Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa
File: C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa (raw, json)
Hash identifier: mcrPoGlopNgm14o8yKCua7KcLnydF1YZNfyvDyziZSs=
Subject key identifier: 0B:A7:EF:87:33:93:7B:67:FF:49:B0:95:37:09:38:7A:28:8E:C7:D6
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018ABCDC4965DFCB08F9984E50820ADA7B3B
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa
Signing time: Fri 22 Sep 2023 12:27:47 +0000
ROA not before: Fri 22 Sep 2023 12:27:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:dc:49:65:df:cb:08:f9:98:4e:50:82:0a:da:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Sep 22 12:27:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba7ef8733937b67ff49b0953709387a288ec7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:2d:07:13:31:c3:d5:ef:d9:14:1f:a2:f9:
2c:b1:ac:77:62:03:c2:e4:9d:24:13:2c:3f:03:99:
42:11:c0:87:62:9d:bc:e3:c6:21:de:d8:24:b4:f3:
11:41:e5:c8:d9:f8:13:85:95:94:9b:93:07:a1:a0:
8d:6a:99:42:1d:05:75:6f:e4:eb:08:be:a3:f5:11:
61:13:35:81:6f:a8:ff:3d:1d:7c:bb:4b:b0:f4:29:
84:99:a4:6e:6b:ac:fa:8c:d6:57:70:5c:f9:9d:d9:
28:ba:a8:31:3a:10:4b:5c:eb:10:74:f1:0f:85:e7:
40:a9:78:a7:b8:13:d0:35:39:09:b0:eb:09:65:9c:
6e:2f:ff:23:66:07:5c:c3:1c:ea:a5:af:a6:d6:27:
f5:b0:28:9e:cb:b4:5f:93:52:b5:b1:f8:cd:cd:3e:
00:1b:f2:18:fe:b5:00:34:0e:dc:55:32:b1:a1:3c:
f9:8f:b2:e4:43:b6:3f:9c:61:76:fd:ed:85:b7:f0:
4a:ca:98:37:94:f3:e6:f0:84:8f:ea:18:05:c6:2d:
a9:66:8a:13:2b:ae:17:d5:a9:6e:cd:85:3f:28:6e:
be:55:10:3c:63:9e:d6:da:83:c1:a7:03:1e:5f:79:
69:54:1a:e4:21:08:85:b7:16:9d:ec:e4:12:5f:6f:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:EF:87:33:93:7B:67:FF:49:B0:95:37:09:38:7A:28:8E:C7:D6
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C6fvhzOTe2f_SbCVNwk4eiiOx9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bb:d1:d6:a8:d0:68:0e:ac:0d:46:d3:f1:36:21:0f:d2:24:
5d:53:8d:3e:1a:70:7a:fd:f1:b4:8e:54:13:07:ba:22:43:d2:
9e:ff:b2:d2:0e:49:be:f3:45:e0:7a:31:07:3d:54:68:aa:f2:
a7:19:86:a3:68:dc:34:84:2f:69:90:ff:18:5b:07:81:5e:ef:
6e:f9:d2:0e:f8:d0:96:b0:8c:24:41:cc:7f:04:d0:3a:71:bc:
4d:c1:77:ff:87:de:a1:29:a0:9c:f8:1b:73:9b:a4:8d:1b:c8:
f9:0a:c7:96:c4:5d:92:a6:18:f2:23:67:1d:2c:72:a9:79:5a:
03:b5:82:d4:9d:c7:3e:38:5d:38:66:8c:48:8e:f1:fe:32:28:
8c:a0:bc:b2:8a:23:f1:dd:e7:34:a0:30:17:21:a5:90:c3:3c:
17:a4:9c:03:d3:de:c3:4c:24:6e:7f:5e:0b:97:9d:b9:5a:9f:
dd:10:29:b8:33:21:f2:45:86:2c:86:f4:65:78:bd:18:c5:7b:
8e:3a:7c:a7:f0:97:2f:03:e9:92:a8:1d:d1:9d:f1:96:a3:e3:
58:75:bd:3d:47:1a:2d:6b:b7:e2:90:18:99:71:65:ad:42:2c:
5f:9d:5f:16:2a:34:e3:e4:ee:91:0c:5d:ec:cc:e7:b9:77:dc:
0f:d1:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:19 2024 by rpki-client on console-fra.rpki-client.org