Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/qQpOZu__MHtXN5PlxJMgbC6vOAw.roa
File: qQpOZu__MHtXN5PlxJMgbC6vOAw.roa (raw, json)
Hash identifier: 19JElli2LugfLRMKCDR3ltqm92cXm6rtv097XB/ga2o=
Subject key identifier: A9:0A:4E:66:EF:FF:30:7B:57:37:93:E5:C4:93:20:6C:2E:AF:38:0C
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018DE5CFA990E15B52FD3A4A0A7043BF4344
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/qQpOZu__MHtXN5PlxJMgbC6vOAw.roa
Signing time: Mon 26 Feb 2024 14:26:48 +0000
ROA not before: Mon 26 Feb 2024 14:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 87.248.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 14:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:cf:a9:90:e1:5b:52:fd:3a:4a:0a:70:43:bf:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Feb 26 14:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a90a4e66efff307b573793e5c493206c2eaf380c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:ab:9d:bc:f0:ce:da:95:2d:94:a1:b2:2a:
9e:72:8e:d4:08:df:81:f5:f2:e7:cf:6c:04:23:fb:
0d:b5:a7:65:e0:79:ba:0e:93:d6:59:47:de:b7:c3:
c2:d0:5e:35:49:a9:dd:51:c9:d0:d7:9f:74:bd:85:
91:c1:b8:86:b2:fe:97:1c:ad:1c:5e:a5:46:cf:73:
e7:7f:0c:72:17:98:93:f4:1f:ec:54:3f:ee:79:56:
ca:d7:91:70:3a:5a:9f:4e:b4:b7:36:93:93:e7:1e:
9f:0f:e9:06:ad:95:17:86:3d:83:7d:a5:17:43:e3:
28:15:0a:80:6b:02:e8:98:07:61:d7:14:ef:a0:b3:
68:b2:11:db:60:d8:86:30:9a:8e:f9:3f:01:5a:d6:
72:b2:5b:df:58:76:f3:1d:f8:5f:38:71:da:40:04:
b4:f6:9c:1c:14:01:3e:1a:ef:ee:f4:f4:e6:6b:c5:
83:77:c9:ab:7b:a4:22:b5:48:f5:cd:08:3d:14:ed:
8b:b8:a3:d6:75:bf:26:7d:a4:46:d2:d4:e5:49:00:
08:e9:fe:f4:bb:73:6a:68:c3:af:9f:9a:49:7d:43:
61:68:56:95:bc:8f:82:70:32:28:ec:df:64:71:9b:
8f:fd:9e:3f:b5:03:c5:e9:88:dd:54:da:cc:ff:c9:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:4E:66:EF:FF:30:7B:57:37:93:E5:C4:93:20:6C:2E:AF:38:0C
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/qQpOZu__MHtXN5PlxJMgbC6vOAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.145.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b9:de:a2:a2:15:be:e3:36:a8:46:b0:7d:b3:6c:32:65:2c:
57:f7:7f:5b:81:44:c8:13:14:1c:45:f8:27:2a:69:4e:f2:db:
56:bd:44:26:d8:9a:12:25:37:69:30:6e:b3:fd:18:5a:69:fe:
de:8f:19:36:09:29:c3:8a:ca:8c:22:2e:da:6b:b2:56:b8:81:
d9:42:17:ad:a7:3f:62:cf:6a:b9:9b:d4:24:80:10:5b:74:b7:
66:08:63:f9:99:22:14:6d:73:83:76:87:f8:cf:4c:6e:d2:73:
9d:bd:ee:44:e9:65:32:df:86:48:6e:43:32:55:78:10:d3:71:
04:c9:9d:6d:0f:c1:34:23:24:fc:24:f7:88:c2:5e:7d:74:64:
26:31:eb:dc:f7:d7:33:86:e2:ef:0d:d8:ec:71:7a:ae:11:e4:
92:42:68:78:4b:92:3c:d4:76:de:9f:73:43:6f:28:21:83:e9:
38:71:78:20:76:ea:db:bb:16:79:61:f9:a4:b1:c8:45:32:e7:
73:b4:7f:15:c1:b9:6e:77:40:d7:c0:d1:66:66:01:c9:25:0a:
98:56:ae:04:db:24:82:99:a0:a7:e9:0c:df:98:1e:79:b3:7a:
c3:82:d8:ac:fb:2c:7b:12:c7:86:5a:1f:39:93:f1:10:12:95:
21:ac:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org