Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wRPEt4Cnrjviffo33Ir0GInOHK4.roa
File: wRPEt4Cnrjviffo33Ir0GInOHK4.roa (raw, json)
Hash identifier: nq5od3O2+ERfJFArlSvRpmQ/QwitW4BfMhqEaBH18vI=
Subject key identifier: C1:13:C4:B7:80:A7:AE:3B:E2:7D:FA:37:DC:8A:F4:18:89:CE:1C:AE
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01856C8A5738340886CB6EC65D33664F413D
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wRPEt4Cnrjviffo33Ir0GInOHK4.roa
Signing time: Sun 01 Jan 2023 08:54:43 +0000
ROA not before: Sun 01 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44400
IP address blocks: 87.248.142.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
87.248.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:57:38:34:08:86:cb:6e:c6:5d:33:66:4f:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c113c4b780a7ae3be27dfa37dc8af41889ce1cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:74:b3:26:8d:01:b2:89:41:a9:07:cf:3f:
0a:dc:31:81:e4:c2:a5:62:68:6c:78:71:12:0c:65:
32:fe:7d:20:f6:ff:40:91:d2:7d:08:7c:4b:6c:cf:
67:e9:e5:ac:24:ac:21:f8:c4:47:9c:3d:77:57:35:
fd:53:3f:0a:09:97:97:61:60:1f:c8:90:0b:48:d3:
a0:21:7f:1d:12:64:9f:4a:b1:fc:2a:c0:cf:20:ff:
81:f7:d8:27:bf:12:dd:70:10:a9:a6:61:a9:ee:45:
40:ca:2c:d0:5e:e8:9f:42:a2:d1:e3:a9:3e:8f:75:
88:61:d3:7c:ca:4d:2c:fd:82:06:6d:15:fb:a3:40:
f3:70:e0:f9:06:01:6f:86:80:fb:a5:04:76:cb:58:
82:8a:45:82:60:c4:31:fb:9a:19:72:cf:08:4e:1a:
33:82:7c:9a:fe:00:c9:21:c6:8a:73:9c:e0:3f:20:
54:5a:08:df:f0:72:47:41:ce:fd:4a:fe:ef:7e:80:
29:50:30:0e:93:ae:94:b8:12:38:b5:0f:22:32:11:
35:21:58:8c:aa:20:bc:72:9f:31:33:80:e1:e8:b6:
63:42:43:6e:f5:c9:3c:12:5f:63:e1:d4:a5:0c:2a:
f3:c0:5b:b8:73:8c:31:f7:d5:64:d2:f7:b4:19:23:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:C4:B7:80:A7:AE:3B:E2:7D:FA:37:DC:8A:F4:18:89:CE:1C:AE
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wRPEt4Cnrjviffo33Ir0GInOHK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0-87.248.142.255
Signature Algorithm: sha256WithRSAEncryption
74:99:86:40:a7:cd:f7:b6:7c:89:03:1c:66:26:41:c4:8b:d9:
9d:69:38:d4:bb:a3:e8:40:50:ce:31:ab:b2:e8:eb:8c:e6:e4:
6a:b7:b3:ed:86:90:05:29:a7:81:e3:6f:1d:a7:cd:1a:90:6a:
52:ad:e7:4e:dd:15:ed:b1:40:99:c3:98:46:f8:58:4f:20:d3:
ab:76:f5:36:e1:63:0b:9e:21:1e:cf:33:25:07:d6:9c:af:d8:
c7:77:3b:ef:d9:39:06:af:ad:2f:90:9d:07:a2:62:f9:c5:f1:
4e:65:04:65:54:4a:c3:78:9d:55:00:55:cb:51:fa:10:4c:55:
db:07:d4:6a:01:18:cc:fe:09:d7:a4:b6:48:44:48:87:c2:81:
db:3e:0c:19:c5:7a:b5:3c:ab:f7:b6:5b:31:44:24:f3:aa:8e:
74:04:59:4d:12:22:20:f1:3b:fe:4c:1d:16:a7:57:dc:e7:ed:
27:6c:70:9d:bf:dc:1b:61:1c:af:9b:e3:e3:60:41:fc:01:11:
f1:32:f5:f2:eb:fb:5b:4a:cd:ae:f9:b4:6e:92:b8:c5:bf:63:
50:44:d9:48:bd:ae:e8:5b:8a:69:b8:4c:26:b4:2c:52:5d:07:
c2:4a:89:0f:8b:dd:dd:bf:c7:fb:04:40:23:d8:31:8f:22:d4:
f8:74:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org