Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/TygWD1ZQlooHbZ1c6cXkLEQnM7Q.roa
File: TygWD1ZQlooHbZ1c6cXkLEQnM7Q.roa (raw, json)
Hash identifier: +9/WfAOVbgXpAOvrzLf0caw4zsPlOzBDCfLsIXgvBD0=
Subject key identifier: 4F:28:16:0F:56:50:96:8A:07:6D:9D:5C:E9:C5:E4:2C:44:27:33:B4
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01895A4FE46A43B1B335818E9304D99F14CC
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/TygWD1ZQlooHbZ1c6cXkLEQnM7Q.roa
Signing time: Sat 15 Jul 2023 16:08:52 +0000
ROA not before: Sat 15 Jul 2023 16:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201703
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:4f:e4:6a:43:b1:b3:35:81:8e:93:04:d9:9f:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 15 16:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f28160f5650968a076d9d5ce9c5e42c442733b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:08:31:06:fa:13:d7:b9:9b:10:25:b8:07:
20:63:07:6d:53:d4:33:ec:49:c7:06:30:41:bf:48:
6f:5a:d9:f8:17:03:c7:28:e2:76:fc:eb:1e:67:78:
82:19:9f:58:95:2c:f7:74:2b:61:62:ec:23:74:e6:
c7:d4:0d:c1:03:62:13:f0:76:c7:cd:43:84:a4:8e:
6d:a6:14:e3:18:0f:8c:db:bf:09:8d:76:0f:f8:dd:
b8:d4:54:f1:54:0c:a0:c9:41:81:32:ee:c4:bf:9d:
7b:df:7f:c0:68:08:28:35:ce:ef:1c:ee:d9:b6:00:
39:4c:b2:56:c5:35:f6:e5:9b:0c:05:ad:78:b0:b2:
71:81:e1:64:e5:bc:45:0a:60:5e:cd:86:4d:7e:ff:
1a:ab:0e:06:f7:77:1b:77:b6:14:bf:83:ce:70:90:
da:c1:1f:1a:3f:f8:bf:75:6a:b2:cb:6e:9a:b3:96:
2c:12:cd:67:6d:38:6a:87:75:24:07:7e:8d:21:24:
c1:d4:83:4e:5e:dd:67:03:03:e0:58:80:4b:e1:cf:
22:82:ce:aa:ee:a6:38:9e:8e:66:9f:d9:a7:37:69:
ed:25:93:ae:ea:d3:e5:d8:56:a4:08:87:78:14:35:
b1:f5:e3:2b:d1:98:70:4c:ba:44:ab:8a:ae:94:c8:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:28:16:0F:56:50:96:8A:07:6D:9D:5C:E9:C5:E4:2C:44:27:33:B4
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/TygWD1ZQlooHbZ1c6cXkLEQnM7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d1:a2:92:b8:c0:86:55:b8:a0:97:62:02:b0:f6:1d:8d:60:
8b:66:fd:1f:33:0a:8c:c1:5d:c6:78:33:d9:9c:1a:89:80:a0:
84:f3:79:11:2d:d5:41:b4:c4:a8:bd:96:db:cc:0e:fd:b4:6e:
53:a3:79:40:7a:6f:ec:16:c5:51:5f:7c:c9:77:88:0b:fa:b8:
32:ba:14:5f:01:a5:a0:d5:85:33:da:97:5b:60:02:b4:56:c0:
5f:93:e0:d3:51:78:6d:77:b4:4e:a9:5f:eb:cd:62:03:e9:bd:
8d:5c:60:68:4c:03:d1:f9:5e:32:04:3c:ca:59:65:8f:66:b8:
d8:55:f3:5a:8f:de:05:e2:fd:3d:3a:6a:3a:fa:06:e8:fa:6b:
48:9c:42:16:8f:ca:e9:c3:79:c8:2b:7d:8f:39:b2:80:4b:61:
b2:4f:76:fd:4e:49:4a:1f:af:63:e8:72:1d:96:63:9c:60:dc:
8f:78:83:6c:1b:8e:84:56:42:af:b4:aa:8d:f1:bf:bb:18:1e:
c3:3f:2c:61:45:e2:51:51:d2:30:1c:61:cb:66:f6:a7:31:af:
5b:34:48:d7:74:41:2e:9d:6e:cc:e5:20:30:0a:b0:04:23:7e:
36:5a:2a:83:0e:10:4a:30:84:d5:51:4c:da:67:93:10:7b:ff:
30:d2:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 17:30:57 2023 by rpki-client on console-fra.rpki-client.org