Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/_NB4GbIVvFM0CB7LaVFBGC6jocA.roa
File: _NB4GbIVvFM0CB7LaVFBGC6jocA.roa (raw, json)
Hash identifier: eoCHMsrci7aSRM2ZZsRjZPMcBe64Uz+OPAqqA1B7amM=
Subject key identifier: FC:D0:78:19:B2:15:BC:53:34:08:1E:CB:69:51:41:18:2E:A3:A1:C0
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018A1CCB14CB586111461AE9E6BAC032C8EA
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/_NB4GbIVvFM0CB7LaVFBGC6jocA.roa
Signing time: Tue 22 Aug 2023 10:29:45 +0000
ROA not before: Tue 22 Aug 2023 10:29:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:cb:14:cb:58:61:11:46:1a:e9:e6:ba:c0:32:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 22 10:29:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd07819b215bc5334081ecb695141182ea3a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:3f:1a:09:14:0a:d3:b2:d8:b6:a4:c8:d2:
34:38:b2:e7:c8:9b:b4:60:4e:ff:f2:a1:12:79:54:
5a:b4:0a:2b:83:57:6a:56:49:65:00:e1:70:ab:06:
65:d1:2c:2b:b7:22:40:47:1e:bd:f5:d4:68:c1:dc:
5c:dd:42:3f:91:7e:f0:9e:ea:64:68:a0:54:e1:aa:
f7:a2:4c:b8:21:91:cd:2a:1a:80:60:f7:ae:c6:22:
de:0a:42:45:25:b6:52:6b:0b:2f:ca:88:e1:4f:04:
9c:35:02:d0:e3:4f:e3:ba:2d:6c:2f:48:d9:e1:6f:
c1:33:f9:79:95:ac:2e:e5:c0:3c:6b:26:b0:57:03:
99:7e:a8:00:85:a4:8d:29:68:43:a2:94:7c:fc:0e:
39:72:b3:90:3c:90:44:31:68:15:73:31:b3:7e:c7:
ee:e6:49:3f:23:6c:c4:fd:3c:98:8a:4d:46:45:b5:
7d:be:fb:d7:2e:5b:04:94:d7:89:19:f4:3c:c7:42:
a4:dc:9f:32:5b:ac:c1:68:a3:dc:e0:70:25:28:7e:
9e:ea:cc:10:78:07:4c:f3:b3:6d:e6:d5:85:67:70:
0e:fd:73:be:3a:2e:ea:2e:82:f6:87:0d:bc:51:7f:
df:8c:e4:09:ee:5c:8b:5d:62:d0:75:9f:ff:b6:01:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:78:19:B2:15:BC:53:34:08:1E:CB:69:51:41:18:2E:A3:A1:C0
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/_NB4GbIVvFM0CB7LaVFBGC6jocA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7f:11:e5:9a:b9:3c:e8:bb:99:0a:84:fc:49:48:8e:f4:5c:
e0:7a:f1:6a:b9:7a:0d:24:63:7e:3b:de:7e:e8:b0:e6:62:7c:
43:2a:56:df:ed:32:e4:4b:67:ff:f5:70:28:90:74:6b:8f:24:
cf:b4:cf:21:16:e3:50:b2:84:d6:39:1d:df:fb:be:99:2a:63:
a1:fd:c5:aa:0e:9f:2d:56:8d:23:da:73:7a:32:d8:cc:c4:0a:
02:c8:44:9c:25:fa:ac:08:30:9e:b4:89:71:30:d5:a0:e0:52:
ff:a8:2c:dc:b7:2c:b4:5d:c3:98:3a:ce:47:39:a9:76:ff:e8:
10:6d:2a:34:38:39:e9:a1:8a:fb:61:af:ae:f9:0f:3a:eb:17:
10:90:5f:74:ae:75:f1:fe:24:eb:26:0e:71:bd:70:25:b4:47:
a6:99:e4:f0:14:b4:c6:69:7c:66:f3:9c:cc:5f:0c:db:d4:75:
5c:c1:0c:6f:0a:74:8b:1e:5d:42:16:c4:8c:a3:96:75:0e:86:
fc:62:8b:bc:03:17:ce:13:24:ea:58:b5:df:8b:bb:ba:38:c3:
c3:10:1b:1f:0a:8f:11:e4:4c:3f:30:41:01:19:2c:00:b5:7d:
37:91:76:d6:88:eb:f3:9e:b8:60:3f:a8:2f:6d:83:cc:ab:ee:
11:ba:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 11:47:03 2023 by rpki-client on console-fra.rpki-client.org