Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/8QqmzEO7vYfnHLmMLPzdmH9FTJ0.roa
File: 8QqmzEO7vYfnHLmMLPzdmH9FTJ0.roa (raw, json)
Hash identifier: XlQynvhRYKcMUlnvxvN1+31wOiifMCH6uW8vtrcf09U=
Subject key identifier: F1:0A:A6:CC:43:BB:BD:87:E7:1C:B9:8C:2C:FC:DD:98:7F:45:4C:9D
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 018DAF62C417A8BBC648BF8C1ADEA08932F3
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/8QqmzEO7vYfnHLmMLPzdmH9FTJ0.roa
Signing time: Fri 16 Feb 2024 00:48:21 +0000
ROA not before: Fri 16 Feb 2024 00:48:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22364
IP address blocks: 87.238.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:62:c4:17:a8:bb:c6:48:bf:8c:1a:de:a0:89:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Feb 16 00:48:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f10aa6cc43bbbd87e71cb98c2cfcdd987f454c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:38:07:09:03:f5:5a:a4:32:e5:22:9e:c7:4a:
ab:b4:02:9f:ce:49:21:c3:96:e6:93:89:bd:66:af:
bd:50:47:09:e1:23:55:d0:db:ba:f3:96:90:46:d6:
a3:4b:27:aa:d8:a5:a8:e2:a4:5f:97:0b:15:47:b4:
cb:8b:1a:d4:b1:41:8c:b8:71:35:f2:73:58:09:a8:
16:98:dd:d0:fb:73:df:66:23:e0:1d:ac:d5:c0:5b:
68:c5:78:87:4b:3f:29:0b:74:f7:42:05:60:71:43:
12:f4:fb:97:58:53:8e:5c:60:82:56:4a:ee:43:9d:
c5:1d:0f:d4:f0:d3:3e:7b:c4:3d:12:98:ee:dc:37:
9c:bc:f0:cb:be:aa:d1:cc:14:fd:d0:cf:16:c2:71:
78:90:ae:32:b6:df:83:f9:9e:6d:9c:a8:99:5c:41:
c8:f5:69:e7:8d:7a:65:48:ea:24:61:37:30:5c:94:
09:b0:9b:2e:d6:92:21:a4:f1:ef:11:8f:98:0a:ff:
2d:f0:92:20:69:46:4f:b4:da:96:78:b8:cf:69:d4:
d0:03:7e:1b:2b:cf:d6:88:82:7d:3d:5d:f6:ab:79:
f6:22:86:93:2a:6f:17:c1:0d:bb:3b:a5:19:1b:04:
f3:36:1f:f4:0f:d2:3e:5d:d2:7c:e0:58:3d:86:30:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:A6:CC:43:BB:BD:87:E7:1C:B9:8C:2C:FC:DD:98:7F:45:4C:9D
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/8QqmzEO7vYfnHLmMLPzdmH9FTJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.243.0/24
Signature Algorithm: sha256WithRSAEncryption
66:05:c7:d8:21:2e:ad:17:a6:92:c7:0c:54:0b:a6:7f:73:a1:
f6:8e:63:59:55:73:5f:53:e6:6a:47:58:58:c2:06:ea:33:7f:
b6:76:10:16:1c:d4:ab:61:7c:49:5d:1e:6c:ff:9b:2c:0e:3c:
3c:55:d8:95:b2:2c:06:f1:7b:f6:f2:87:93:0c:8f:73:25:fa:
ff:ce:8e:01:13:29:22:44:b1:56:6b:6b:09:3c:56:ce:7a:a4:
d3:88:c2:75:71:06:95:36:0f:5d:c9:38:2e:ec:9f:69:0b:d8:
f7:6e:32:d6:2c:9f:be:56:59:48:ca:c3:b2:2f:a1:f7:55:7e:
bb:31:f9:6f:21:1d:6c:d4:7c:aa:83:4e:91:e8:a9:2b:29:b6:
a2:8e:90:f0:a2:9a:d6:b7:30:0c:7b:00:d9:db:6e:15:a4:a2:
7b:3d:89:fd:25:9f:00:ae:8a:b8:cf:57:3b:7b:03:dd:47:0b:
4b:5c:e1:8b:95:07:2c:7f:1f:24:33:4f:b4:58:0a:17:9f:9a:
9d:c3:8a:44:6e:8e:73:df:96:e7:bc:1b:7c:45:3b:a1:cf:2a:
a4:d4:7f:6a:fc:59:3b:3d:59:25:3c:1b:ca:28:fe:15:b6:8a:
75:6b:94:c0:a2:a7:06:6d:ed:d6:46:f7:a4:d5:00:3e:e2:4f:
74:91:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:01 2025 by rpki-client