Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XJbQJhVoxOCc1Y1jz9xjhE40mC0.roa
File: XJbQJhVoxOCc1Y1jz9xjhE40mC0.roa (raw, json)
Hash identifier: CppUw5mNViTBLZcmLFvd6WN/+H3LysFCQyYJGDED5xk=
Subject key identifier: 5C:96:D0:26:15:68:C4:E0:9C:D5:8D:63:CF:DC:63:84:4E:34:98:2D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A547FEE11A1327C2387B1C595A099
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XJbQJhVoxOCc1Y1jz9xjhE40mC0.roa
Signing time: Sun 01 Jan 2023 08:54:42 +0000
ROA not before: Sun 01 Jan 2023 08:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 87.248.134.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:54:7f:ee:11:a1:32:7c:23:87:b1:c5:95:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c96d0261568c4e09cd58d63cfdc63844e34982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:a4:68:86:a6:7b:1c:7f:63:66:6f:17:6f:
11:ff:b5:c6:00:7e:ad:dc:ee:dc:59:0e:d3:b9:57:
72:a2:34:90:27:1a:5d:22:c8:2a:7e:9d:b8:5f:0a:
13:1d:2d:98:c4:72:6e:32:34:8b:79:35:ac:40:0f:
5d:9d:e9:3c:30:5e:79:1b:0a:3b:e2:10:b4:bd:f5:
bd:80:ba:4a:12:5a:55:83:b3:eb:46:2f:e4:2f:59:
34:63:ed:d4:72:4b:d3:2d:d0:72:d4:e6:dc:8d:8e:
4c:fe:55:5c:03:fa:3b:f3:1d:ab:47:3c:1b:c7:cc:
ab:10:5c:6d:d7:75:18:7d:ef:e4:7a:71:78:d7:97:
fe:96:85:6c:89:5b:a9:6f:a3:c5:0b:7f:4d:60:57:
9b:8e:e4:62:15:37:d7:60:6d:45:6b:6e:11:8e:45:
df:b1:2b:d7:78:9c:ab:21:c5:7a:1c:52:48:41:2f:
a9:f2:7e:d2:2a:fd:d7:73:ec:d6:72:ad:59:0e:36:
05:ce:f3:59:f2:ed:a3:a1:38:cc:6a:a7:bc:66:49:
46:7a:66:ca:cf:41:a5:26:31:cd:cb:86:d5:6e:0f:
15:50:10:85:0d:41:05:b7:a7:68:5a:b8:f8:dd:81:
38:c0:11:fc:b7:4d:ba:12:6f:53:52:ea:dc:f5:7c:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:D0:26:15:68:C4:E0:9C:D5:8D:63:CF:DC:63:84:4E:34:98:2D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XJbQJhVoxOCc1Y1jz9xjhE40mC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1a:bd:c1:ff:2c:78:5e:5f:bf:d5:db:82:58:b5:83:3b:60:
bf:56:bf:1a:1f:d3:b6:8e:11:3e:0f:de:e2:09:76:05:40:c1:
68:54:50:0c:e8:f1:42:20:83:35:55:35:94:81:29:3a:c3:a0:
62:fa:81:a5:22:e9:66:d1:41:eb:3d:e9:b3:6a:d8:90:ea:bb:
75:49:df:f1:61:2b:14:a0:e5:b2:a7:ae:b7:a5:22:19:dd:0d:
b5:87:a6:be:6d:96:c3:c2:db:b6:d0:93:c9:c3:46:9d:37:04:
fd:cc:bd:f8:e7:9f:be:29:fd:30:9d:84:e0:cc:c3:06:7e:58:
2a:20:5a:f4:ae:9b:96:95:a2:b8:67:97:76:60:76:1a:fd:9a:
aa:11:54:9f:51:81:b6:13:aa:23:1e:59:9c:ad:03:84:e6:b8:
41:c4:ff:7c:80:b3:23:41:de:0d:ed:8a:8d:18:0f:71:2d:4e:
b9:b2:ad:d9:0f:77:2e:ca:c9:77:25:0d:2c:85:e2:ba:a0:5d:
04:4a:c5:9f:4b:34:96:5a:18:40:d2:62:d5:be:f5:66:70:c1:
f6:71:29:2a:ba:9b:ca:32:79:97:ee:43:93:79:dd:50:82:2f:
d3:b6:31:6d:da:23:60:21:8e:31:fe:7e:44:dd:9d:de:1c:08:
7b:3c:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org