Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Adh9lxTV8ftJtV2sNKdYlZhxx8w.roa
File: Adh9lxTV8ftJtV2sNKdYlZhxx8w.roa (raw, json)
Hash identifier: 1S9edznW3WOVOVq0E1+5oQ8gIWDgZWna2vz7UP11NN4=
Subject key identifier: 01:D8:7D:97:14:D5:F1:FB:49:B5:5D:AC:34:A7:58:95:98:71:C7:CC
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0189796C9671B4BF40269AFE3B175F5085BF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Adh9lxTV8ftJtV2sNKdYlZhxx8w.roa
Signing time: Fri 21 Jul 2023 17:08:26 +0000
ROA not before: Fri 21 Jul 2023 17:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 87.248.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:6c:96:71:b4:bf:40:26:9a:fe:3b:17:5f:50:85:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 21 17:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01d87d9714d5f1fb49b55dac34a758959871c7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:78:9f:4c:aa:2f:11:a0:76:b2:56:7b:2a:
07:30:11:b2:a5:1c:e3:a5:5a:75:ea:3a:39:d9:dc:
53:a4:b5:8d:e7:1a:e3:f0:3d:9d:10:dd:61:08:6f:
27:24:61:75:08:17:13:f1:84:7f:ab:15:cb:7f:26:
9e:39:1b:8e:85:52:91:38:b6:15:25:dd:7d:ec:63:
a2:c0:2c:5b:75:8b:b5:1d:94:03:c1:9f:1b:2c:d6:
26:ef:58:91:f8:a8:3e:00:82:2f:44:c8:c6:b0:80:
87:5b:3a:7f:dd:9c:c1:86:09:0f:06:78:e5:b3:bf:
e4:f9:30:99:6f:81:27:4d:fc:2b:2a:db:c0:ac:1c:
f9:8e:2e:78:a0:7f:a3:ff:0e:d1:d2:c0:90:fa:9d:
55:b5:e3:c0:6c:15:54:5d:ec:ce:b7:e2:9e:ba:f3:
ed:0c:64:ba:da:0d:15:5a:07:fc:17:96:2a:d1:1d:
a2:ff:8a:f8:cd:eb:8c:e1:8e:e4:81:18:04:56:2f:
79:c6:03:cf:f9:4f:be:65:a5:02:f1:1d:91:87:75:
59:8c:79:b5:5a:c4:27:53:5e:a3:a3:54:e0:42:28:
b0:58:0c:2c:2a:7c:a8:ee:39:2f:44:6e:6c:93:8d:
0d:9f:f1:37:ee:af:0b:99:a2:81:8e:12:23:56:3c:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:7D:97:14:D5:F1:FB:49:B5:5D:AC:34:A7:58:95:98:71:C7:CC
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Adh9lxTV8ftJtV2sNKdYlZhxx8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:de:bc:ae:05:15:f9:28:2d:50:1f:95:01:cd:1e:0f:6a:05:
22:96:de:7b:31:c4:23:a4:fa:d6:70:82:35:bd:92:3a:46:5a:
50:d5:9b:7d:1a:f1:09:58:8e:85:23:cb:ba:df:ac:7f:e0:8a:
b3:fe:4f:9c:f0:ae:12:26:02:d2:ea:9c:6f:35:e8:63:3e:3b:
ff:3b:0e:bc:9d:f2:53:85:d3:1a:29:c6:2c:9c:3f:e8:22:98:
71:51:f2:72:c4:0d:e3:48:96:9a:2d:67:30:3d:97:86:3a:da:
ea:fb:84:01:16:52:9a:cd:3d:33:92:07:d6:6e:2a:09:28:64:
77:70:ca:f4:2c:85:17:bc:30:eb:c9:8e:c7:17:07:1f:ed:c0:
90:a3:14:ef:f1:59:00:b6:f4:b0:07:1a:49:83:53:a2:43:71:
8a:2a:c5:a1:0c:cb:b5:d5:79:1f:98:ed:44:0a:ac:fe:03:9d:
35:22:f4:40:28:26:8f:6b:5a:e5:ba:b2:c3:31:9c:13:8a:9f:
c5:d4:3e:42:06:8b:55:a2:97:94:ce:c3:cc:87:bd:89:ba:26:
93:62:d8:a5:2e:c6:9e:07:e5:b6:e1:20:3e:15:14:e7:4e:0b:
70:70:77:75:ad:af:87:b9:1f:64:98:cb:f6:54:ba:9a:a2:56:
9c:7a:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org