Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/DN1bibz15XA06ylDULxrbXPWu04.roa
File: DN1bibz15XA06ylDULxrbXPWu04.roa (raw, json)
Hash identifier: p42X2QldSJS174y0oSaOKxNamRI0Dm1cDzro9IK3CAo=
Subject key identifier: 0C:DD:5B:89:BC:F5:E5:70:34:EB:29:43:50:BC:6B:6D:73:D6:BB:4E
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01903E732FC5EA01B74E1DD43533C0F9B901
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/DN1bibz15XA06ylDULxrbXPWu04.roa
Signing time: Sat 22 Jun 2024 05:37:34 +0000
ROA not before: Sat 22 Jun 2024 05:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 87.248.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3e:73:2f:c5:ea:01:b7:4e:1d:d4:35:33:c0:f9:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 22 05:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cdd5b89bcf5e57034eb294350bc6b6d73d6bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:91:eb:d4:a7:74:28:2a:b7:55:ee:88:52:
4f:d1:3e:71:60:8c:32:4d:9d:cf:8c:e8:a0:7a:b2:
98:f7:8c:57:5d:93:0b:a8:05:80:09:4b:75:26:08:
87:0d:da:6e:47:55:d1:b3:1c:7f:8a:de:6e:4c:57:
04:c0:0e:ae:b1:b8:24:b4:d1:af:16:14:59:da:9a:
9e:92:0a:eb:0e:50:a5:37:b3:b6:3d:26:c0:8d:18:
6e:a8:cf:4b:91:15:e1:80:75:5b:df:fa:35:b5:e0:
a1:be:36:2b:b2:5d:16:10:60:0f:61:83:44:c2:ba:
56:07:b0:b3:09:97:7d:22:e3:c9:4c:21:79:2b:97:
dc:0a:56:d1:c4:5f:02:26:9c:3a:e8:0c:65:f2:c1:
75:03:4c:61:72:5d:d1:05:f9:ca:a2:f3:91:8a:79:
65:18:9a:17:b2:98:46:ef:85:38:e2:3c:7b:ba:90:
87:66:54:21:ad:bc:b3:42:92:d9:11:a4:1b:a0:ef:
fb:75:33:a8:e5:ae:29:b1:8d:31:cb:ae:16:ea:e2:
d8:46:57:d7:fb:fe:0d:94:59:7c:f3:1e:a4:aa:22:
ee:e5:d2:b6:b3:95:b7:92:67:c5:54:fc:07:37:6c:
3e:85:92:53:54:2a:7d:e0:95:79:66:f3:a4:7b:38:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:5B:89:BC:F5:E5:70:34:EB:29:43:50:BC:6B:6D:73:D6:BB:4E
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/DN1bibz15XA06ylDULxrbXPWu04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d5:59:0e:b5:e7:25:c0:98:7a:43:08:84:73:6a:5d:92:e9:
54:26:b6:d9:4f:6b:3d:2c:b7:e4:05:e7:97:b8:43:ab:fe:38:
ef:6b:ad:b8:ca:b4:de:13:f9:4e:b0:ca:91:22:bd:c6:78:27:
55:82:0c:0f:b0:dd:e3:b0:59:80:69:2e:20:b1:0e:ee:cb:14:
a9:48:3a:36:ff:33:f5:7f:95:67:ab:3a:a1:56:88:f4:47:e1:
bc:de:63:c4:62:e2:f9:a6:cd:f6:22:8e:9f:25:5d:d3:dd:ea:
fa:0e:58:af:1c:3b:ed:28:ec:25:bc:e1:6f:35:0c:8b:ed:74:
5f:e9:d4:a5:ae:f5:76:d6:42:4e:06:3e:fc:99:a0:8e:00:3b:
4b:ec:db:4c:9e:5e:c2:44:c2:32:a0:d3:ea:96:68:4f:d0:f4:
30:5f:96:e4:67:8a:5f:60:a7:d2:6a:7c:b2:59:c6:07:3e:fe:
e6:8f:38:dd:87:5d:62:7e:ac:81:a9:2f:5c:33:2a:1d:5f:44:
e5:a6:c1:6e:87:96:71:ae:80:76:e1:52:21:85:ec:54:be:a1:
a5:32:67:ac:71:63:f7:ff:d2:ae:80:a9:d7:b0:5f:e5:fc:e9:
df:00:d5:a2:ae:f3:e3:50:af:53:22:2d:e1:4a:45:f7:3b:46:
ef:b6:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 16:54:49 2024 by rpki-client on console-fra.rpki-client.org