Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/CY36sa4QRaAedFETdUA24oT6bI0.roa
File: CY36sa4QRaAedFETdUA24oT6bI0.roa (raw, json)
Hash identifier: S5xTOirRuch0moEUrK32EehpAgSKpOgZkZC6epbpkM4=
Subject key identifier: 09:8D:FA:B1:AE:10:45:A0:1E:74:51:13:75:40:36:E2:84:FA:6C:8D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019077D6AAF6DBC8B991E154C9FDEBC4495C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/CY36sa4QRaAedFETdUA24oT6bI0.roa
Signing time: Wed 03 Jul 2024 09:04:35 +0000
ROA not before: Wed 03 Jul 2024 09:04:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215817
IP address blocks: 87.248.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 16:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:d6:aa:f6:db:c8:b9:91:e1:54:c9:fd:eb:c4:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 3 09:04:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098dfab1ae1045a01e745113754036e284fa6c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:a0:90:40:1d:17:ec:b5:90:c5:38:be:e2:
cf:22:ef:a3:18:57:95:52:27:ae:c7:f8:e8:e0:2f:
0a:9e:ef:1c:cb:99:41:98:f1:67:4c:3d:f4:cf:11:
c2:c7:99:bb:56:03:ff:b0:97:dc:40:8e:d6:e0:aa:
11:23:fd:bc:2b:d0:8c:2a:50:6f:82:6a:e8:92:20:
a9:ec:52:a4:e7:a7:9a:a7:df:9b:f6:7e:e1:42:3e:
1e:1c:0c:b1:67:86:a2:b3:e9:5d:bf:93:46:35:55:
cf:63:9f:cf:44:6a:76:7a:44:a6:73:f1:0c:e4:e6:
51:7c:40:d3:a6:c1:de:19:7c:15:28:26:7b:83:81:
7e:40:4d:86:7a:1f:77:67:18:c6:90:35:97:42:c4:
f6:87:1a:43:f0:20:58:93:8d:59:20:38:d3:86:5c:
41:99:25:5e:99:37:64:2c:53:0b:8f:00:6c:99:6d:
06:3d:d5:d7:91:d3:bb:ff:b4:18:a1:98:68:68:2d:
c4:b3:d5:7c:67:0c:ee:6d:49:88:80:60:fd:6d:17:
99:09:21:c4:95:2b:9f:80:93:b1:f8:6f:9e:59:93:
f1:fa:96:d6:da:8d:a0:47:3c:1c:7c:57:19:58:3b:
3a:95:e9:02:d3:0c:0d:20:42:b0:a1:84:3a:1a:d7:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:FA:B1:AE:10:45:A0:1E:74:51:13:75:40:36:E2:84:FA:6C:8D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/CY36sa4QRaAedFETdUA24oT6bI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.131.0/24
Signature Algorithm: sha256WithRSAEncryption
29:28:c4:d7:27:31:d8:2a:74:0a:d1:30:04:15:7d:81:0e:e6:
02:d2:9e:5e:33:dc:14:1c:67:f6:36:86:86:30:34:78:b6:0b:
d1:93:8a:ae:9b:46:83:6a:1b:4f:80:88:37:46:f7:5a:28:8e:
d5:dc:7a:38:07:ff:b5:41:9e:26:1f:18:f3:cc:a0:0a:34:8a:
92:b2:da:ea:92:bc:1f:9f:7b:8a:29:ba:dc:46:ce:be:2b:ba:
c6:37:8f:8e:a3:ea:bb:40:dd:c8:43:25:9a:c0:16:e0:59:d3:
96:45:b8:9e:c1:53:6e:1e:b5:c4:6b:44:de:b8:1e:63:60:10:
49:52:c6:f0:66:7d:61:87:04:e8:5a:79:aa:64:0f:04:4c:9c:
1f:29:54:ff:5e:97:17:1c:02:89:78:c5:f6:7f:f5:77:2e:eb:
fb:f6:de:4e:b7:e3:e1:f5:fa:f8:b8:6d:93:3c:14:e5:62:15:
eb:4c:04:34:af:30:bf:ae:ef:2b:3a:35:6f:8f:d4:f7:27:83:
9f:76:e0:ec:2b:0e:f1:f5:cc:1f:66:8e:70:a7:c1:8e:e3:8b:
14:01:63:d1:8b:5a:53:f9:c8:b2:a5:46:74:12:9a:ce:ce:9b:
9d:a6:69:34:b2:bd:aa:8d:f3:0f:ee:7b:a5:a3:da:77:b4:da:
05:b7:13:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org