Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/JwPP7aSPNvVKWPZrjMDLWD0Px68.roa
File: JwPP7aSPNvVKWPZrjMDLWD0Px68.roa (raw, json)
Hash identifier: R+ROlXWrruP9dRyEDeyvlun998davlcsG9wS6ScQ1Iw=
Subject key identifier: 27:03:CF:ED:A4:8F:36:F5:4A:58:F6:6B:8C:C0:CB:58:3D:0F:C7:AF
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 01856CC15DEBCE7DBED5B16F0F0D2CE6A847
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/JwPP7aSPNvVKWPZrjMDLWD0Px68.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211291
IP address blocks: 87.249.61.0/24 maxlen: 24
87.249.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5d:eb:ce:7d:be:d5:b1:6f:0f:0d:2c:e6:a8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2703cfeda48f36f54a58f66b8cc0cb583d0fc7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:08:6f:80:d3:48:5d:ce:7b:a0:2d:bb:f5:
c5:75:2f:9b:f6:d2:b7:a7:85:25:3b:f4:bf:9c:b9:
75:d0:63:9e:ea:1d:f2:b7:55:e1:21:68:75:06:90:
d8:9f:8c:16:1c:87:e7:2d:26:37:d6:b0:7c:dc:b3:
d0:bb:0f:fd:f3:ef:9c:36:52:43:b1:b6:3f:6d:cf:
19:1f:52:e2:02:79:3c:5d:14:44:80:b1:3d:3a:3a:
64:e6:18:4f:49:d6:e6:45:7d:ed:fa:6c:15:df:e7:
d9:3c:b3:6e:c9:ef:37:f4:36:4b:d1:97:b9:1a:70:
10:a8:d9:c5:03:56:88:3f:bf:99:a2:8b:54:6d:6d:
59:e4:05:bc:a7:20:90:92:22:5c:68:af:03:91:38:
98:34:c0:ea:e6:fb:e9:f4:81:8e:13:3a:ca:eb:59:
44:28:93:2f:58:34:66:41:0c:42:48:3d:7c:3e:f1:
f1:f2:50:06:8e:ca:a5:f5:e2:24:4c:b7:e4:2b:da:
50:bf:77:d1:8a:4a:0c:c6:c0:46:5f:24:a8:55:c9:
e6:78:74:c4:9e:59:cb:81:63:0a:7a:44:73:28:b7:
4f:9e:1e:24:0a:10:e0:b6:5f:21:2b:1b:89:74:7a:
f2:43:b3:76:90:a9:8a:64:4c:69:21:84:a3:27:bf:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:CF:ED:A4:8F:36:F5:4A:58:F6:6B:8C:C0:CB:58:3D:0F:C7:AF
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/JwPP7aSPNvVKWPZrjMDLWD0Px68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.61.0-87.249.63.255
Signature Algorithm: sha256WithRSAEncryption
97:1d:01:12:2a:7c:65:9e:e6:fe:06:32:b1:8a:94:40:f5:10:
c4:99:4c:ab:68:f2:47:5f:40:2b:70:54:d1:14:f1:4a:70:98:
03:e9:12:42:a9:2e:fb:07:4a:06:96:0f:da:8a:a8:33:08:4e:
64:60:20:53:d6:70:5a:84:1b:ba:dd:54:6d:3f:7c:43:a0:47:
5a:70:0e:50:65:29:32:10:83:2d:14:6c:14:78:3e:9b:19:a6:
ef:05:cb:5d:11:0d:35:d5:0e:a4:28:6e:4b:a8:9f:cb:76:d0:
cc:74:44:67:ae:86:38:08:cf:cb:40:3e:0c:87:c9:f3:2e:77:
81:85:99:a7:e7:39:a3:52:c0:8e:56:a7:da:0f:e8:05:a7:4d:
cc:dd:cf:6e:a9:c8:aa:72:32:9b:3f:1c:48:1b:4f:e0:64:9b:
26:f0:7d:2d:14:c2:de:46:e4:49:93:03:16:c8:b1:41:b3:e1:
cf:c4:19:68:ee:7e:30:86:7f:3e:3d:bc:67:bd:8f:c8:f4:13:
a7:52:68:c0:e8:22:d7:6a:ae:f1:f8:11:af:6f:77:16:39:69:
aa:9e:13:03:bd:a2:b8:01:30:eb:5c:8a:39:51:45:ef:76:67:
3e:13:1d:b5:e0:dc:5b:07:38:10:38:cd:34:03:e3:aa:bb:41:
3f:63:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org