kHZnZ3M.roa (raw, json)
Hash identifier: EfpsnOh3XW3s0Nn9cRfUiSocqi/2uwyVfkDxvI2tnak=
Subject key identifier: E2:BE:58:72:96:D6:63:3F:65:0D:BA:71:D7:19:34:90:76:67:67:73
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018597DA383545272A5A8383B51C13949341
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/4r5YcpbWYz9lDbpx1xk0kHZnZ3M.roa
Signing time: Mon 09 Jan 2023 18:45:38 +0000
ROA not before: Mon 09 Jan 2023 18:45:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:da:38:35:45:27:2a:5a:83:83:b5:1c:13:94:93:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 9 18:45:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2be587296d6633f650dba71d719349076676773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:22:a3:fa:fb:1b:85:4d:ab:4e:31:86:b7:
1a:6e:d2:6b:64:5a:1a:5c:5f:8a:0d:d2:35:e2:0b:
db:19:90:27:16:5d:c1:f7:14:74:ad:7e:f2:59:c4:
2a:f6:e2:a0:1a:8a:e2:f4:06:65:a1:e8:bf:da:e6:
7a:93:3c:d2:7c:db:2d:de:c9:b4:9e:23:ef:3b:47:
ee:e5:02:8f:2a:b4:84:35:1a:16:c9:cb:9d:33:5f:
fd:d6:22:f1:61:22:6f:6a:c1:04:28:dc:a7:17:f9:
b5:0d:98:1a:b5:15:1a:48:98:79:f5:c0:64:f4:0d:
32:8e:6e:d3:0a:68:de:d6:9b:e3:a6:fc:a6:7e:6c:
d7:66:fd:6b:0c:6f:87:57:f7:04:bb:6e:a4:30:c2:
2b:5e:30:39:9e:1b:35:45:b3:f8:44:3c:84:f3:9d:
90:b2:fd:36:e1:3e:1f:51:c5:48:94:07:9a:d3:2b:
44:ad:a7:5e:17:47:a7:25:1f:48:08:04:07:88:21:
97:a5:94:bc:6a:8d:9c:75:fe:c8:7c:b1:76:e9:72:
4a:b2:54:50:16:9e:8f:e1:43:52:71:dc:9a:24:54:
d5:60:f2:da:6f:f7:c7:79:d2:19:ea:3b:8a:d6:84:
fc:f6:ce:dc:2c:5c:bd:6c:6a:b4:c4:63:35:47:27:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BE:58:72:96:D6:63:3F:65:0D:BA:71:D7:19:34:90:76:67:67:73
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/4r5YcpbWYz9lDbpx1xk0kHZnZ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2d:b2:a9:f4:08:6c:9e:d6:f4:23:a5:84:b5:4d:c3:be:b7:
76:5a:3b:c6:31:cd:27:18:da:f8:43:e0:07:74:02:38:f8:0a:
1a:88:df:14:e1:49:d9:53:8f:98:0e:64:ef:24:d8:b8:98:7d:
ac:a3:dd:e4:84:f1:2d:36:6f:47:19:59:a3:7b:cc:0a:21:7e:
20:07:d6:86:fd:21:9f:9b:6c:7d:82:24:10:39:15:03:55:b9:
61:a4:04:b5:5f:05:c4:c9:1b:39:06:a9:65:85:94:d1:7a:41:
5b:4b:48:16:e3:94:7b:46:b5:88:ad:d8:f3:3b:35:15:9c:a0:
1b:fd:32:93:c8:ba:bf:da:bf:fd:d7:5b:d8:81:c9:11:6b:ff:
8f:89:85:98:9f:0c:0e:4c:3a:5c:7e:51:25:6c:d1:2b:d3:aa:
62:da:b0:81:bf:97:a7:39:dc:d9:38:c8:88:2e:fd:96:f1:34:
a4:48:b0:50:96:f7:97:68:3f:c6:aa:90:27:b5:09:bc:2d:9a:
b8:20:02:39:c9:7b:cd:fc:49:cf:93:63:e6:72:37:e7:95:83:
4f:9c:1b:40:48:61:50:ac:cd:77:ee:64:47:ba:a4:71:d4:99:
0b:13:7a:1d:ed:83:e1:7f:04:dc:11:ba:29:35:1f:73:aa:21:
16:a3:02:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWX2jg1RScqWoODtRwTlJNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMTA5MTg0NTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmJlNTg3Mjk2ZDY2MzNmNjUwZGJhNzFkNzE5MzQ5MDc2Njc2NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2oio/r7G4VNq04xhrcabtJrZFoa
XF+KDdI14gvbGZAnFl3B9xR0rX7yWcQq9uKgGori9AZloei/2uZ6kzzSfNst3sm0
niPvO0fu5QKPKrSENRoWycudM1/91iLxYSJvasEEKNynF/m1DZgatRUaSJh59cBk
9A0yjm7TCmje1pvjpvymfmzXZv1rDG+HV/cEu26kMMIrXjA5nhs1RbP4RDyE852Q
sv024T4fUcVIlAea0ytEradeF0enJR9ICAQHiCGXpZS8ao2cdf7IfLF26XJKslRQ
Fp6P4UNScdyaJFTVYPLab/fHedIZ6juK1oT89s7cLFy9bGq0xGM1RyfqNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOK+WHKW1mM/ZQ26cdcZNJB2Z2dzMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvNHI1WWNwYldZejlsRGJweDF4azBrSFpuWjNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iXMA0G
CSqGSIb3DQEBCwUAA4IBAQBnLbKp9Ahsntb0I6WEtU3Dvrd2WjvGMc0nGNr4Q+AH
dAI4+AoaiN8U4UnZU4+YDmTvJNi4mH2so93khPEtNm9HGVmje8wKIX4gB9aG/SGf
m2x9giQQORUDVblhpAS1XwXEyRs5BqllhZTRekFbS0gW45R7RrWIrdjzOzUVnKAb
/TKTyLq/2r/911vYgckRa/+PiYWYnwwOTDpcflElbNEr06pi2rCBv5enOdzZOMiI
Lv2W8TSkSLBQlveXaD/GqpAntQm8LZq4IAI5yXvN/EnPk2PmcjfnlYNPnBtASGFQ
rM137mRHuqRx1JkLE3od7YPhfwTcEbopNR9zqiEWowLL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org