Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ZC-TN8Ohz6pldfl-5gKlOQnh9Lw.roa
File: ZC-TN8Ohz6pldfl-5gKlOQnh9Lw.roa (raw, json)
Hash identifier: 9+qN80hoT8lRtHE92UOIIHbQuz2ok1W8rbbHF5Ofqc8=
Subject key identifier: 64:2F:93:37:C3:A1:CF:AA:65:75:F9:7E:E6:02:A5:39:09:E1:F4:BC
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A604EB2E76EA2639AC4A6D257AD72
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ZC-TN8Ohz6pldfl-5gKlOQnh9Lw.roa
Signing time: Sun 01 Jan 2023 08:54:45 +0000
ROA not before: Sun 01 Jan 2023 08:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 87.248.133.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jan 2023 15:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:60:4e:b2:e7:6e:a2:63:9a:c4:a6:d2:57:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642f9337c3a1cfaa6575f97ee602a53909e1f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:7b:cf:fb:2b:f5:f1:09:a8:35:5b:ae:62:
11:fc:43:16:27:cf:cc:27:ad:e1:1d:c8:b0:73:ce:
16:65:99:d8:f8:39:d1:17:f6:65:c2:37:0e:05:2e:
fe:dd:ea:de:1c:28:1e:22:39:1b:ef:d4:39:c8:1b:
8d:78:06:3d:8c:00:a6:7d:31:f8:20:c2:03:a4:fd:
87:4f:9d:8a:14:9c:56:c3:e4:a2:e3:2c:99:58:56:
61:9e:85:a7:88:e9:0f:8b:90:64:aa:73:82:b9:e5:
6d:74:bb:02:8d:a2:9b:ec:f2:e0:d0:e5:72:99:71:
eb:66:ed:07:94:25:d2:3b:70:86:7e:2b:7b:91:8d:
7c:e8:32:bf:a0:02:ee:c2:b0:51:30:f6:06:77:c5:
7a:e2:7c:3c:31:8d:6f:5a:f6:56:17:e5:f0:62:d6:
1f:42:be:e9:57:dc:86:9f:9a:b5:ac:52:db:0d:c1:
48:7e:be:fa:85:18:13:d1:80:33:b8:87:e8:80:26:
37:fe:ba:4a:07:6d:f6:3a:6b:49:46:59:bb:9d:37:
e0:6b:02:93:0c:9a:df:82:d2:7d:7b:ce:85:4f:91:
35:d0:c6:44:7f:d7:df:db:92:6f:2a:2c:8b:55:3a:
ca:c9:2d:43:c3:41:2a:9b:c7:25:d5:e6:68:3e:b3:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:93:37:C3:A1:CF:AA:65:75:F9:7E:E6:02:A5:39:09:E1:F4:BC
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ZC-TN8Ohz6pldfl-5gKlOQnh9Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
87.248.151.0/24
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
49:45:f9:18:e9:14:f9:6b:99:43:1f:68:7e:a4:a0:34:08:d2:
2f:55:c0:45:21:8d:59:f2:13:74:12:e2:af:d4:30:79:66:7e:
3d:a6:3f:c8:bc:3a:c8:68:5c:48:6f:2d:c6:e4:9c:bf:ca:8e:
fb:9f:59:30:50:38:ed:d4:4d:1b:b0:b4:5b:9f:e0:60:a8:98:
e2:f2:81:2a:06:d6:bd:97:cf:29:33:11:70:ab:a2:51:58:11:
fe:07:08:ad:12:8c:a1:fb:a0:0d:a3:c5:84:47:b2:b3:e2:50:
bd:76:80:24:56:be:4d:b5:39:9c:8a:16:ee:cd:0c:78:34:04:
6e:09:de:0b:b5:e0:9e:a1:60:5e:4e:6f:aa:40:a5:d2:4d:ad:
72:ac:bd:b0:42:0b:ed:48:58:4e:7a:b9:1d:bb:cc:5f:28:55:
34:64:39:fa:40:ac:dc:4e:4e:76:5b:ec:1b:05:f7:20:68:47:
c2:c7:9d:f2:7d:03:dc:6b:b6:f4:62:19:95:21:25:1f:43:64:
0c:b6:7f:22:27:5f:7f:41:fd:f1:16:1c:9d:72:ec:13:b5:ff:
88:89:0c:fd:0b:cc:d5:93:fe:00:c7:54:e1:31:0e:63:b8:3b:
e4:ba:f2:4b:b7:b6:03:02:fe:45:1c:0e:dc:c1:33:ad:bc:ad:
2a:47:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org