Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d0Jzg-Hfm7CXBhy72-YurdZ7zEM.roa
File: d0Jzg-Hfm7CXBhy72-YurdZ7zEM.roa (raw, json)
Hash identifier: Q5ffSD0SA0e5q2Wp0UN2PiX6CtnMzo4cFcc0t/o56zs=
Subject key identifier: 77:42:73:83:E1:DF:9B:B0:97:06:1C:BB:DB:E6:2E:AD:D6:7B:CC:43
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A54E86D5D44465DB415DED024F293
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d0Jzg-Hfm7CXBhy72-YurdZ7zEM.roa
Signing time: Sun 01 Jan 2023 08:54:43 +0000
ROA not before: Sun 01 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 87.248.134.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:54:e8:6d:5d:44:46:5d:b4:15:de:d0:24:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77427383e1df9bb097061cbbdbe62eadd67bcc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:89:34:9b:e1:9c:ae:15:a9:05:72:e8:98:
25:98:2d:58:56:df:ae:44:be:d1:bf:3f:2b:9c:25:
2b:ed:e3:85:54:a7:1f:04:b0:04:5b:21:7e:95:d2:
23:a3:4d:9c:83:c7:77:19:4b:60:45:ac:37:2f:35:
4f:b4:6d:aa:ac:cb:54:f8:a4:9d:3c:d0:68:80:08:
7e:6e:55:aa:61:3f:15:5e:78:0d:12:33:5c:b2:78:
67:a9:08:d6:da:21:22:de:e3:07:06:48:8e:9d:df:
8b:7f:f4:6b:4a:e8:26:03:80:03:61:42:9c:5a:46:
41:c0:56:9c:2e:5f:42:ae:fe:5c:13:f3:62:39:84:
d1:b0:18:d5:bf:56:ee:9f:1b:74:c3:d2:fa:52:dd:
24:a7:68:35:0a:89:1c:a9:12:e2:7c:b3:a2:d7:55:
99:7d:bd:f7:f1:fd:7d:b9:9b:60:e9:f8:02:e3:43:
b4:a4:a9:08:9e:27:49:ad:22:f8:c7:ec:57:cb:63:
13:07:93:63:27:10:ea:1c:63:35:c8:70:49:f4:94:
e1:37:12:23:ba:8a:02:65:dc:8c:9e:f4:f9:38:fd:
1f:bc:fd:65:a1:c8:37:f0:b0:fd:98:6e:25:29:38:
97:4c:51:7c:d2:58:62:08:59:00:ee:b6:f7:f2:83:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:73:83:E1:DF:9B:B0:97:06:1C:BB:DB:E6:2E:AD:D6:7B:CC:43
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d0Jzg-Hfm7CXBhy72-YurdZ7zEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:15:e4:f7:85:04:3a:8c:49:18:2e:95:c1:40:87:f8:da:2e:
c7:bd:bd:3d:61:02:0d:0d:af:4e:75:5b:c8:3c:da:0d:3a:a6:
a7:e8:e3:3a:6e:f8:f4:c1:09:16:6d:1a:b5:0e:09:47:fa:bd:
33:8f:77:ca:19:e4:a8:6a:d2:89:a4:b4:fb:88:79:5e:2e:c7:
c4:c0:df:bb:aa:25:b8:30:b8:e2:e5:6c:84:3b:f1:86:5f:9b:
c3:ff:30:5b:fd:e9:8e:57:5d:32:15:30:50:b6:17:d1:f0:88:
04:0c:94:95:24:e1:36:b0:31:a1:8a:61:9b:fa:a9:4b:c6:1b:
70:ba:1e:0c:6a:32:7a:78:87:8a:11:b4:c8:61:7b:b0:ed:09:
bf:ed:42:33:f6:2f:13:2d:9e:f5:a1:fe:4d:24:5b:38:7b:c0:
cc:26:e4:73:ff:a8:94:48:95:28:cc:ec:4c:38:85:f8:73:9e:
9d:56:26:5f:64:c9:29:1b:23:21:71:cd:50:b9:7d:ec:3c:91:
c6:09:d2:bd:5c:5d:e9:ba:a3:34:a9:07:bb:5e:c3:d9:59:9e:
e4:b1:68:eb:90:89:42:4b:fa:44:20:8b:86:78:44:72:0b:ab:
3d:46:a8:33:7f:89:0b:68:18:9e:51:7d:9e:18:a0:e6:bd:30:
3c:81:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:19 2024 by rpki-client on console-fra.rpki-client.org