Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/S0jZU4KN_2yakxX22Pn-oLhl9FE.roa
File: S0jZU4KN_2yakxX22Pn-oLhl9FE.roa (raw, json)
Hash identifier: 5/jc9XV363ZHCW6gQoD5ljnKjzRq0NSCH6fWV/fbnh0=
Subject key identifier: 4B:48:D9:53:82:8D:FF:6C:9A:93:15:F6:D8:F9:FE:A0:B8:65:F4:51
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5D5E41CFCA86959EF861A8FB3FA5
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/S0jZU4KN_2yakxX22Pn-oLhl9FE.roa
Signing time: Sun 01 Jan 2023 08:54:45 +0000
ROA not before: Sun 01 Jan 2023 08:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jan 2023 15:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:5d:5e:41:cf:ca:86:95:9e:f8:61:a8:fb:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b48d953828dff6c9a9315f6d8f9fea0b865f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:f4:d2:92:54:b9:82:b9:43:80:7c:92:e1:
d6:d8:42:f1:d5:8e:a4:1e:70:93:93:a9:e6:17:68:
1a:9f:03:c8:ee:af:96:44:54:9f:dc:38:87:c5:55:
09:18:24:46:ad:4a:14:c8:e9:b9:08:60:01:e6:ae:
8b:fe:49:48:cf:b8:af:21:16:94:b4:6a:ce:29:b8:
e8:9d:0e:df:d1:b9:18:a5:58:6b:28:75:b2:72:49:
8b:be:85:56:62:a6:a1:a1:e0:ca:d7:45:fe:7a:df:
0a:58:08:48:0c:82:f0:b5:ad:b1:da:fd:f1:56:37:
1e:d2:dc:06:61:45:e8:1f:00:41:37:cc:1c:a9:1c:
67:5f:41:4f:33:82:0b:64:dc:b6:33:d8:b4:83:8e:
0c:8e:db:9d:7f:0a:b7:70:ae:42:ea:d3:b9:e2:0e:
f2:b5:15:f6:66:df:11:63:b9:9d:9e:4d:e1:54:8c:
99:63:dc:55:34:cf:13:bb:f8:e4:8e:4b:2b:6f:f8:
84:7f:ae:d8:db:26:7d:0e:b4:57:23:78:b2:c5:85:
95:b9:db:01:70:e4:c3:ff:84:a8:39:58:a7:1b:2c:
96:cd:d3:98:76:26:64:ca:ce:74:fc:3c:53:7b:eb:
b5:ca:06:78:ec:4e:57:aa:4c:ff:f6:1e:b4:61:32:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:D9:53:82:8D:FF:6C:9A:93:15:F6:D8:F9:FE:A0:B8:65:F4:51
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/S0jZU4KN_2yakxX22Pn-oLhl9FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f9:4f:c6:4a:e7:f7:52:3e:72:9b:42:98:c6:26:72:7b:c3:
2b:7c:2e:25:f2:b2:b5:0c:9f:b2:87:93:09:2d:5e:b1:b7:cd:
81:13:0c:4a:91:82:66:5b:36:9f:44:a8:1c:aa:01:28:05:c8:
55:4d:92:95:26:9a:10:32:6c:d2:7d:37:d7:8a:02:9b:57:cd:
e2:d5:a0:b1:0c:7d:68:e1:ff:e0:55:63:1c:10:6d:c2:38:8f:
0a:80:65:7c:42:56:16:0e:30:8b:6a:82:25:2a:b5:a9:07:80:
62:62:71:05:8e:f5:91:7e:70:58:bd:6c:27:12:89:95:34:fa:
8f:ac:c0:5a:7b:83:5d:0c:03:cb:db:d9:16:c6:d7:29:a6:31:
82:50:be:b4:12:fc:3e:f2:3a:75:88:98:76:88:76:23:d2:61:
4b:1c:31:4b:85:27:be:3d:96:9b:b1:af:0f:7f:6f:58:2a:d9:
af:5f:35:8b:0c:c0:fd:90:08:aa:5c:72:1e:0c:14:52:fa:10:
2a:36:a3:f3:6d:46:0c:38:20:e7:45:4d:90:b1:a1:53:96:c0:
17:68:38:13:5f:e9:50:a9:48:b6:b5:67:2a:1e:b8:61:a4:91:
84:34:19:ed:fb:fe:de:cc:1e:53:d4:31:85:35:d1:d5:aa:53:
71:dc:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org