Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/n7Tvgpxz57RRiI0e6NvUwHWv3B4.roa
File: n7Tvgpxz57RRiI0e6NvUwHWv3B4.roa (raw, json)
Hash identifier: yZ0P0F9BQ1dFJ7viVAPnuP+8cUl++yV4Vs3a2SX2GIE=
Subject key identifier: 9F:B4:EF:82:9C:73:E7:B4:51:88:8D:1E:E8:DB:D4:C0:75:AF:DC:1E
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A60FA3DD78F2FD42D2F6111679AC5
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/n7Tvgpxz57RRiI0e6NvUwHWv3B4.roa
Signing time: Sun 01 Jan 2023 08:54:46 +0000
ROA not before: Sun 01 Jan 2023 08:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 87.248.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:60:fa:3d:d7:8f:2f:d4:2d:2f:61:11:67:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb4ef829c73e7b451888d1ee8dbd4c075afdc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:87:ff:7d:ce:d6:7d:dc:a3:29:8b:9b:21:
07:71:56:15:4e:4d:8f:66:46:1b:36:51:e8:b9:b3:
39:82:fb:4f:b1:ca:f5:7d:48:4e:0a:29:7d:fa:9e:
0c:2a:a9:de:d2:8f:58:0f:8c:af:d5:a5:53:ad:2b:
8b:40:61:b7:1c:c9:95:7e:6a:10:f9:79:6e:a5:0a:
5d:66:69:14:d7:af:22:41:ca:4e:eb:ac:ac:1a:ae:
d4:8b:07:2f:02:00:ce:cb:ec:29:9f:d0:f4:76:1c:
45:db:fb:37:9a:3b:61:e5:38:e3:31:2b:73:c9:14:
f8:c3:b3:fe:75:52:40:7f:5d:9c:21:df:4f:3a:b0:
d4:26:79:cb:91:42:73:41:96:7a:c2:8c:53:32:36:
08:c5:78:4c:3a:4b:24:e3:71:e9:c5:cf:dc:1f:97:
6f:9c:c5:57:9b:97:40:c8:a4:36:27:2f:1e:c1:7d:
47:39:be:b2:48:76:19:bb:91:e6:61:82:dc:fd:53:
e0:cc:11:9f:44:18:98:15:20:95:fc:4e:de:1c:6c:
b2:e0:6c:60:49:e5:1d:79:d5:df:9f:df:47:8e:74:
4e:41:ac:e5:3b:50:9a:e9:74:2e:44:92:7f:bd:70:
74:15:80:cf:c3:70:43:4c:cd:0a:25:21:e8:52:ef:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:EF:82:9C:73:E7:B4:51:88:8D:1E:E8:DB:D4:C0:75:AF:DC:1E
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/n7Tvgpxz57RRiI0e6NvUwHWv3B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.146.0/24
Signature Algorithm: sha256WithRSAEncryption
13:38:4e:5a:98:d4:36:22:17:0c:b0:ca:2c:96:49:47:1b:6e:
39:b2:55:a5:07:5f:37:fe:9a:6f:7f:36:40:c7:6d:98:df:10:
fd:5a:8f:76:04:bb:e1:23:32:2d:66:ca:2c:bc:cd:2c:cb:09:
63:79:b2:9f:05:e2:b6:b2:ad:5a:1d:69:ba:49:22:72:91:c4:
7c:a7:29:12:85:3a:8f:21:3f:63:61:62:dc:82:c4:d9:f1:89:
a1:5b:f4:0b:34:07:44:e2:fa:09:68:f7:68:8c:d9:80:3b:db:
61:3d:ff:89:f9:7b:80:2c:70:95:24:16:f5:3e:1a:95:0e:68:
b4:cc:4d:34:de:09:96:f9:52:14:8c:8b:0e:ce:59:2f:15:5c:
88:4a:04:33:b1:f5:79:9e:e4:7b:92:de:35:a0:14:71:b4:2d:
57:11:b4:74:62:db:9c:fc:46:8d:ba:e7:70:67:14:57:67:40:
4b:2c:c3:0c:db:18:14:ac:24:74:51:05:ad:be:9d:c0:e9:45:
e1:19:89:48:c9:f3:a5:38:fb:d5:b4:6e:5f:00:d1:f7:39:68:
b5:08:1a:40:18:75:94:4c:af:10:35:9d:d5:b6:04:97:62:69:
0e:f2:6c:f3:d3:99:81:06:20:b4:48:01:a2:ae:a7:ae:50:42:
6e:36:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org