Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aRah5jCpMdxjeAJah-WD2oCeJL0.roa
File: aRah5jCpMdxjeAJah-WD2oCeJL0.roa (raw, json)
Hash identifier: oRSB9fYNZgk/Ud7ZwVCiQS69KLsxQI0alIHptaT1YWE=
Subject key identifier: 69:16:A1:E6:30:A9:31:DC:63:78:02:5A:87:E5:83:DA:80:9E:24:BD
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018597DA38D205C02BB6FD3807E28E3750B0
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aRah5jCpMdxjeAJah-WD2oCeJL0.roa
Signing time: Mon 09 Jan 2023 18:45:39 +0000
ROA not before: Mon 09 Jan 2023 18:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395517
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Feb 2023 10:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:da:38:d2:05:c0:2b:b6:fd:38:07:e2:8e:37:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 9 18:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6916a1e630a931dc6378025a87e583da809e24bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:7d:94:98:d8:71:80:65:64:23:b5:8a:5a:
27:03:6a:b8:f2:8b:6b:98:95:ba:ed:4f:5d:66:59:
99:8b:98:da:21:ae:b4:be:dc:dd:dd:46:eb:4d:80:
25:5d:53:27:62:3c:1f:9c:78:76:40:ed:a8:e7:1a:
f9:f0:3a:00:70:70:d3:13:4a:b9:1c:36:03:95:93:
cd:dd:2d:64:b7:f2:a8:a7:c4:97:e0:fb:c7:df:5b:
15:66:24:51:f6:5f:a6:1e:45:11:73:5c:0c:a6:4b:
b8:14:73:1c:cd:58:88:65:e5:81:1b:34:0e:fb:17:
c1:13:18:da:db:83:c1:e4:8e:69:2d:6c:52:6c:1f:
9b:95:53:ce:a2:5c:4d:b1:a6:6d:b5:24:fc:89:79:
ea:99:7f:6f:47:08:1e:a7:d8:a3:60:5c:c8:01:c5:
a4:c4:e2:4c:d8:fa:8f:7f:8c:98:f8:cf:bb:1c:f5:
66:7c:f9:2f:47:57:67:58:a5:e4:23:67:35:9d:15:
d0:03:59:ff:7e:54:88:9b:16:54:bc:fc:c1:4f:3c:
1a:c8:7b:fc:13:9f:92:58:c4:ae:6c:a0:05:97:f0:
09:8e:97:5e:02:47:5d:14:8a:5e:85:2a:f8:fd:23:
2a:d9:b2:db:e3:12:b1:95:06:f4:01:6d:2c:92:69:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:A1:E6:30:A9:31:DC:63:78:02:5A:87:E5:83:DA:80:9E:24:BD
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aRah5jCpMdxjeAJah-WD2oCeJL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f3:a1:69:a0:74:8d:bf:44:40:09:d5:1a:21:ee:89:69:45:
b8:03:5b:d2:81:d8:40:33:2b:1a:2f:b5:6c:b2:76:e5:2d:43:
cf:44:25:b6:8c:2b:6d:e3:94:4d:b2:41:7b:99:17:c2:0d:96:
15:a9:d6:a8:12:a7:53:5d:1f:dd:0f:31:1c:ff:42:e2:fa:64:
0a:d4:6d:f9:16:54:18:f7:26:e5:c0:3f:25:94:6c:e2:49:70:
14:41:e9:f2:77:61:fe:e4:cb:e5:eb:27:7c:fc:68:f1:13:45:
4b:11:0d:e0:24:03:b1:10:fd:00:58:f7:17:6f:88:a4:3e:0c:
89:2f:66:e2:e3:c7:42:20:e7:95:f0:b0:c2:a8:4f:ac:e4:4b:
17:9a:d9:6a:5a:4c:96:1e:5b:e5:b5:b2:9d:ef:63:6f:2e:f9:
63:90:c0:3a:ae:ec:55:81:66:e3:eb:cc:ca:59:b1:19:46:d6:
b9:78:b3:66:34:b5:69:db:f4:0d:83:f2:e8:05:ca:7b:28:17:
cf:1f:ae:c7:c2:fc:71:a0:0b:64:db:ab:80:14:cd:14:f6:6d:
f8:64:56:7e:15:32:96:c1:da:0f:4d:bf:02:1d:e2:f3:09:cf:
3f:4c:cf:8f:46:08:cf:c6:c4:fd:e3:ba:21:03:9f:0f:40:a3:
77:f3:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org