Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aRTH0CgaredPus-FOi82X4RuFjI.roa
File: aRTH0CgaredPus-FOi82X4RuFjI.roa (raw, json)
Hash identifier: 3vb29SdoVh0gSQ8wn9Xn3ca/2nT62kpIfyOYUadkbgg=
Subject key identifier: 69:14:C7:D0:28:1A:AD:E7:4F:BA:CF:85:3A:2F:36:5F:84:6E:16:32
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A599AC22E7230573F37849E1466CF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aRTH0CgaredPus-FOi82X4RuFjI.roa
Signing time: Sun 01 Jan 2023 08:54:44 +0000
ROA not before: Sun 01 Jan 2023 08:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57511
IP address blocks: 87.248.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 08:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:59:9a:c2:2e:72:30:57:3f:37:84:9e:14:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6914c7d0281aade74fbacf853a2f365f846e1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:d7:d7:3f:18:a2:2a:4c:dc:65:33:00:1e:
4c:00:99:e0:bb:0f:25:2a:75:72:ed:4d:26:ba:71:
91:a2:a2:e2:a7:77:65:e8:6e:98:3a:c3:dd:07:38:
eb:9c:dc:50:4d:a5:c8:ff:50:f5:f7:ad:fb:78:29:
9f:e6:45:c3:54:12:1c:76:b1:c6:96:b9:d0:3b:45:
b1:90:d8:2e:10:c5:87:57:a2:43:db:fc:2b:de:50:
d2:02:48:7f:6c:30:8c:dc:1e:8e:f5:aa:ac:ec:fc:
9c:99:a7:43:c7:20:1d:c0:ba:14:57:ae:4e:65:24:
2a:16:da:41:5c:16:78:d9:ae:28:8e:64:c6:f2:c8:
49:d4:5f:6d:80:e1:e6:09:a8:14:2a:74:e3:a2:fc:
80:75:d8:8f:d6:eb:18:fa:3d:15:64:92:fd:fa:7c:
69:c0:bd:ce:fd:37:74:6c:38:31:89:e7:84:53:be:
e1:da:8e:c8:a9:8a:5a:5f:c8:88:3e:0c:31:93:27:
c3:1d:29:e4:36:7a:c1:1d:7b:0c:85:a0:47:d8:60:
2a:9c:37:c3:4e:7f:88:0d:9d:71:13:d6:c8:2d:95:
ab:b7:1c:89:cf:72:65:32:0f:d7:0c:10:0d:bb:06:
b0:92:88:51:a1:63:10:72:64:b2:5b:61:34:6b:88:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:C7:D0:28:1A:AD:E7:4F:BA:CF:85:3A:2F:36:5F:84:6E:16:32
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aRTH0CgaredPus-FOi82X4RuFjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:10:f6:aa:95:47:64:4c:89:09:44:81:16:00:55:c8:84:9a:
b5:23:80:c6:db:fa:61:af:b8:b6:58:d3:7c:75:14:e6:39:a0:
ac:b2:b4:8f:c2:d2:39:df:ec:b9:51:77:04:ad:c9:50:f1:ef:
06:4f:90:6b:fc:8a:1d:07:a8:9d:17:1d:17:16:7d:87:09:96:
86:d1:ff:12:91:fe:cf:ca:09:77:1f:97:20:0e:c3:b7:af:04:
cf:db:f0:11:1d:86:14:b6:8f:33:c2:7c:83:44:90:cf:b4:d2:
52:f1:64:f2:93:e2:16:da:5a:a9:02:5c:13:1c:b4:ef:54:25:
19:28:27:a6:7e:0b:b2:58:ae:2f:f0:b6:4b:f8:d3:34:41:55:
ea:b9:d8:a5:53:10:ba:74:cd:68:63:97:3a:1b:36:da:e5:c0:
d0:38:68:41:d2:1a:74:ca:6d:41:89:86:61:c3:e5:51:bf:97:
5d:c3:80:b9:df:13:a8:9e:75:35:18:8a:88:c3:97:fa:06:df:
16:71:ac:c1:55:27:49:6f:84:08:ad:dc:ce:2c:92:f9:cf:68:
0e:86:de:78:bd:31:d3:24:ee:8f:e3:dc:7f:38:f6:d8:e2:84:
68:48:8f:a8:36:46:62:0c:e7:04:86:f2:58:9a:e3:2b:0e:96:
ac:7f:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org