Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/b_ATQEpuv4HPDb_iH9OkNs5SsVE.roa
File: b_ATQEpuv4HPDb_iH9OkNs5SsVE.roa (raw, json)
Hash identifier: DC8lLi1pfJH97HGc2fDTjxNdTJ8p742IkQCZgqorYDU=
Subject key identifier: 6F:F0:13:40:4A:6E:BF:81:CF:0D:BF:E2:1F:D3:A4:36:CE:52:B1:51
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A622A6B48C8F9D7957D204F2F52A4
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/b_ATQEpuv4HPDb_iH9OkNs5SsVE.roa
Signing time: Sun 01 Jan 2023 08:54:46 +0000
ROA not before: Sun 01 Jan 2023 08:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 07:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:62:2a:6b:48:c8:f9:d7:95:7d:20:4f:2f:52:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ff013404a6ebf81cf0dbfe21fd3a436ce52b151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:82:2b:09:4c:41:85:f7:92:96:3d:e6:8b:
7a:46:ef:c9:e5:35:37:5c:b5:9d:58:4b:2d:3b:60:
96:1e:56:8c:ce:16:ea:2a:d8:c0:db:cf:ab:b6:22:
81:d1:1a:21:1c:10:e1:fb:0b:6a:00:7b:5f:a1:75:
e3:08:cd:45:52:a9:e7:e2:1a:38:7f:35:2d:c6:77:
61:8d:91:35:f7:73:cc:18:20:d1:4d:c2:6c:47:71:
ee:7a:e6:61:6a:07:51:fe:d5:42:14:f6:f2:e8:86:
eb:4c:a7:8c:58:2f:30:0f:c2:d0:77:47:dd:1e:55:
b4:1d:15:d3:2f:0e:99:b3:0d:ef:ab:3b:fc:34:97:
90:b0:30:09:5c:e1:a7:f1:23:20:99:1b:b8:0f:6b:
c9:ea:56:71:0d:90:cf:3f:32:e5:48:3a:f3:4c:6e:
43:76:43:47:99:6c:2e:c7:63:bc:d3:75:1d:15:7c:
05:d6:89:09:01:3e:4b:39:3a:ed:20:de:7e:a7:1e:
3d:29:6d:6e:22:d0:5e:52:d1:df:19:9c:28:ba:bb:
40:25:f9:1e:5d:d8:1e:06:47:1e:db:b5:2c:63:4a:
38:ef:6e:03:38:e8:30:87:b2:c9:2c:97:bc:bb:87:
a2:94:ed:ae:71:3f:b5:61:07:2f:5e:bd:a5:2c:08:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:13:40:4A:6E:BF:81:CF:0D:BF:E2:1F:D3:A4:36:CE:52:B1:51
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/b_ATQEpuv4HPDb_iH9OkNs5SsVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:36:a0:ba:fc:08:0e:6e:4d:7a:8d:13:d8:f7:e0:93:da:f4:
de:50:5c:39:6a:33:93:af:28:1c:f5:e0:06:2a:17:7b:44:3c:
49:71:aa:23:2d:7c:88:53:4e:46:d3:2b:c0:5c:51:11:27:9a:
bf:cc:0b:6c:d0:37:30:7a:51:8e:62:6d:bd:83:e9:5c:a8:d6:
d9:2b:b2:ab:40:91:24:a7:89:cd:da:d2:f7:66:80:93:96:de:
a5:29:dd:06:68:d8:ae:5e:ff:9f:80:a8:c1:c6:b7:75:e9:48:
c9:b6:64:c1:05:83:2b:45:ee:fa:14:ee:9f:2a:05:ec:31:3a:
04:21:ab:8c:37:a6:46:af:0a:93:fd:8f:4c:a0:9e:f4:ba:01:
10:29:61:62:68:08:a6:81:1b:8f:99:52:ac:3b:eb:da:b2:90:
81:ca:ae:49:2c:80:a1:d6:26:c6:ac:d8:c4:c5:27:d1:01:ed:
b6:db:bb:8f:9d:37:dc:9f:0d:3a:f3:7a:03:23:4a:72:17:02:
b7:eb:7d:71:f1:f7:94:d6:c2:58:e4:9e:5a:0c:64:76:8d:fc:
aa:e1:6b:3f:c3:70:3b:12:66:58:28:c1:45:93:16:5a:0b:36:
67:7e:db:2f:f2:a5:b6:88:19:0f:da:5a:86:1d:72:e5:3e:97:
ad:69:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org