Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/pttChNciYCIfjxEa7rJmeP9TdSk.roa
File: pttChNciYCIfjxEa7rJmeP9TdSk.roa (raw, json)
Hash identifier: YzGsNO/gCGYNY7n7fvXYD4IL3/fZ6EC61MKgZZ245sg=
Subject key identifier: A6:DB:42:84:D7:22:60:22:1F:8F:11:1A:EE:B2:66:78:FF:53:75:29
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5812554F270887AFF3C2FB2F0E0C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/pttChNciYCIfjxEa7rJmeP9TdSk.roa
Signing time: Sun 01 Jan 2023 08:54:43 +0000
ROA not before: Sun 01 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:58:12:55:4f:27:08:87:af:f3:c2:fb:2f:0e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6db4284d72260221f8f111aeeb26678ff537529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:95:7c:bc:65:02:31:21:62:24:1e:d9:61:
97:08:ae:db:72:3d:eb:85:46:b4:0e:4f:4d:e0:06:
aa:63:25:ca:6b:30:32:97:c3:19:16:34:8a:8f:33:
52:47:7d:30:2a:58:6e:67:e8:93:88:9e:5d:77:0a:
f4:25:5a:83:ff:8f:3f:99:86:d8:28:f2:6c:13:76:
42:f7:ed:6e:58:d1:ee:42:49:65:20:bf:83:ea:27:
75:8d:ed:6d:8d:9a:fb:cd:52:0f:ab:e1:bc:43:b0:
b7:3d:28:7a:c1:23:24:bb:ea:80:68:fb:78:94:1d:
61:45:23:d6:74:3c:e2:a5:ea:c1:38:14:27:13:24:
71:b6:10:fe:73:fe:7b:31:b4:eb:f3:bc:8f:56:ac:
ae:82:e3:c8:99:89:2d:0c:49:83:60:6d:ad:35:a3:
52:e9:1f:4d:b0:e4:4b:96:ea:b7:6d:95:79:89:ee:
35:18:6f:82:00:fb:e8:52:c1:0c:01:f5:9a:58:bf:
a6:98:0c:b3:ae:0b:60:8f:5e:dd:b1:a9:51:c1:dd:
91:70:ff:7e:40:04:1a:bf:bd:b3:19:d6:7d:e1:ac:
69:6a:fa:21:a2:6f:71:52:11:9e:fb:19:d7:74:c2:
20:cd:b0:84:2b:8e:ad:4c:5b:b2:37:b1:45:d1:ab:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:42:84:D7:22:60:22:1F:8F:11:1A:EE:B2:66:78:FF:53:75:29
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/pttChNciYCIfjxEa7rJmeP9TdSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0f:9b:bf:4a:b0:43:8d:68:c5:a5:5f:37:ed:75:e1:ec:b3:
de:39:bb:1b:54:05:35:49:d8:2c:49:72:cd:26:ab:fb:f7:7f:
22:75:3e:5a:9e:ed:78:8d:50:da:4d:d0:11:7b:43:74:6a:60:
fa:b7:bf:db:63:36:c2:7b:3f:4c:7e:5e:5c:ca:f3:1c:6a:6f:
a3:31:32:2b:d3:b4:07:70:bc:89:b4:64:2b:a0:78:fc:78:da:
51:95:27:1a:38:00:1a:95:4a:2d:0a:ef:c2:24:3f:a7:7f:1a:
14:67:be:77:41:b0:93:c7:d2:e5:42:a0:3d:93:73:df:3a:21:
9c:05:11:ef:ba:9b:95:ee:ef:26:bb:cc:12:dc:4b:f9:6d:33:
6b:24:21:f4:ca:8b:cb:93:1d:35:1f:81:be:5f:11:8a:64:3b:
9d:e6:57:a1:89:30:d7:21:04:1d:e3:c1:e2:77:79:1a:68:4c:
f6:7b:a2:75:61:36:ff:34:b6:a0:8c:c4:03:4a:fb:9c:6f:0f:
c5:7f:ee:f6:d0:f4:d9:e7:ef:2b:18:8c:02:2a:bf:58:ce:76:
ee:00:6d:4e:97:fb:ac:18:53:18:ca:14:f9:73:13:fe:3f:0a:
e7:a8:71:c0:50:4c:2e:79:fa:f1:df:94:72:5d:39:87:73:6c:
65:f9:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 11:47:03 2023 by rpki-client on console-fra.rpki-client.org