Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/w7nnu00bf7JhwRFnfXjRHcXsRTI.roa
File: w7nnu00bf7JhwRFnfXjRHcXsRTI.roa (raw, json)
Hash identifier: wyVfsQWIosgOyGI2WveRXlAweHZn+E5jovVoFJTcIhI=
Subject key identifier: C3:B9:E7:BB:4D:1B:7F:B2:61:C1:11:67:7D:78:D1:1D:C5:EC:45:32
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0192061196414041F9FDE055C8863E6B71F2
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/w7nnu00bf7JhwRFnfXjRHcXsRTI.roa
Signing time: Wed 18 Sep 2024 16:57:48 +0000
ROA not before: Wed 18 Sep 2024 16:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.248.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:11:96:41:40:41:f9:fd:e0:55:c8:86:3e:6b:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Sep 18 16:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3b9e7bb4d1b7fb261c111677d78d11dc5ec4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:f4:e7:21:54:5f:b1:c1:57:6f:e6:34:c6:
6e:a2:42:21:19:4c:9e:42:33:ee:2f:50:ed:8c:aa:
eb:0d:5b:1c:84:62:c6:51:ab:95:d5:02:10:bb:e1:
1a:3e:0b:3c:f3:12:1b:39:9f:d6:2a:bb:33:80:12:
09:d8:0e:6b:f7:b7:c2:f5:f3:28:8d:6c:34:cd:85:
5e:e2:58:1c:b9:70:c0:01:9f:93:8f:84:84:1b:f2:
25:9b:8e:a1:71:2d:5d:31:76:83:cf:0e:7a:ba:77:
f4:b9:dd:8c:a1:c5:a7:a2:a9:2c:7f:56:93:d5:22:
c6:4a:77:74:76:53:c9:a9:6e:8e:55:63:74:2a:23:
d5:c7:83:77:f4:55:bf:c3:7f:1c:89:ba:f8:d0:26:
40:aa:73:50:96:b4:cb:80:fe:76:00:c8:03:07:5a:
20:05:07:23:25:e4:ba:d2:c1:81:0a:ef:65:9d:dd:
99:44:5d:e2:a6:82:85:16:d1:06:23:04:ee:89:98:
b4:72:fa:dc:23:a8:1f:02:a8:5b:5d:9b:9d:77:a5:
54:c2:4b:3c:05:69:c3:32:5e:25:e0:df:53:2f:4f:
e9:2e:69:9c:ce:d7:58:3b:92:3b:3e:43:76:2f:80:
25:13:b9:62:47:10:92:48:36:b0:36:02:bd:e2:7c:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B9:E7:BB:4D:1B:7F:B2:61:C1:11:67:7D:78:D1:1D:C5:EC:45:32
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/w7nnu00bf7JhwRFnfXjRHcXsRTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:03:74:00:3f:1e:ec:5c:bf:c2:f9:d4:f1:d3:80:37:ef:
19:29:d6:66:19:6e:78:91:1a:a6:e9:0e:c5:8f:ad:8c:99:1b:
7c:94:72:3a:e0:29:7c:6c:43:60:c8:d1:5e:b2:9b:33:15:32:
a5:ee:a4:54:ae:c7:72:3c:e4:ac:9c:3c:ca:90:2b:ef:1e:17:
3b:70:00:56:f0:db:20:a4:93:b7:77:92:16:be:1f:e3:d6:e1:
56:b8:b1:48:0a:66:fb:4e:56:0e:fb:5e:77:0e:c1:8f:21:b7:
08:3b:4d:ed:8c:c5:5f:37:6c:24:9e:72:21:c7:4c:77:23:8c:
21:26:d7:ab:c3:47:63:10:74:a2:9d:57:84:24:66:83:69:43:
8e:51:2d:58:c2:51:56:64:71:c3:8f:92:8e:1d:c6:47:50:a3:
d8:a6:64:bf:aa:5e:e2:3d:e6:0e:3a:32:92:b0:c6:4d:af:ad:
02:b6:a7:e4:ff:07:3f:5c:12:70:84:96:cb:08:21:77:8b:44:
aa:5c:3f:f1:89:0c:f2:b9:56:1f:cf:4d:43:99:66:d7:7f:fa:
4d:38:09:e8:3d:5d:8b:fa:d6:3e:d1:a9:3d:7b:34:23:5a:c8:
c8:48:44:05:7d:6f:10:9f:9c:e1:a7:49:ec:e3:8a:82:47:b3:
79:53:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 15:32:13 2024 by rpki-client on console-fra.rpki-client.org