Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wBFFGdZqB1dStwt_bUEw8hX2joQ.roa
File: wBFFGdZqB1dStwt_bUEw8hX2joQ.roa (raw, json)
Hash identifier: YW9VY0t4FaF9jGWvU28oavCywggs4+Ej0+0ke97e2XI=
Subject key identifier: C0:11:45:19:D6:6A:07:57:52:B7:0B:7F:6D:41:30:F2:15:F6:8E:84
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB66115FD14ECD6E63E36E0D609F37
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wBFFGdZqB1dStwt_bUEw8hX2joQ.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 87.248.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 14:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:66:11:5f:d1:4e:cd:6e:63:e3:6e:0d:60:9f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0114519d66a075752b70b7f6d4130f215f68e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:eb:1b:72:3f:e3:94:ad:a6:e9:be:f2:1f:
22:65:59:c2:c5:cc:61:d7:12:c4:d4:fe:93:9b:02:
f0:2b:3b:b4:51:b3:b9:6a:16:88:c9:b3:5e:53:3a:
76:48:82:57:d3:a8:10:61:84:c5:c9:87:12:4d:f5:
aa:ed:35:3b:19:82:b7:fc:34:53:8e:27:1a:2c:22:
a5:6b:82:7d:67:33:10:55:56:5a:28:e6:49:ed:f2:
8a:80:9f:4c:ae:ba:f7:48:9f:3b:d4:ee:a7:5d:a0:
be:e9:11:6e:f2:d4:cf:8d:4f:72:c1:82:b9:bf:35:
84:0a:94:c6:a5:e9:cb:40:05:b5:e5:4f:e5:67:33:
de:98:99:70:a6:29:12:37:e3:f5:3f:24:85:7b:7d:
5b:e8:35:7c:7e:bd:bf:a5:f5:ba:b7:d0:39:c6:4a:
41:2a:20:cc:0a:fd:67:80:53:59:85:07:ed:c4:a8:
48:1a:36:21:b6:4f:86:eb:ba:87:58:e1:2a:53:d8:
83:34:2d:3c:5f:32:bb:15:83:65:71:b6:15:30:d8:
c2:73:53:2c:db:8f:d3:f1:88:eb:2d:65:49:92:7f:
91:93:6d:65:02:07:32:a4:00:1a:91:5e:ac:fc:a6:
2a:b8:5d:2f:2d:d2:9f:de:00:27:e9:a6:6d:99:8b:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:45:19:D6:6A:07:57:52:B7:0B:7F:6D:41:30:F2:15:F6:8E:84
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wBFFGdZqB1dStwt_bUEw8hX2joQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:21:e8:12:4b:b7:05:f9:59:4e:ef:36:cf:84:47:2b:e1:05:
de:bc:29:1a:f6:63:c7:0b:39:36:a5:26:b1:14:63:f0:ae:5b:
fd:79:a4:a9:10:77:93:d9:1f:cf:49:8e:d9:dd:61:5a:99:8b:
50:ab:d1:04:60:75:5f:e7:3c:5f:62:01:c6:af:a8:d6:a7:fc:
d8:26:0c:ad:36:9f:97:44:9e:9c:5f:b7:9a:bf:9e:fa:38:49:
a3:27:13:b9:99:21:33:9b:18:9e:3e:9e:4b:a1:de:ce:d1:03:
ff:8e:54:99:d9:65:3c:33:95:1b:a6:6b:fc:a9:1c:65:44:ff:
3d:05:fc:e7:36:da:b7:6b:54:cd:a3:34:c5:00:72:c6:e1:4c:
30:55:b7:53:bf:ed:8e:56:27:ed:6a:d8:cc:fb:08:17:d4:99:
31:3b:3d:78:b1:10:7f:17:2d:0a:30:2b:4a:b3:9d:11:1b:26:
31:82:b1:5f:9f:1b:48:16:ce:9a:b8:c8:e0:4f:0e:95:2c:59:
bf:e4:04:c8:6e:d7:e1:04:c9:c4:e8:01:62:22:1b:79:c8:34:
45:31:eb:36:a5:6e:1b:5c:61:bc:af:1c:b3:ea:52:17:d9:db:
0e:3e:f8:b9:42:ac:4c:03:4f:c4:9f:56:45:eb:cf:05:5e:33:
0b:e0:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:15:40 2024 by rpki-client on console-ams.rpki-client.org