Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/8Zl0YbqRnK0GcctMs2Vjwy-B2Zs.roa
File: 8Zl0YbqRnK0GcctMs2Vjwy-B2Zs.roa (raw, json)
Hash identifier: 95wdmgdMw4TG2RwKbQOFxmQV5xGeBvOXW+s/JwJXVcI=
Subject key identifier: F1:99:74:61:BA:91:9C:AD:06:71:CB:4C:B3:65:63:C3:2F:81:D9:9B
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A52FD92E0334BC97B64D79A81DB90
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/8Zl0YbqRnK0GcctMs2Vjwy-B2Zs.roa
Signing time: Sun 01 Jan 2023 08:54:42 +0000
ROA not before: Sun 01 Jan 2023 08:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 87.248.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:52:fd:92:e0:33:4b:c9:7b:64:d7:9a:81:db:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1997461ba919cad0671cb4cb36563c32f81d99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:85:b5:f3:8c:98:f2:16:2f:c1:23:13:d2:
8e:0c:b0:e3:2a:6b:77:c4:c3:50:86:aa:3e:f5:16:
f0:57:4c:3d:0b:b3:5f:c6:10:81:ff:36:50:9f:95:
df:88:25:62:0c:71:80:1a:6e:d2:02:68:33:cf:f2:
4c:8e:25:b5:06:13:61:ff:4b:e1:b3:f1:aa:74:10:
c5:f7:46:24:07:19:d0:44:77:c0:c0:c3:92:78:74:
8d:bc:7a:f4:1b:ad:ef:19:8a:11:71:bc:be:d0:c4:
41:08:0b:40:39:8c:6d:15:24:1c:57:80:6f:af:fa:
d7:0e:7b:ed:45:f3:de:b5:f4:ae:33:c4:92:bd:b1:
52:64:99:09:71:9b:51:9a:a2:fb:51:42:e3:eb:97:
5b:08:81:7b:33:71:85:e6:b0:7f:9a:d4:a9:21:0b:
4c:e7:16:9c:bd:c2:7c:db:a5:f5:f0:ef:8e:fb:ba:
b9:3d:e1:83:79:16:10:a8:18:a4:04:e6:3d:d9:f4:
a2:e6:6d:eb:60:5e:48:05:a7:0f:ab:9b:fa:b6:f0:
74:ce:e5:84:db:7e:70:e8:46:f8:7a:46:da:0c:94:
b7:8e:a8:2e:f6:8e:f3:b8:14:fb:0d:3a:9e:54:f7:
2e:b5:78:4c:c3:28:c9:44:d7:70:31:0f:31:8f:c4:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:74:61:BA:91:9C:AD:06:71:CB:4C:B3:65:63:C3:2F:81:D9:9B
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/8Zl0YbqRnK0GcctMs2Vjwy-B2Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.148.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7c:78:eb:2f:bd:9e:3d:ac:30:b8:9c:8b:33:bb:08:03:0a:
86:09:f4:ca:40:85:31:42:51:83:da:85:dd:9b:e8:14:a7:00:
91:e2:8c:e0:c4:d7:09:c6:24:ad:1f:35:ec:cc:95:5c:fe:f9:
b6:0c:8b:1e:36:b6:68:b4:2c:7f:24:77:20:2b:46:8a:55:9d:
18:b0:af:08:5b:3c:5d:11:47:c9:6b:b9:36:9a:a9:63:89:12:
69:76:15:be:07:c1:36:54:9c:11:50:9b:bf:17:b1:9f:0e:42:
4f:a7:23:fd:d4:27:4e:c8:fc:80:07:c2:55:a5:de:63:47:82:
34:86:ae:27:90:05:d2:fc:15:79:53:ad:53:02:e2:74:15:a4:
4c:06:66:98:e8:d2:8a:b2:cf:d7:7d:5e:2e:08:23:91:16:65:
87:86:85:9e:7b:08:ec:89:40:f0:8c:ec:70:f7:40:67:cc:81:
51:57:d5:61:3c:0e:e4:be:56:49:23:a1:1f:15:b3:06:81:a8:
6d:60:f6:97:b6:b0:cd:a5:1a:45:35:b0:da:3a:75:96:de:40:
1b:34:e8:30:47:74:ed:d4:8e:b2:ad:c7:69:3c:d0:a6:42:38:
bd:0e:e0:08:c2:2f:7b:87:16:71:c8:bb:bd:5b:f2:f2:99:1e:
39:e7:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org