Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zW2FRFXrKMbzyzt_h2KlbIsfiwE.roa
File: zW2FRFXrKMbzyzt_h2KlbIsfiwE.roa (raw, json)
Hash identifier: 5DP+DIUAICUy83+/nTcnKD6qzAzmm6KcPSy6MHtwEq0=
Subject key identifier: CD:6D:85:44:55:EB:28:C6:F3:CB:3B:7F:87:62:A5:6C:8B:1F:8B:01
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01862A3879E8948FAE036BA39F78B4548A0C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zW2FRFXrKMbzyzt_h2KlbIsfiwE.roa
Signing time: Tue 07 Feb 2023 04:53:09 +0000
ROA not before: Tue 07 Feb 2023 04:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 87.248.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:38:79:e8:94:8f:ae:03:6b:a3:9f:78:b4:54:8a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Feb 7 04:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd6d854455eb28c6f3cb3b7f8762a56c8b1f8b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:2f:02:c8:c4:3d:94:40:43:0d:d8:21:50:
04:66:49:0f:8b:23:7f:10:a6:e3:56:f3:36:b0:bf:
98:60:e1:c8:b7:4f:92:8c:15:b4:2b:cc:ff:55:c5:
9f:09:a3:b2:19:c3:22:9f:41:24:41:99:75:ec:5b:
35:a3:77:c5:93:8c:c9:32:95:33:85:89:15:ec:c9:
3c:44:e5:20:5a:59:2c:c6:d1:37:6e:4a:92:2f:4f:
0d:9b:7f:2c:4a:eb:88:12:ed:30:bf:0a:a5:8b:d0:
7f:3e:23:5c:49:49:4c:ee:fe:08:45:77:2f:97:d4:
40:15:2c:47:86:d8:53:57:76:4e:7d:4a:50:d9:28:
2c:85:7b:f6:ec:72:40:3a:1a:a7:46:c0:04:9a:4e:
ea:42:f5:78:55:b0:f3:9d:bd:c4:ef:91:c5:40:73:
28:8b:d4:18:73:7e:df:2d:7f:b9:37:a9:28:3b:9d:
5a:40:4c:04:7f:23:d3:5a:70:53:05:7c:bf:21:bf:
7c:d6:11:87:8d:fc:4c:c9:b5:f5:ff:da:93:16:9f:
4b:1c:05:86:2a:8e:7a:4d:02:be:d5:fd:60:33:ca:
6e:ac:ac:1e:10:20:2f:82:b2:5c:3f:e8:76:ad:e1:
b9:78:84:b5:66:48:42:5c:09:8b:0f:ee:65:d6:a0:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6D:85:44:55:EB:28:C6:F3:CB:3B:7F:87:62:A5:6C:8B:1F:8B:01
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zW2FRFXrKMbzyzt_h2KlbIsfiwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.145.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4c:ba:a6:ed:64:17:96:81:10:72:da:bb:74:5d:81:69:4b:
17:f5:45:d9:a7:a9:c9:24:dc:ba:64:fd:0c:87:d0:d7:26:eb:
6d:75:7d:34:f9:05:52:8b:b6:a6:fe:73:64:ad:73:da:c1:f8:
30:a8:fa:e9:2c:df:82:fe:44:ab:7e:f4:63:4c:ae:0c:56:68:
dc:35:79:bd:c3:d7:6c:a7:56:8b:45:4b:48:64:60:30:61:52:
84:aa:95:de:3b:f9:72:86:7c:62:c7:49:55:b3:e9:05:fb:c0:
fa:7b:ac:87:b6:f4:74:94:8b:7d:2c:24:6e:e9:3e:ff:1e:4c:
d5:d5:ef:28:a4:92:5b:67:2d:e6:91:e0:b2:56:4e:ec:78:5c:
96:13:40:fa:4b:40:de:d2:a9:86:7e:f5:a7:92:e9:48:06:b0:
67:7f:31:c4:28:64:5b:74:6b:f4:8f:15:05:8f:02:4b:8c:88:
17:0f:aa:ea:02:bc:a5:e6:34:14:3e:3e:6a:3f:89:2b:46:b9:
81:18:1a:71:f7:25:1b:ab:08:5b:55:91:f5:49:5a:37:71:93:
15:63:c6:15:87:1b:98:49:c7:ce:9f:64:17:87:74:a0:2e:b1:
59:90:63:e8:cc:c1:68:47:66:0b:9e:a5:59:96:c2:9a:7a:4d:
b3:97:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org