Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Dt9WaVmSnmKrldDRQ2JRTGKmKio.roa
File: Dt9WaVmSnmKrldDRQ2JRTGKmKio.roa (raw, json)
Hash identifier: 6BXeuUbNgYkj4wpNyBc3zTiNDJne+CFPbpw8q6xMIvE=
Subject key identifier: 0E:DF:56:69:59:92:9E:62:AB:95:D0:D1:43:62:51:4C:62:A6:2A:2A
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5685981A7CFF665FE8058AB43119
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Dt9WaVmSnmKrldDRQ2JRTGKmKio.roa
Signing time: Sun 01 Jan 2023 08:54:43 +0000
ROA not before: Sun 01 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:56:85:98:1a:7c:ff:66:5f:e8:05:8a:b4:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0edf566959929e62ab95d0d14362514c62a62a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:76:f6:f0:de:2f:86:7c:fa:d6:3f:28:d9:
1e:e6:1d:dc:0d:21:a6:43:1e:ee:6d:8f:72:f0:c7:
41:68:82:db:f6:55:bc:a1:27:b9:83:bf:52:b5:5a:
dd:7b:61:36:3e:da:75:9d:26:29:71:f6:4b:d0:56:
36:c8:d8:d9:c6:53:3d:62:2f:15:20:13:8a:d5:fa:
e6:98:e6:bd:a0:3d:83:5f:c8:d1:f3:39:33:72:fd:
a1:04:7a:e2:c1:67:50:2b:52:37:2c:cf:13:e9:ee:
61:77:b0:60:7b:d2:db:25:cc:94:54:fe:72:b1:0b:
89:32:9d:d5:36:99:1a:6e:30:03:82:79:a7:aa:4c:
34:d1:bd:20:fc:82:ff:b4:cf:0d:7d:d0:06:43:95:
41:99:5d:3c:26:54:29:a6:1c:71:4f:79:01:93:bb:
0e:f4:bd:d9:be:4f:b5:d0:d6:11:6d:94:1a:44:a5:
33:73:e8:3e:2a:bc:b8:fd:43:82:57:83:f5:14:ba:
31:bb:e9:03:37:60:97:6e:15:60:7a:b2:2d:00:9a:
de:b8:cd:8f:a1:7b:7d:f3:2b:af:ca:16:2b:94:31:
57:8c:9d:0b:73:4d:4b:58:08:b7:fb:0e:56:4d:a6:
11:23:9e:07:fa:6d:64:95:4c:c5:c1:b0:71:2d:62:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:56:69:59:92:9E:62:AB:95:D0:D1:43:62:51:4C:62:A6:2A:2A
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Dt9WaVmSnmKrldDRQ2JRTGKmKio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8e:c9:6a:63:69:f0:35:c9:60:a2:6e:c0:65:c4:61:d1:bb:
7d:7f:1f:bc:68:37:98:f5:c2:66:26:dc:59:70:bd:f8:c6:5e:
4f:e1:11:54:d0:aa:36:6e:71:08:b1:3d:82:59:da:fc:31:c5:
ad:a5:94:04:ac:e1:14:33:4f:15:32:6c:95:b1:b6:0c:4b:44:
75:49:da:f0:58:ba:4e:92:71:8c:79:0b:4f:27:db:52:53:f6:
b6:22:1c:b4:2a:b4:16:42:75:f3:74:d7:a7:fa:7e:17:c7:0e:
f5:4d:cd:e7:be:30:88:9e:68:53:b0:87:7e:84:2e:3e:85:a4:
fb:82:e9:ee:42:3a:a0:78:2a:7f:e2:8d:f9:31:6f:02:b7:a9:
25:1c:87:dc:92:82:a6:8a:60:2e:be:c6:db:5b:aa:71:4f:ac:
d2:6c:b4:63:b4:83:87:8e:42:02:4e:51:ba:74:1d:71:b6:f1:
e6:f7:00:4a:09:f4:63:77:38:dd:66:5d:a2:24:f2:66:8f:2e:
48:1f:89:61:e8:94:0a:e4:c6:1b:7f:6f:be:12:c9:6d:60:51:
9f:3e:94:9a:b4:b9:23:ae:4c:07:b3:f2:7f:ae:a6:fc:ad:a2:
d4:77:95:3c:9a:1c:b8:9a:71:ce:bd:a2:be:db:40:be:2a:f4:
7c:3c:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org