Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LF2OqVXo_ydXd7c5ELu8a8GHAIs.roa
File: LF2OqVXo_ydXd7c5ELu8a8GHAIs.roa (raw, json)
Hash identifier: 3On0xW0tZrYvFpMjSGs6FL2Zlm0p0XBAcy7P24ooyy8=
Subject key identifier: 2C:5D:8E:A9:55:E8:FF:27:57:77:B7:39:10:BB:BC:6B:C1:87:00:8B
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018837F68C683B99A249365B76020988F3CA
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LF2OqVXo_ydXd7c5ELu8a8GHAIs.roa
Signing time: Sat 20 May 2023 07:01:24 +0000
ROA not before: Sat 20 May 2023 07:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 May 2023 09:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:f6:8c:68:3b:99:a2:49:36:5b:76:02:09:88:f3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 20 07:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5d8ea955e8ff275777b73910bbbc6bc187008b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:25:04:a1:8d:de:3b:a1:99:fb:f2:aa:04:
5e:9f:e6:4e:aa:fd:5e:10:82:6a:fb:85:62:69:4c:
31:6f:b4:54:61:2e:fc:b5:d9:56:f1:fb:cd:47:b9:
25:5a:0a:39:d4:0a:b5:e6:70:d8:28:2a:55:ed:82:
4e:13:9a:ec:cb:33:fd:77:91:a9:c7:be:6f:69:cd:
5c:0e:53:b9:14:4c:3c:28:46:7e:ad:7e:5a:46:ac:
5e:96:f5:f6:75:a1:97:81:3a:18:a3:98:b6:7d:e6:
bb:72:f3:05:38:e2:20:dc:be:d9:6a:9d:77:c2:72:
e9:d4:8c:7a:c3:06:b1:d0:7a:77:50:bb:40:22:19:
7e:2e:2e:95:cd:cc:29:4a:37:26:33:b8:15:d1:00:
f1:53:bb:8c:bb:f9:2b:98:f5:78:11:c3:b6:38:0c:
fd:1d:b7:9e:94:5b:61:4e:74:87:55:fe:e2:83:98:
9f:be:57:12:88:d7:41:c4:5c:5c:d4:43:3a:77:f4:
d0:ef:52:cd:cb:3d:a7:9e:8c:3c:35:96:25:cd:7e:
bb:b4:9d:32:ea:0a:5d:5d:b5:89:41:b1:52:cf:36:
63:98:67:2f:f1:8c:cb:a6:6b:07:ef:31:2f:8d:e5:
1c:f5:d0:93:6c:e1:82:89:ac:b9:d1:6b:65:ba:3d:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:8E:A9:55:E8:FF:27:57:77:B7:39:10:BB:BC:6B:C1:87:00:8B
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LF2OqVXo_ydXd7c5ELu8a8GHAIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b4:2b:ff:9a:05:2c:35:1d:ab:0b:59:dd:83:9d:e8:c8:9d:
9d:46:0b:31:88:cf:c4:5a:b4:7a:32:a5:02:3a:a2:96:0f:e3:
db:87:98:aa:a5:5b:da:23:0e:10:28:63:d9:8c:87:c9:43:ed:
02:b0:34:f2:f4:6a:60:e3:2c:41:cf:91:f6:00:29:fa:de:88:
ee:8e:ca:2c:9a:dd:0d:80:12:21:50:43:55:b0:dd:d8:c4:f2:
ae:7a:53:df:49:2f:81:7e:67:fe:f8:a8:09:58:6a:f8:89:19:
6d:99:14:89:fa:e7:35:19:b6:82:ea:b0:82:3c:e9:11:75:c2:
b2:27:50:87:c1:dc:bb:c5:66:a7:4d:b1:8c:2f:1a:14:17:4b:
7f:43:df:3f:0f:21:64:60:01:70:c6:04:f2:95:f6:54:fb:88:
bf:ea:e1:16:38:b3:74:1e:02:af:cd:17:43:a6:ff:6c:e0:68:
60:96:ea:04:8d:19:94:57:d3:84:f4:ed:96:b8:bd:69:2e:2c:
8a:ce:64:85:4d:95:1d:a0:12:e7:a2:93:c0:dc:26:68:b8:fd:
1c:4c:c0:72:c5:01:a2:6c:3c:6d:77:32:70:0e:49:c1:dc:e2:
e0:d3:4d:85:64:de:bf:8d:fe:61:32:db:ec:8b:2a:d6:d9:c7:
f3:7c:9d:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYg39oxoO5miSTZbdgIJiPPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwNTIwMDcwMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzVkOGVhOTU1ZThmZjI3NTc3N2I3MzkxMGJiYmM2YmMxODcwMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitslBKGN3juhmfvyqgRen+ZOqv1e
EIJq+4ViaUwxb7RUYS78tdlW8fvNR7klWgo51Aq15nDYKCpV7YJOE5rsyzP9d5Gp
x75vac1cDlO5FEw8KEZ+rX5aRqxelvX2daGXgToYo5i2fea7cvMFOOIg3L7Zap13
wnLp1Ix6wwax0Hp3ULtAIhl+Li6VzcwpSjcmM7gV0QDxU7uMu/krmPV4EcO2OAz9
HbeelFthTnSHVf7ig5ifvlcSiNdBxFxc1EM6d/TQ71LNyz2nnow8NZYlzX67tJ0y
6gpdXbWJQbFSzzZjmGcv8YzLpmsH7zEvjeUc9dCTbOGCiay50Wtluj3kCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCxdjqlV6P8nV3e3ORC7vGvBhwCLMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvTEYyT3FWWG9feWRYZDdjNUVMdThhOEdIQUlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iCAwQA
V/iJMA0GCSqGSIb3DQEBCwUAA4IBAQButCv/mgUsNR2rC1ndg53oyJ2dRgsxiM/E
WrR6MqUCOqKWD+Pbh5iqpVvaIw4QKGPZjIfJQ+0CsDTy9Gpg4yxBz5H2ACn63oju
jsosmt0NgBIhUENVsN3YxPKuelPfSS+Bfmf++KgJWGr4iRltmRSJ+uc1GbaC6rCC
POkRdcKyJ1CHwdy7xWanTbGMLxoUF0t/Q98/DyFkYAFwxgTylfZU+4i/6uEWOLN0
HgKvzRdDpv9s4GhgluoEjRmUV9OE9O2WuL1pLiyKzmSFTZUdoBLnopPA3CZouP0c
TMByxQGibDxtdzJwDknB3OLg002FZN6/jf5hMtvsiyrW2cfzfJ1n
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org