Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/NqzwlC5XKaLjYC9PP5mXJhw46VE.roa
File: NqzwlC5XKaLjYC9PP5mXJhw46VE.roa (raw, json)
Hash identifier: RXSfQkjezrcIlUgjf67fqFFWmKPMMte4sq3mYkMpYt0=
Subject key identifier: 36:AC:F0:94:2E:57:29:A2:E3:60:2F:4F:3F:99:97:26:1C:38:E9:51
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5A4696FEBCB81B3A8ABAB83B50FB
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/NqzwlC5XKaLjYC9PP5mXJhw46VE.roa
Signing time: Sun 01 Jan 2023 08:54:44 +0000
ROA not before: Sun 01 Jan 2023 08:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59962
IP address blocks: 87.248.140.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
87.248.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:5a:46:96:fe:bc:b8:1b:3a:8a:ba:b8:3b:50:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36acf0942e5729a2e3602f4f3f9997261c38e951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:fc:d5:2e:b0:3e:f1:50:3a:1c:8d:ea:ad:
3a:5f:79:bb:34:f1:bd:69:ea:1e:78:b7:46:1b:cb:
e5:df:99:8e:3a:b1:87:e4:1e:83:7e:fc:20:2f:61:
21:39:57:5e:5b:07:9b:ed:92:53:1b:5a:f3:34:3f:
50:11:9f:9a:ad:6b:c7:77:e7:dd:e2:e1:62:fd:ce:
d0:67:9f:10:4a:12:49:9a:27:bf:50:42:01:07:83:
fd:72:bf:a6:f9:7e:18:ef:cb:ed:16:84:35:47:06:
40:bb:9d:b9:89:b6:72:cd:93:ee:d3:6d:4c:38:4d:
ad:52:79:f7:69:86:d6:18:2a:69:5b:30:44:6b:e5:
b6:b9:e1:52:b2:f2:ca:4d:76:e3:a3:01:93:69:48:
eb:cf:8f:42:58:83:40:cf:c4:9c:37:39:b6:99:77:
e4:03:6f:fc:1d:9a:60:14:f4:c6:29:bf:bb:0d:24:
47:74:27:f7:4d:5a:5c:b4:f9:ae:cf:b6:bf:5c:a9:
7d:7b:b5:10:9e:82:1d:02:d0:fb:91:f9:0e:d9:07:
80:c1:cb:ae:33:16:1f:9a:02:ff:89:c9:53:33:63:
74:19:38:c8:8f:f7:14:4a:ec:37:03:91:e7:43:3b:
ee:6b:d8:01:93:34:11:d4:99:27:87:78:a1:69:bb:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:F0:94:2E:57:29:A2:E3:60:2F:4F:3F:99:97:26:1C:38:E9:51
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/NqzwlC5XKaLjYC9PP5mXJhw46VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0/23
87.248.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d5:24:a4:49:59:c3:7a:51:96:94:f2:35:97:ef:9a:ba:82:
e8:62:0d:c1:8f:55:7f:19:66:23:02:56:79:d3:01:26:05:7a:
10:55:6d:65:8e:c3:24:d0:fe:46:c7:0c:7a:56:f8:21:0d:99:
79:73:e8:34:5e:1c:61:50:61:54:5e:08:b6:40:a0:00:72:b9:
e6:ae:31:0b:ba:a3:fd:f8:a6:0c:c2:91:86:1a:bc:d4:0b:7d:
40:64:65:8f:24:c7:dd:fc:e1:23:c3:fc:41:96:32:6f:68:4b:
31:8e:07:4a:5d:f0:81:1b:e1:31:dd:5e:6f:f7:7e:93:2d:a9:
77:0f:bd:5c:bf:86:dd:2b:34:e2:4d:fa:65:cd:ab:c9:cf:e8:
52:b9:40:11:9d:cf:56:08:0c:d5:d2:ff:b3:2c:d5:cc:84:f9:
ea:cf:8c:c7:9b:c4:47:85:7b:e3:e0:54:5e:3e:d0:54:ab:f3:
43:91:a1:e1:90:0d:fe:c0:eb:99:87:e7:7a:fe:5a:e0:76:62:
cd:1c:d6:06:84:85:30:26:39:e6:bb:c4:44:8e:00:e1:47:3f:
40:fd:52:27:ce:45:ec:59:3b:ab:34:cb:e5:80:c7:38:7a:64:
da:89:1e:07:ff:f3:60:55:87:40:e5:3d:83:52:0b:44:7e:88:
29:0e:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:19 2024 by rpki-client on console-fra.rpki-client.org