Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/fD4DEojqurh_aQUGz_K-qKZLA7c.roa
File: fD4DEojqurh_aQUGz_K-qKZLA7c.roa (raw, json)
Hash identifier: Wd+CKZyZPgQhRsFka/UPsNyae2n2KbWkSJEnvof4KSw=
Subject key identifier: 7C:3E:03:12:88:EA:BA:B8:7F:69:05:06:CF:F2:BE:A8:A6:4B:03:B7
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0188C3E06E5F83486EC85A902D8A91560CCE
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/fD4DEojqurh_aQUGz_K-qKZLA7c.roa
Signing time: Fri 16 Jun 2023 11:04:05 +0000
ROA not before: Fri 16 Jun 2023 11:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 08:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:e0:6e:5f:83:48:6e:c8:5a:90:2d:8a:91:56:0c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 16 11:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c3e031288eabab87f690506cff2bea8a64b03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:91:52:db:85:4f:9a:12:57:ae:a4:cc:6c:
af:96:9b:e2:09:67:d1:3f:2a:e6:f3:1e:8a:16:5e:
02:c0:2e:dc:55:d6:ca:5b:cf:31:ea:34:e1:dd:c9:
8b:74:b4:b5:ce:71:65:a4:81:2d:b7:1e:0d:d0:62:
99:b4:a3:a2:52:8c:c3:da:66:c1:0f:5d:4a:a8:2e:
be:b3:3f:93:11:6b:72:b0:3a:40:67:69:f1:88:0c:
f7:8e:fb:54:9c:e6:69:e3:0f:19:1e:e2:2e:fc:25:
e6:e9:59:61:83:72:be:2c:f8:7d:8f:1c:16:3d:0d:
b6:84:65:05:23:24:d3:25:93:16:b6:70:01:b2:9f:
71:45:02:d5:86:61:eb:b1:d1:2f:81:cc:1a:66:39:
b8:8d:40:38:3a:0c:64:08:78:db:84:18:93:a2:59:
39:ce:a4:c2:fe:35:67:95:21:c1:09:53:b1:6c:de:
e0:c3:10:fb:88:30:71:9a:ba:5c:bc:d2:e9:e5:02:
d9:ac:5c:6a:c3:c2:33:67:5f:16:b1:66:cf:ae:e7:
98:b6:b3:a8:ba:6c:cb:90:5b:26:7f:85:75:5d:4c:
05:99:a2:a7:03:c9:aa:2d:36:3f:25:7b:86:be:9d:
c8:bf:33:f5:0e:1f:41:90:81:60:e6:83:cc:40:6d:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3E:03:12:88:EA:BA:B8:7F:69:05:06:CF:F2:BE:A8:A6:4B:03:B7
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/fD4DEojqurh_aQUGz_K-qKZLA7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
23:72:d5:74:64:f0:f0:f8:8d:ae:a7:ae:6b:8e:68:35:1b:a0:
b7:c1:00:e2:ae:f9:ac:34:9e:9d:a8:ca:83:47:29:01:be:41:
c0:87:09:5c:eb:b0:35:8f:7c:76:0e:84:a6:a4:6f:ec:aa:58:
d0:3b:77:da:22:c1:42:22:ec:41:39:35:02:21:5c:74:eb:f4:
7b:e0:53:b5:44:6e:70:45:96:38:80:2a:fa:4f:23:67:bc:de:
8a:d8:bf:02:93:2d:39:46:45:bc:7f:6f:78:4f:ad:0b:9b:a7:
40:e7:0a:73:aa:6f:d7:42:f6:41:ba:cd:5b:dd:60:76:77:5c:
b2:35:76:7c:dc:a6:ed:43:00:81:dd:44:a0:bb:2a:a5:4a:10:
a7:42:d7:3c:59:60:2a:e3:1d:c4:c5:c0:19:71:e4:c2:29:1e:
b8:74:8a:81:ba:bb:7e:07:6a:5a:bd:de:4c:e5:47:99:8a:c8:
e0:9d:f6:72:05:02:a6:5a:0e:3b:c9:67:84:b9:cc:9e:97:0f:
69:a1:c0:22:4a:cd:bc:1b:7c:39:ab:1e:1e:a8:da:2e:56:89:
bc:af:33:6a:c5:c9:76:5d:45:f7:ff:e9:d7:9e:21:ad:86:25:
4a:fd:aa:9d:db:09:76:a6:47:3b:11:c8:07:93:c0:69:5d:fa:
80:9b:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org