Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d7ZyqEs-G5FC0kW30VlstYJkMss.roa
File: d7ZyqEs-G5FC0kW30VlstYJkMss.roa (raw, json)
Hash identifier: LjAeZnQbflGH0PYVrJABi2jm6NKsIobC54hZov/xGo4=
Subject key identifier: 77:B6:72:A8:4B:3E:1B:91:42:D2:45:B7:D1:59:6C:B5:82:64:32:CB
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018910BD20711AFDB3B1CAC3091297B42410
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d7ZyqEs-G5FC0kW30VlstYJkMss.roa
Signing time: Sat 01 Jul 2023 09:16:17 +0000
ROA not before: Sat 01 Jul 2023 09:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.248.133.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 14:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:10:bd:20:71:1a:fd:b3:b1:ca:c3:09:12:97:b4:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 1 09:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77b672a84b3e1b9142d245b7d1596cb5826432cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:c6:29:ed:e2:11:38:1c:d9:a0:cb:9f:ff:
84:4c:28:4a:a9:1e:f1:21:e2:45:7f:79:88:1c:55:
6d:88:5b:58:1d:31:d5:f9:d1:08:f2:96:a3:7a:70:
9f:c5:48:c8:c2:57:6d:b2:01:6b:49:6d:c0:29:64:
83:67:4f:2b:ed:3a:1d:6e:b1:41:1c:7a:3b:4b:a0:
bc:f4:89:a5:3f:8f:d0:1a:83:a7:32:3a:77:78:68:
ef:d0:8d:22:8b:bd:cc:2c:e7:06:c8:83:65:61:b8:
0f:c2:f0:9f:a4:59:33:9a:0b:67:2e:51:ec:cd:11:
57:cf:4f:dc:a5:78:a7:25:f2:98:3d:ad:c7:0f:b1:
c0:c9:4f:22:74:b8:72:7e:2c:22:af:8c:4f:d9:b4:
e1:c7:10:ec:0d:ff:9d:1e:bb:94:a1:00:3d:a7:23:
09:1b:34:7f:ad:8a:57:65:47:56:ad:a7:fb:a4:c8:
de:b7:bf:3a:5d:18:d0:81:c9:c5:44:a2:1c:98:fe:
df:28:ec:cc:8b:28:0b:67:df:9a:44:aa:08:b6:59:
91:ad:13:93:9a:8b:29:32:e2:40:8b:74:49:b2:ad:
67:42:4e:0d:ff:74:e9:3d:69:30:02:54:c9:ff:bf:
e3:26:dd:b2:e0:9a:65:7d:dc:fd:8e:61:5f:55:7c:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:72:A8:4B:3E:1B:91:42:D2:45:B7:D1:59:6C:B5:82:64:32:CB
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d7ZyqEs-G5FC0kW30VlstYJkMss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5b:54:9f:7c:3d:21:55:85:ff:16:5e:0a:a5:18:c7:c1:ea:
37:af:b1:be:54:38:28:50:16:76:96:9e:9a:ba:0b:69:e4:c9:
a0:dd:e0:b7:2d:7f:7b:37:82:59:a3:ba:29:bb:98:c1:1d:53:
d4:e1:29:15:ed:ac:50:36:87:11:74:e6:86:4a:ed:8f:82:3f:
3a:18:61:cb:fa:e6:a9:50:7a:c7:d4:9a:21:4a:3f:8c:ce:25:
11:d7:8c:dd:bc:99:9f:32:fb:bb:93:ee:2d:9c:08:82:07:df:
c7:e5:57:1f:32:92:de:8d:c8:2c:c1:25:d3:1b:38:b3:21:79:
19:bb:15:89:d5:90:df:d3:e3:3c:e7:8d:fc:52:95:7a:46:2f:
8c:bd:ca:ce:09:d8:fe:e6:38:eb:13:c4:7f:6f:7e:ff:db:a5:
94:2b:55:c0:5f:93:5c:ad:da:1f:bc:ec:c0:31:08:60:d3:26:
93:fa:fa:d9:18:76:d4:d1:b3:8a:8a:83:0c:c4:7b:8d:3a:65:
69:7c:84:1a:97:76:f7:19:62:3f:55:bd:bd:98:f4:e4:12:77:
f2:b5:07:41:5c:65:4a:56:b0:19:36:4d:63:cb:3b:69:46:31:
0d:86:e5:25:43:3c:e2:ca:22:25:38:bf:ed:47:b0:6b:97:77:
f2:24:f3:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkQvSBxGv2zscrDCRKXtCQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwNzAxMDkxNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2I2NzJhODRiM2UxYjkxNDJkMjQ1YjdkMTU5NmNiNTgyNjQzMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2jGKe3iETgc2aDLn/+ETChKqR7x
IeJFf3mIHFVtiFtYHTHV+dEI8pajenCfxUjIwldtsgFrSW3AKWSDZ08r7TodbrFB
HHo7S6C89ImlP4/QGoOnMjp3eGjv0I0ii73MLOcGyINlYbgPwvCfpFkzmgtnLlHs
zRFXz0/cpXinJfKYPa3HD7HAyU8idLhyfiwir4xP2bThxxDsDf+dHruUoQA9pyMJ
GzR/rYpXZUdWraf7pMjet786XRjQgcnFRKIcmP7fKOzMiygLZ9+aRKoItlmRrROT
mospMuJAi3RJsq1nQk4N/3TpPWkwAlTJ/7/jJt2y4Jplfdz9jmFfVXyf3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHe2cqhLPhuRQtJFt9FZbLWCZDLLMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvZDdaeXFFcy1HNUZDMGtXMzBWbHN0WUprTXNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iFAwQA
V/iXMA0GCSqGSIb3DQEBCwUAA4IBAQAxW1SffD0hVYX/Fl4KpRjHweo3r7G+VDgo
UBZ2lp6augtp5Mmg3eC3LX97N4JZo7opu5jBHVPU4SkV7axQNocRdOaGSu2Pgj86
GGHL+uapUHrH1JohSj+MziUR14zdvJmfMvu7k+4tnAiCB9/H5VcfMpLejcgswSXT
GzizIXkZuxWJ1ZDf0+M85438UpV6Ri+MvcrOCdj+5jjrE8R/b37/26WUK1XAX5Nc
rdofvOzAMQhg0yaT+vrZGHbU0bOKioMMxHuNOmVpfIQal3b3GWI/Vb29mPTkEnfy
tQdBXGVKVrAZNk1jyztpRjENhuUlQzziyiIlOL/tR7Brl3fyJPNd
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org