Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ysrB_PrGHVffBKW0XmS-C4tA8nY.roa
File: ysrB_PrGHVffBKW0XmS-C4tA8nY.roa (raw, json)
Hash identifier: IZWRfVbnHINlAhiCygfEYnmwhDS9DZjQacCPW7x9XRA=
Subject key identifier: CA:CA:C1:FC:FA:C6:1D:57:DF:04:A5:B4:5E:64:BE:0B:8B:40:F2:76
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0189796C96E5245CAE1D162534436BAA2EE3
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ysrB_PrGHVffBKW0XmS-C4tA8nY.roa
Signing time: Fri 21 Jul 2023 17:08:26 +0000
ROA not before: Fri 21 Jul 2023 17:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201703
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.133.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:6c:96:e5:24:5c:ae:1d:16:25:34:43:6b:aa:2e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 21 17:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cacac1fcfac61d57df04a5b45e64be0b8b40f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:40:88:8d:4e:41:96:f3:89:59:22:b9:99:
f7:30:93:d1:23:cf:98:82:4a:a0:15:0c:50:ef:14:
b0:e3:a2:0a:0b:5f:32:75:e7:06:03:e7:b1:7b:1b:
07:f9:5b:bb:bc:79:e4:08:8d:9c:34:92:79:c8:25:
64:1b:f3:cf:3a:6f:89:3b:a7:a8:ce:94:c0:84:c5:
70:25:96:e4:e1:8c:f4:6b:23:92:bd:94:13:0e:82:
89:a2:d3:d9:37:af:48:b8:21:8b:3c:2b:61:fe:86:
8f:1e:e5:ee:53:25:29:2e:27:97:e7:15:b1:7e:61:
cf:99:fc:b2:2d:ff:dc:f1:63:52:8b:65:bd:b8:89:
c9:25:8b:7b:ea:ff:af:21:14:35:58:e2:02:bb:41:
98:0c:d7:bb:04:75:aa:b5:a2:0c:ae:7d:95:a8:8e:
42:13:81:0e:7d:91:86:5c:9a:a7:d9:65:80:ca:a3:
14:33:6f:89:9a:f7:1d:69:2c:fc:c2:49:0c:be:93:
4a:22:19:4c:b8:42:13:5e:eb:6e:9b:d3:11:a4:a3:
31:b2:89:b9:ae:8f:70:e7:b6:29:3b:63:3b:05:0b:
c0:e7:93:24:4e:92:59:27:9d:47:43:f6:ea:a9:2d:
e2:2b:fa:34:b8:47:c6:04:15:3a:93:b5:5e:cc:82:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CA:C1:FC:FA:C6:1D:57:DF:04:A5:B4:5E:64:BE:0B:8B:40:F2:76
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ysrB_PrGHVffBKW0XmS-C4tA8nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.133.0/24
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f8:c4:c0:2b:e8:df:f4:b3:0c:1a:c7:f3:18:1f:34:49:b7:
65:84:6b:1f:3a:2a:80:66:ed:6e:7b:34:f6:11:2c:22:a8:0a:
81:32:79:66:60:8d:df:99:ec:d5:2f:8d:f8:66:94:f0:37:65:
b4:50:0d:05:8c:4c:31:ca:23:95:fc:ba:f9:16:a1:1b:40:19:
1c:a4:94:61:bf:f0:30:7b:d3:f4:ad:1f:9a:52:9c:cd:04:da:
be:4f:a6:bf:c0:16:a9:33:bc:62:e4:5a:47:a2:55:a1:46:37:
e8:b1:c8:4c:ec:4f:cb:b6:74:5a:70:2b:f4:11:59:4d:68:97:
a9:99:25:74:17:aa:93:7e:f0:3a:bc:7b:35:69:8d:90:e0:f0:
14:d7:43:b6:b3:51:df:03:1d:1f:5a:ef:29:4c:2b:6f:02:2f:
37:22:1e:06:8b:5d:71:92:70:4a:2a:09:20:c3:30:e7:73:0f:
82:d4:21:13:aa:8c:c4:de:a8:7b:59:b0:aa:e3:7f:48:10:1c:
22:a5:f4:f7:4d:c6:bf:a0:e1:75:aa:95:91:1b:1c:6f:69:3a:
f1:fd:f7:3c:06:32:dd:c1:86:89:31:b6:b4:06:50:b2:99:5d:
6d:d8:88:45:d8:e9:e2:b3:35:b7:d8:96:f7:a4:7d:b0:7a:51:
a1:1d:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org