Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C4AOYaqQjZeeDbocqFattGVD7Qc.roa
File: C4AOYaqQjZeeDbocqFattGVD7Qc.roa (raw, json)
Hash identifier: ch63AAFOhXrqd2KF4VAonoI8HBEq0zhpGxpdn5DLolA=
Subject key identifier: 0B:80:0E:61:AA:90:8D:97:9E:0D:BA:1C:A8:56:AD:B4:65:43:ED:07
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01885C96772032A69F25B1807F88E2F8F05F
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C4AOYaqQjZeeDbocqFattGVD7Qc.roa
Signing time: Sat 27 May 2023 09:42:24 +0000
ROA not before: Sat 27 May 2023 09:42:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 09:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:96:77:20:32:a6:9f:25:b1:80:7f:88:e2:f8:f0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 27 09:42:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b800e61aa908d979e0dba1ca856adb46543ed07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:15:07:72:4e:28:e1:57:82:18:14:d0:f1:
1e:06:0a:74:24:eb:fd:9e:e6:63:2e:0b:ac:47:a4:
2b:89:6d:09:e9:4d:c4:3d:16:67:9f:ee:75:b4:05:
c0:31:f5:9d:dc:c1:5f:67:53:4c:32:d1:03:e5:1e:
89:bc:ae:f2:03:8b:26:89:f3:04:b3:47:5d:7f:99:
2d:0d:f6:53:58:05:73:08:35:ed:ce:72:c2:3c:83:
4f:a5:76:46:75:b8:97:78:4a:56:e9:20:b7:f3:8d:
4f:72:f5:78:0a:f3:f1:a4:8a:82:4f:e3:c4:02:09:
44:7b:77:f2:e0:67:98:06:f6:27:5c:6c:02:27:f2:
cc:1c:f9:bf:0b:11:76:e3:f3:6f:8b:2a:02:10:47:
92:e4:b6:30:d3:0b:a2:18:5b:69:00:2a:0a:63:84:
4e:06:3a:ad:d2:fc:c4:2f:51:de:f4:91:51:e3:c3:
23:e8:44:c8:cd:f4:93:54:7b:0e:e3:4a:12:29:b3:
f1:64:a1:eb:9f:c6:71:6a:d9:58:71:f3:fc:c8:e2:
8a:22:61:aa:f0:b7:60:53:95:1b:46:11:c9:a4:4f:
8c:a3:1f:6c:71:a7:ee:94:cd:e8:cb:6a:f7:14:30:
f6:33:a8:65:11:49:2e:3a:0b:fa:db:ea:57:f1:78:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:80:0E:61:AA:90:8D:97:9E:0D:BA:1C:A8:56:AD:B4:65:43:ED:07
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C4AOYaqQjZeeDbocqFattGVD7Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
99:07:ae:df:13:75:71:d7:ce:aa:c7:c5:fc:d1:8f:57:74:78:
bc:16:ca:b0:f0:30:f4:26:52:62:28:ae:3a:a9:15:9c:54:9b:
d1:b3:b0:0e:89:f8:72:52:53:4e:ef:1f:a5:08:dd:13:36:d9:
01:4b:3a:70:f5:b5:71:b0:fc:ad:a3:b2:1b:cc:dd:b3:2c:47:
71:07:33:73:fa:45:20:b8:5e:ea:fc:10:70:e7:0d:cb:f1:a4:
81:8f:8a:20:9a:f6:fd:bd:3e:2a:4d:33:ca:c0:dc:63:e8:83:
63:fa:fd:4b:48:2a:e5:b6:58:c9:fa:95:13:62:81:f0:ee:a1:
f7:97:63:19:4b:ed:7e:8c:d5:c2:d1:f8:aa:ce:0e:75:9b:0b:
68:72:b4:39:74:71:19:e8:62:6d:a5:5d:f6:a2:75:ea:cc:8e:
f8:88:5b:44:5b:ca:bb:fb:c3:88:4d:9b:d5:7e:7d:57:87:3a:
80:02:24:01:43:dd:0d:02:f3:39:79:c8:df:68:9a:b7:28:b8:
2c:1e:bf:d4:0d:0b:1f:2b:6a:cc:82:9e:fa:5e:31:e6:a5:05:
67:7b:6f:62:e3:a9:87:0d:7c:90:6e:b3:94:07:f4:29:59:17:
fd:d4:f7:cc:e2:d1:00:4d:9c:91:9c:74:18:b1:5b:2f:d6:1f:
19:16:a5:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhclncgMqafJbGAf4ji+PBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwNTI3MDk0MjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjgwMGU2MWFhOTA4ZDk3OWUwZGJhMWNhODU2YWRiNDY1NDNlZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2kVB3JOKOFXghgU0PEeBgp0JOv9
nuZjLgusR6QriW0J6U3EPRZnn+51tAXAMfWd3MFfZ1NMMtED5R6JvK7yA4smifME
s0ddf5ktDfZTWAVzCDXtznLCPINPpXZGdbiXeEpW6SC3841PcvV4CvPxpIqCT+PE
AglEe3fy4GeYBvYnXGwCJ/LMHPm/CxF24/NviyoCEEeS5LYw0wuiGFtpACoKY4RO
Bjqt0vzEL1He9JFR48Mj6ETIzfSTVHsO40oSKbPxZKHrn8ZxatlYcfP8yOKKImGq
8LdgU5UbRhHJpE+Mox9scafulM3oy2r3FDD2M6hlEUkuOgv62+pX8XhilwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuADmGqkI2Xng26HKhWrbRlQ+0HMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvQzRBT1lhcVFqWmVlRGJvY3FGYXR0R1ZEN1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iJMA0G
CSqGSIb3DQEBCwUAA4IBAQCZB67fE3Vx186qx8X80Y9XdHi8Fsqw8DD0JlJiKK46
qRWcVJvRs7AOifhyUlNO7x+lCN0TNtkBSzpw9bVxsPyto7IbzN2zLEdxBzNz+kUg
uF7q/BBw5w3L8aSBj4ogmvb9vT4qTTPKwNxj6INj+v1LSCrltljJ+pUTYoHw7qH3
l2MZS+1+jNXC0fiqzg51mwtocrQ5dHEZ6GJtpV32onXqzI74iFtEW8q7+8OITZvV
fn1XhzqAAiQBQ90NAvM5ecjfaJq3KLgsHr/UDQsfK2rMgp76XjHmpQVne29i46mH
DXyQbrOUB/QpWRf91PfM4tEATZyRnHQYsVsv1h8ZFqVY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org