Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa
File: cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa (raw, json)
Hash identifier: +acnGWxqLT7kN7dBpWcuelMzTn4FoGAcZSdVVQglcG8=
Subject key identifier: 71:0F:5B:72:6F:CA:53:F6:62:8D:57:38:43:E3:E0:2C:7C:9C:50:66
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0187A0622E1840B68160A6965420FF13E6CF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa
Signing time: Thu 20 Apr 2023 20:36:41 +0000
ROA not before: Thu 20 Apr 2023 20:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 06:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:62:2e:18:40:b6:81:60:a6:96:54:20:ff:13:e6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 20 20:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=710f5b726fca53f6628d573843e3e02c7c9c5066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:dd:08:d3:07:79:fb:15:dc:dd:af:9e:d2:
9c:29:b6:e8:ee:c5:fd:65:5b:ab:6e:a0:fe:e7:3d:
c8:38:7a:57:05:73:3b:4d:d3:38:f6:d1:2b:8c:f9:
f1:9a:c0:76:1d:2f:db:8f:fe:83:5c:1d:b7:5b:a2:
92:52:b8:0a:62:ce:99:f4:10:1a:7b:35:fd:e1:4a:
1a:d8:cf:87:88:45:9b:94:a6:6d:7e:25:55:1a:d1:
f9:b4:b1:e5:9f:87:37:f1:fe:43:28:71:eb:cb:17:
5a:5e:1f:f4:4e:c6:01:31:ee:a7:71:f9:90:af:3a:
8f:8f:4c:09:3b:ee:27:da:e7:6f:4e:69:f1:59:9f:
0d:31:8f:ba:ee:f4:1c:2d:49:62:43:4b:07:eb:1d:
eb:8d:44:48:77:f8:dc:43:cb:df:51:56:7f:1c:d0:
f3:39:f1:ad:2b:e4:57:99:9c:a5:43:47:20:ab:b5:
f2:ab:d6:50:9d:62:3c:1e:95:3f:8a:35:40:db:85:
a8:e7:8d:7f:66:6b:12:e3:0c:eb:ae:7b:c1:3a:7f:
af:24:94:43:79:87:42:be:20:6e:14:bc:44:03:07:
cf:c3:10:58:e3:66:73:40:db:d4:4a:af:38:18:d5:
99:14:c9:88:ab:93:09:1c:e0:e2:8e:d2:89:1b:89:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:5B:72:6F:CA:53:F6:62:8D:57:38:43:E3:E0:2C:7C:9C:50:66
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cQ9bcm_KU_ZijVc4Q-PgLHycUGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fc:37:73:64:28:ac:5f:c8:37:37:67:6c:c6:50:00:33:ee:
c4:db:c9:6f:84:df:b7:9e:bf:08:7c:cb:02:52:15:a6:b9:2f:
26:3f:34:3d:3e:a6:72:f0:95:b3:d4:73:0a:87:06:d8:e9:9c:
ef:ca:b7:fd:46:65:a9:7f:e1:06:b5:e2:e0:fd:aa:65:f4:55:
c5:76:c3:77:e1:b6:71:29:6a:49:41:d8:fb:b5:14:0f:26:78:
77:b6:a5:8d:66:2f:34:38:fd:dd:4a:30:60:0a:bb:8d:06:93:
97:7c:bb:38:4d:b5:72:cb:3a:ca:cb:d9:b7:f7:ed:f6:ec:71:
14:38:79:50:5b:fb:3d:04:d9:74:80:6d:df:40:d9:db:9c:20:
c2:fc:24:fc:2f:b0:5b:9c:62:b1:04:21:f0:1c:7e:aa:40:20:
ad:e6:2f:2b:f9:07:85:b5:d5:23:f1:b1:41:c9:36:e1:54:4c:
d4:ee:2f:91:c3:5d:5e:f1:0c:23:5a:86:18:6f:f9:3b:d1:39:
5a:fe:51:65:4d:21:6c:14:89:38:41:d9:ae:6d:2e:0b:3e:1d:
24:e6:de:4d:cf:17:8d:b3:ad:e2:65:fb:34:64:79:a6:95:7f:
49:73:e7:f7:58:bf:f0:1c:42:fd:45:bc:46:ed:1a:69:ab:ab:
77:d3:b1:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYegYi4YQLaBYKaWVCD/E+bPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwNDIwMjAzNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTBmNWI3MjZmY2E1M2Y2NjI4ZDU3Mzg0M2UzZTAyYzdjOWM1MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbjdCNMHefsV3N2vntKcKbbo7sX9
ZVurbqD+5z3IOHpXBXM7TdM49tErjPnxmsB2HS/bj/6DXB23W6KSUrgKYs6Z9BAa
ezX94Uoa2M+HiEWblKZtfiVVGtH5tLHln4c38f5DKHHryxdaXh/0TsYBMe6ncfmQ
rzqPj0wJO+4n2udvTmnxWZ8NMY+67vQcLUliQ0sH6x3rjURId/jcQ8vfUVZ/HNDz
OfGtK+RXmZylQ0cgq7Xyq9ZQnWI8HpU/ijVA24Wo541/ZmsS4wzrrnvBOn+vJJRD
eYdCviBuFLxEAwfPwxBY42ZzQNvUSq84GNWZFMmIq5MJHODijtKJG4kWIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHEPW3JvylP2Yo1XOEPj4Cx8nFBmMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvY1E5YmNtX0tVX1ppalZjNFEtUGdMSHljVUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iJMA0G
CSqGSIb3DQEBCwUAA4IBAQBg/DdzZCisX8g3N2dsxlAAM+7E28lvhN+3nr8IfMsC
UhWmuS8mPzQ9PqZy8JWz1HMKhwbY6Zzvyrf9RmWpf+EGteLg/apl9FXFdsN34bZx
KWpJQdj7tRQPJnh3tqWNZi80OP3dSjBgCruNBpOXfLs4TbVyyzrKy9m39+327HEU
OHlQW/s9BNl0gG3fQNnbnCDC/CT8L7BbnGKxBCHwHH6qQCCt5i8r+QeFtdUj8bFB
yTbhVEzU7i+Rw11e8QwjWoYYb/k70Tla/lFlTSFsFIk4QdmubS4LPh0k5t5NzxeN
s63iZfs0ZHmmlX9Jc+f3WL/wHEL9RbxG7Rppq6t307FB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org