Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/CH6mDI7fsJBnWVBuSb3zaw42FOg.roa
File: CH6mDI7fsJBnWVBuSb3zaw42FOg.roa (raw, json)
Hash identifier: CjMOTnqx3suVdoBKiyv7s5EdRV292BO7dkN7Y1Udpyo=
Subject key identifier: 08:7E:A6:0C:8E:DF:B0:90:67:59:50:6E:49:BD:F3:6B:0E:36:14:E8
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018682EF21B8C5F2970E1A08198E6FBF5E4A
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/CH6mDI7fsJBnWVBuSb3zaw42FOg.roa
Signing time: Fri 24 Feb 2023 10:19:15 +0000
ROA not before: Fri 24 Feb 2023 10:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 11:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:ef:21:b8:c5:f2:97:0e:1a:08:19:8e:6f:bf:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Feb 24 10:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=087ea60c8edfb0906759506e49bdf36b0e3614e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:6a:74:38:8c:06:72:1f:3a:91:bd:e4:1f:
b8:26:36:03:15:82:0c:06:44:5b:bb:06:29:c4:3a:
66:fe:9b:46:c9:2f:3b:06:18:36:88:f6:9b:0d:0a:
85:06:35:6d:d5:c1:bb:e6:37:8d:c8:a4:48:53:c0:
a7:4b:2b:c4:c9:00:b4:8a:a0:30:05:a4:32:54:64:
86:49:6e:a0:06:9b:62:35:36:1e:ec:0a:3b:3a:c5:
8e:be:40:93:6b:aa:a3:00:3e:c4:ea:57:5a:1d:91:
63:ba:ab:cd:41:77:04:85:98:82:bc:da:1d:3b:59:
02:13:1e:d7:7e:a5:33:88:f8:d9:b5:e8:83:81:15:
b5:46:63:51:07:6f:3a:ce:bd:0e:60:2e:51:46:84:
98:b9:e4:de:a7:d9:62:80:30:d0:b5:1a:18:e4:45:
4f:f0:63:5d:e1:43:ae:1f:6a:70:36:0a:d0:a1:a5:
b9:3b:56:b6:92:18:15:fe:0c:41:aa:fb:41:d7:3b:
1a:04:95:0c:ba:30:5a:ce:ab:fe:e0:28:aa:61:0c:
4b:2a:c4:34:ce:48:72:e3:f3:68:ab:94:fa:bb:0f:
5e:ff:db:83:2c:07:bf:cc:b2:61:3e:a1:7f:5f:c4:
fb:09:59:0a:79:60:c6:dd:bf:77:e1:d4:b1:ca:b4:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:A6:0C:8E:DF:B0:90:67:59:50:6E:49:BD:F3:6B:0E:36:14:E8
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/CH6mDI7fsJBnWVBuSb3zaw42FOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c0:0c:54:f3:4f:0d:72:75:b9:da:d9:03:87:46:25:f7:3e:
72:f7:d9:90:e2:85:2b:e0:34:89:7e:e4:c3:9d:c5:50:a1:a9:
fd:e5:ef:de:b1:0f:bb:7c:5b:c6:d5:af:f8:16:3a:a7:f8:b8:
4d:89:d2:ba:4b:2c:60:3e:5a:34:91:0a:48:3d:58:b2:58:1f:
06:a0:3b:b4:de:0e:06:6d:af:e4:0b:e9:38:b0:57:6c:5d:21:
f3:bf:09:32:c8:95:e7:d4:de:88:e2:b2:2c:c2:f2:6a:89:80:
b9:a2:64:41:f0:e0:aa:84:fd:67:98:05:f0:9d:be:59:6f:85:
69:8d:e8:44:3d:7b:bc:81:65:91:11:c4:6f:ec:3c:f8:09:2f:
02:1b:63:95:7d:2b:f9:f4:38:b8:c1:66:47:99:4b:23:f8:28:
36:a1:9f:04:18:b5:28:28:16:b0:e2:21:1b:61:41:91:40:d8:
37:3f:4e:4a:22:5f:67:26:0f:6f:5f:26:b5:b8:fd:80:63:f8:
90:d3:c7:ed:9c:9a:be:ca:da:7b:e7:4a:c6:b5:ad:ef:3a:55:
2e:f4:b9:6f:5c:80:6f:40:49:ef:12:74:07:9c:e5:85:7e:c2:
34:e5:1f:38:51:51:89:4e:94:de:39:d1:16:6b:27:8b:cd:06:
d4:ff:62:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaC7yG4xfKXDhoIGY5vv15KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMjI0MTAxOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdlYTYwYzhlZGZiMDkwNjc1OTUwNmU0OWJkZjM2YjBlMzYxNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadqdDiMBnIfOpG95B+4JjYDFYIM
BkRbuwYpxDpm/ptGyS87Bhg2iPabDQqFBjVt1cG75jeNyKRIU8CnSyvEyQC0iqAw
BaQyVGSGSW6gBptiNTYe7Ao7OsWOvkCTa6qjAD7E6ldaHZFjuqvNQXcEhZiCvNod
O1kCEx7XfqUziPjZteiDgRW1RmNRB286zr0OYC5RRoSYueTep9ligDDQtRoY5EVP
8GNd4UOuH2pwNgrQoaW5O1a2khgV/gxBqvtB1zsaBJUMujBazqv+4CiqYQxLKsQ0
zkhy4/Noq5T6uw9e/9uDLAe/zLJhPqF/X8T7CVkKeWDG3b934dSxyrSVIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh+pgyO37CQZ1lQbkm982sONhToMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvQ0g2bURJN2ZzSkJuV1ZCdVNiM3phdzQyRk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iXMA0G
CSqGSIb3DQEBCwUAA4IBAQCSwAxU808NcnW52tkDh0Yl9z5y99mQ4oUr4DSJfuTD
ncVQoan95e/esQ+7fFvG1a/4Fjqn+LhNidK6SyxgPlo0kQpIPViyWB8GoDu03g4G
ba/kC+k4sFdsXSHzvwkyyJXn1N6I4rIswvJqiYC5omRB8OCqhP1nmAXwnb5Zb4Vp
jehEPXu8gWWREcRv7Dz4CS8CG2OVfSv59Di4wWZHmUsj+Cg2oZ8EGLUoKBaw4iEb
YUGRQNg3P05KIl9nJg9vXya1uP2AY/iQ08ftnJq+ytp750rGta3vOlUu9LlvXIBv
QEnvEnQHnOWFfsI05R84UVGJTpTeOdEWayeLzQbU/2Kb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org