Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/huHViEfHmLoDIC39xdJAy6DEhzU.roa
File: huHViEfHmLoDIC39xdJAy6DEhzU.roa (raw, json)
Hash identifier: 2ViG8SZCInll/c/kOHAiErWOj9KQqJ2IDAUhkxRd/xk=
Subject key identifier: 86:E1:D5:88:47:C7:98:BA:03:20:2D:FD:C5:D2:40:CB:A0:C4:87:35
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018F4CC6054297F961910D43F4D6BA2C6268
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/huHViEfHmLoDIC39xdJAy6DEhzU.roa
Signing time: Mon 06 May 2024 07:19:56 +0000
ROA not before: Mon 06 May 2024 07:19:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.131.0/24 maxlen: 24
87.248.133.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.138.0/24 maxlen: 24
87.248.139.0/24 maxlen: 24
87.248.145.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
194.60.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 07:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:c6:05:42:97:f9:61:91:0d:43:f4:d6:ba:2c:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 6 07:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86e1d58847c798ba03202dfdc5d240cba0c48735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:c0:bc:28:46:9f:2c:20:47:49:07:80:0d:
3a:c2:52:9e:8f:0c:7c:8f:a0:ab:2c:78:5e:80:0f:
b8:d0:bd:ca:ae:2d:bd:10:3f:85:42:ac:e9:25:25:
8d:d3:4a:c7:1e:60:f6:e1:73:fe:50:ca:79:0f:f6:
97:22:22:6d:ef:74:52:87:a0:06:b9:d0:dc:00:c0:
a0:8c:55:22:c5:be:cf:89:fc:1e:b2:86:a6:58:83:
b9:9c:e6:ed:6e:0a:d5:15:ff:a2:6c:3d:49:bc:fc:
6f:01:ab:71:10:23:09:f1:38:44:50:1e:fc:82:45:
24:1e:24:53:7e:39:df:86:62:31:de:f6:80:a3:55:
69:98:da:e2:b9:6e:ed:ae:ca:cd:53:1f:ff:cc:97:
5f:3a:08:4f:b2:05:5e:e7:c7:b6:75:e2:d8:11:72:
4e:98:fc:2d:ad:83:3f:52:c4:3b:49:4f:7d:f5:6e:
a9:77:10:54:d4:19:83:fc:ed:d5:b5:f3:5e:4d:a2:
91:32:ae:99:9a:f7:1e:07:c5:e6:95:a6:eb:66:31:
fb:96:00:12:ab:22:65:33:69:98:b4:64:99:d5:6c:
20:f9:a3:9c:a9:a8:9f:65:bf:73:ae:f1:e9:01:62:
d3:f1:07:f3:66:77:b4:db:15:40:d6:57:30:55:0b:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:D5:88:47:C7:98:BA:03:20:2D:FD:C5:D2:40:CB:A0:C4:87:35
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/huHViEfHmLoDIC39xdJAy6DEhzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/23
87.248.133.0/24
87.248.137.0-87.248.139.255
87.248.145.0/24
87.248.150.0-87.248.153.255
87.248.155.0-87.248.156.255
194.60.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:01:61:1a:a1:ff:87:12:e4:ef:a0:58:3a:86:04:0b:67:d6:
60:f2:aa:c2:b6:96:15:20:9a:5a:4a:e3:49:ea:53:49:42:6c:
bd:04:d9:64:73:c9:ff:cc:c1:3e:e5:2e:c9:e6:62:19:cd:b7:
42:a5:d9:62:f0:b6:77:33:63:30:dc:40:72:fe:aa:9d:81:a9:
d5:77:d1:44:30:46:5f:7c:d6:41:08:b7:e9:68:76:05:99:d7:
ca:7c:7b:99:72:44:4f:1a:68:44:88:6d:43:12:38:65:82:7c:
4c:b5:c4:50:91:3f:ec:c2:1f:9a:15:a6:79:d3:2d:e9:ef:8c:
5f:ef:a9:42:1c:59:a4:d4:23:1e:b7:0e:7d:94:8e:f5:8f:40:
fd:82:19:66:b5:21:f9:39:0b:5d:8a:54:41:ac:21:1c:2f:5a:
2e:43:8e:ff:64:fe:49:36:fb:a1:49:fd:0c:09:3c:38:cc:e1:
a2:df:f2:ed:b7:55:d0:72:09:50:6d:56:dc:11:5b:27:fe:b1:
6c:fa:62:10:b6:31:86:70:1b:dd:97:47:5c:fc:e9:d2:09:b2:
74:9c:d4:1a:f6:88:9b:aa:ae:b8:df:44:6d:ff:bd:02:08:8d:
69:5a:bc:65:8f:b4:49:0b:55:05:77:a6:93:b0:ad:87:98:38:
29:6a:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org