Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/nxjldFtJ05KmZ7_uV9C8p-Inp9s.roa
File: nxjldFtJ05KmZ7_uV9C8p-Inp9s.roa (raw, json)
Hash identifier: nZtp0An9WJNXUViyt/arIKwI5XWtGvYyv540sfiRylM=
Subject key identifier: 9F:18:E5:74:5B:49:D3:92:A6:67:BF:EE:57:D0:BC:A7:E2:27:A7:DB
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018C9635D02EA4FE1D57D3C2B4034252A59D
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/nxjldFtJ05KmZ7_uV9C8p-Inp9s.roa
Signing time: Sat 23 Dec 2023 10:25:58 +0000
ROA not before: Sat 23 Dec 2023 10:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 87.248.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:35:d0:2e:a4:fe:1d:57:d3:c2:b4:03:42:52:a5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Dec 23 10:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f18e5745b49d392a667bfee57d0bca7e227a7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:ce:af:88:7c:62:f7:d2:18:af:bb:6c:fa:
3f:9e:54:4e:b1:bc:b4:93:5f:fa:17:36:e9:39:e4:
d1:f0:c5:c6:b6:88:78:5f:a0:dd:3a:e7:f7:97:f2:
75:77:4d:11:7d:7e:45:60:bd:5c:2a:d0:9c:00:3c:
38:f7:64:0e:ba:2e:c4:16:36:95:d9:76:84:fb:ca:
0f:a3:77:5b:9d:85:b4:5a:7e:89:e0:23:ed:ce:9d:
5f:12:a2:dc:42:30:ca:b3:04:71:d4:ae:c0:e1:23:
99:24:97:d0:f7:ec:b2:5a:18:3c:2c:2a:1a:8c:c0:
2c:65:b3:3c:98:e3:83:28:38:ce:78:e9:eb:29:78:
fe:9c:a6:99:77:0a:eb:5e:c9:fa:b0:2f:44:5c:ee:
fa:3c:33:e2:df:4f:b5:1c:e2:7e:1e:29:82:99:96:
19:5b:fd:46:e7:74:b5:d7:71:de:4d:7f:c6:47:28:
dd:bc:02:81:e0:c0:09:80:d3:64:eb:ff:63:07:b5:
46:ba:c1:ff:f3:fc:a2:90:27:ed:4e:79:08:40:f7:
fc:52:b4:c7:73:c0:5e:59:e7:fe:e0:38:61:f7:74:
c2:06:43:d6:9a:4b:bd:80:8c:d2:16:f5:2a:59:55:
65:59:20:c1:6b:0d:79:09:da:6b:26:d4:ae:13:fd:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:E5:74:5B:49:D3:92:A6:67:BF:EE:57:D0:BC:A7:E2:27:A7:DB
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/nxjldFtJ05KmZ7_uV9C8p-Inp9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.148.0/24
Signature Algorithm: sha256WithRSAEncryption
13:34:df:2e:7f:de:8c:ad:7f:f3:48:55:9a:aa:11:9a:bb:a5:
7e:86:b6:07:13:de:9f:c7:26:43:6d:99:b4:5b:96:82:0e:f6:
c8:58:78:8e:4a:a9:99:bb:68:3c:1d:2e:fe:a2:e2:19:6b:ad:
ef:7b:3f:61:5a:c4:6b:eb:07:0d:37:df:0a:45:9f:48:ba:5d:
27:03:26:17:df:53:1b:cc:9d:00:3f:d0:a9:fe:a3:d6:90:27:
78:81:17:da:c8:44:8d:d3:47:36:7e:c2:79:26:34:31:ec:23:
2f:e4:f1:15:2a:83:ca:c9:ea:ce:3a:c2:7a:c4:74:bc:d3:1b:
d1:e1:7e:ac:03:0a:ab:c0:f3:bb:46:82:fc:ae:0c:eb:3a:74:
77:07:5a:81:b2:30:66:ab:79:48:74:4a:38:43:7e:11:a7:f0:
0a:2a:6d:04:84:c3:df:21:88:7a:d1:59:bf:b3:e7:9b:d1:ab:
34:60:c7:a5:37:fd:a2:f5:9e:f9:b1:13:2c:bf:6d:9a:72:5b:
d0:58:8d:9e:ca:b4:3c:24:01:57:84:5f:fc:b3:bb:60:1f:5f:
b0:71:46:bb:b4:67:31:81:88:cc:31:b1:bf:28:5f:db:86:30:
f8:3d:b1:08:c0:2f:45:77:aa:9c:64:06:41:8f:87:c3:a3:93:
25:33:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org