Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/KqO4aBCbrF1of6rlWM3R3Qc6gBM.roa
File: KqO4aBCbrF1of6rlWM3R3Qc6gBM.roa (raw, json)
Hash identifier: TGmkrWYG460nH6CKgzKvEQRU5g2jVk4K4NJi7sB0O4g=
Subject key identifier: 2A:A3:B8:68:10:9B:AC:5D:68:7F:AA:E5:58:CD:D1:DD:07:3A:80:13
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01903E732F6C6B2B3A176D008A12B36460AD
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/KqO4aBCbrF1of6rlWM3R3Qc6gBM.roa
Signing time: Sat 22 Jun 2024 05:37:34 +0000
ROA not before: Sat 22 Jun 2024 05:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.248.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 09:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3e:73:2f:6c:6b:2b:3a:17:6d:00:8a:12:b3:64:60:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 22 05:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aa3b868109bac5d687faae558cdd1dd073a8013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:3c:c2:46:d8:1f:f5:9f:14:55:77:56:b9:
2c:3e:0c:45:0b:73:0a:60:cb:53:ee:08:1e:fe:09:
c1:81:71:41:be:1d:c1:cc:e3:f5:20:db:07:45:07:
5d:64:ff:a7:09:ee:cc:ff:ff:ba:ab:64:d0:24:ca:
11:7b:64:c8:bd:fe:ad:11:02:60:0a:86:f7:bc:42:
60:b8:0d:cb:c5:53:61:31:ec:55:7a:90:54:db:c5:
d4:9b:6e:57:55:41:02:0e:91:c6:e9:f5:b7:0d:7f:
e1:4a:fc:3b:6a:b7:4e:38:23:cd:c2:25:13:2d:02:
9b:05:50:b9:ec:3e:54:21:d4:33:4c:ac:ea:a6:2b:
e0:7f:e9:00:f8:12:6f:c0:ea:f1:3c:6a:6e:4c:25:
5c:4b:7e:2d:99:ad:42:03:2c:0c:54:e0:eb:24:1d:
4a:33:3b:67:a0:97:da:50:8d:88:c2:8c:f8:f8:5a:
61:ab:e8:37:f4:83:0b:f9:32:00:36:07:11:f3:c0:
bd:6a:b6:53:56:01:d8:05:a3:d5:eb:e5:f8:22:71:
b8:24:1b:a0:e3:fc:ee:c9:5e:70:97:18:70:b3:d0:
4c:26:68:c9:cc:1b:ff:b3:9b:7a:f5:8d:13:45:e7:
24:16:cf:a7:45:f4:68:c6:30:71:a9:99:5f:a2:eb:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:B8:68:10:9B:AC:5D:68:7F:AA:E5:58:CD:D1:DD:07:3A:80:13
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/KqO4aBCbrF1of6rlWM3R3Qc6gBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.131.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2a:a8:98:d3:f5:15:76:f7:29:51:47:ef:4b:cf:bc:30:50:
cb:fa:b2:f7:28:bf:4a:b4:d5:92:3e:7d:13:fb:83:8b:04:c4:
4e:9b:9c:17:94:ad:d6:fd:c2:c7:33:9d:4c:a6:40:47:a1:ee:
a5:75:95:9b:c8:2f:4f:95:08:92:a2:15:f4:be:d7:bb:a8:69:
b6:6a:9f:8f:a5:28:92:72:5e:75:be:fd:89:48:8a:e5:5b:f7:
e4:04:63:63:14:a8:cb:16:63:33:a4:f3:6a:c1:5e:dd:fe:d3:
86:5a:4b:89:c4:4e:ae:99:cc:65:0b:b8:14:04:df:f5:36:a7:
bd:37:3c:96:7d:a1:a8:35:99:85:0c:78:3f:be:36:de:b2:28:
fb:56:5b:49:55:14:11:9d:1f:27:b3:b6:8e:3d:ae:8b:6d:81:
f9:c9:1d:f0:5f:c6:26:5d:55:8c:70:23:18:2e:23:1b:a2:f0:
08:24:e0:60:11:0f:83:74:0f:71:c6:e7:b1:60:65:8f:2f:4f:
34:1f:90:04:f1:76:c8:20:4f:ac:77:e8:b6:2c:94:68:68:92:
67:aa:8f:f4:82:42:6f:97:f7:4f:73:1b:7d:86:20:72:80:42:
3e:15:1d:8b:a6:b8:12:fa:8f:83:8c:c7:ff:e3:6b:aa:66:2c:
2b:e9:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:19:22 2024 by rpki-client on console-ams.rpki-client.org