Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ID_G_Skp06F10JvaSmi5n5DgBSw.roa
File: ID_G_Skp06F10JvaSmi5n5DgBSw.roa (raw, json)
Hash identifier: 764bUuBvYYHAE8q3rDfjRBekOHM8j9UHUJANfsoGxKk=
Subject key identifier: 20:3F:C6:FD:29:29:D3:A1:75:D0:9B:DA:4A:68:B9:9F:90:E0:05:2C
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0187933F716F97436EA6E47FE82A2DA5D9C8
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ID_G_Skp06F10JvaSmi5n5DgBSw.roa
Signing time: Tue 18 Apr 2023 07:23:41 +0000
ROA not before: Tue 18 Apr 2023 07:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:3f:71:6f:97:43:6e:a6:e4:7f:e8:2a:2d:a5:d9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 18 07:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=203fc6fd2929d3a175d09bda4a68b99f90e0052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:a2:a2:70:6a:47:f2:be:79:ac:fa:36:f5:
a6:77:e2:a1:30:64:ce:66:c6:9a:78:a5:33:c6:da:
ca:c7:7f:3c:04:15:ad:6f:a3:d0:3a:32:1b:24:ae:
c1:35:02:46:b3:3a:51:2c:c2:f2:b2:b4:34:78:06:
19:86:20:4d:32:87:10:6f:ec:ae:d7:30:de:88:e0:
04:f6:cb:0c:db:58:56:ae:6e:90:3c:de:e4:e6:c8:
e9:1e:fc:a1:a2:a7:e6:e1:8d:08:fd:89:f2:c5:f2:
d8:1d:c2:84:f8:2b:21:36:1c:65:f9:c4:79:0d:14:
8c:30:ec:20:50:b1:f1:a1:18:1b:7b:c0:d2:13:65:
bb:89:47:31:a5:f8:e0:ba:27:ca:aa:f5:12:1b:5b:
6a:66:17:a2:d2:ff:06:a8:d2:6f:df:80:06:2c:af:
7c:ef:77:73:14:52:a7:32:11:9e:5a:77:1b:6f:58:
9c:06:e7:6c:3a:be:4b:f9:6b:7f:3f:d3:a1:f4:a8:
92:f3:c8:90:ec:71:ac:a2:b8:64:c4:32:be:74:c7:
2b:68:1a:b6:e4:d6:e3:33:04:03:fc:05:01:21:9a:
a7:b2:df:4f:a6:31:ae:82:36:55:1a:21:55:f5:f5:
0e:8c:a6:1f:19:33:da:04:9d:99:56:15:a5:5a:4a:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:C6:FD:29:29:D3:A1:75:D0:9B:DA:4A:68:B9:9F:90:E0:05:2C
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ID_G_Skp06F10JvaSmi5n5DgBSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:fb:a9:55:bb:1c:dc:14:48:91:04:b8:81:5e:ca:6f:c3:
a3:76:f7:48:a5:6b:e2:af:bd:fc:6d:23:ca:34:09:44:68:40:
4b:4a:72:02:32:36:0d:a5:9e:fd:00:e9:00:24:02:3c:4f:2d:
7a:2b:e7:5d:78:e6:2b:0f:04:1f:2c:48:2a:c0:94:94:3e:ca:
da:74:28:a7:f7:50:7b:46:5d:58:1f:9b:2e:a4:6f:56:7e:ce:
c4:d5:44:56:53:8e:12:ec:86:7a:73:17:2f:74:ec:29:fc:7b:
ab:b0:7b:0e:fe:b4:0a:ee:a5:ec:24:7d:85:33:f9:74:0c:9e:
93:b8:44:9b:f5:66:4d:e5:24:26:b3:6c:12:75:ca:14:54:31:
21:5f:77:cf:99:7a:77:cc:c3:41:6a:c8:60:f2:80:8d:7e:37:
df:3f:5d:83:f7:81:d3:48:6d:15:20:65:b0:6b:cd:66:06:2a:
37:50:40:99:92:be:cb:fd:5c:6c:70:64:57:b7:f3:9d:ca:ec:
5c:51:52:9f:e2:16:7a:4a:e2:2f:67:c1:5a:40:ee:be:e3:ec:
15:52:db:ba:d5:eb:5a:4a:7e:96:42:8a:a9:73:74:b7:c9:25:
d2:44:c5:b2:7b:9e:ae:3d:b8:f3:35:32:a5:9f:cb:6f:e2:a3:
9d:a7:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org