Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/9cbEsQ29uerWHPnXjMzclTHOBVU.roa
File: 9cbEsQ29uerWHPnXjMzclTHOBVU.roa (raw, json)
Hash identifier: 91JOeZiktF/b4QM6zaBGlAzS21PEif5MZW7JhXBa+IE=
Subject key identifier: F5:C6:C4:B1:0D:BD:B9:EA:D6:1C:F9:D7:8C:CC:DC:95:31:CE:05:55
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 018C39E7153317C2159C34A5DE0B9BE731D3
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/9cbEsQ29uerWHPnXjMzclTHOBVU.roa
Signing time: Tue 05 Dec 2023 12:14:54 +0000
ROA not before: Tue 05 Dec 2023 12:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 87.238.243.0/24 maxlen: 24
87.238.242.0/24 maxlen: 24
87.238.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:e7:15:33:17:c2:15:9c:34:a5:de:0b:9b:e7:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Dec 5 12:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c6c4b10dbdb9ead61cf9d78cccdc9531ce0555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:23:76:ff:bb:0b:9b:82:f2:a2:26:a5:82:
cf:c5:44:f4:a0:70:47:bc:60:7e:23:17:0c:a1:8f:
e8:9f:6d:f0:a2:35:34:96:87:c7:c7:c9:de:30:fa:
61:e4:69:11:de:49:f0:ed:d6:04:69:e1:9f:ca:2a:
87:41:0d:01:c8:3c:d0:82:5d:9f:ac:6e:65:48:43:
87:91:32:09:78:7c:63:19:66:da:82:3b:4c:a8:44:
4c:6e:a3:91:cc:cb:c3:72:42:4b:00:2c:3d:3d:b2:
0d:c4:b0:d5:b5:22:7f:9a:95:e5:85:8d:8b:ad:de:
65:34:f1:36:07:e7:b1:6c:34:03:3e:20:13:13:1c:
b7:1e:58:64:6c:56:2f:d6:4f:ea:38:1b:93:51:87:
99:51:dd:1b:05:f1:49:37:00:94:a4:08:8f:5d:78:
fb:c5:73:cd:33:f0:80:3d:82:13:4d:af:69:9c:c1:
9a:54:14:0d:37:83:4f:ba:cb:4d:7f:49:ca:fc:b6:
3e:9c:5b:fc:20:15:8c:a6:6c:6e:72:49:09:0d:52:
97:2e:a1:56:e4:50:f1:fe:b3:96:e4:de:01:63:d2:
d3:fc:f7:4b:5f:09:6a:b7:6c:d8:4e:4c:2a:f3:55:
8b:be:f9:1b:7d:11:8b:9f:77:3a:61:c0:4b:8b:e1:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:C4:B1:0D:BD:B9:EA:D6:1C:F9:D7:8C:CC:DC:95:31:CE:05:55
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/9cbEsQ29uerWHPnXjMzclTHOBVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.241.0-87.238.243.255
Signature Algorithm: sha256WithRSAEncryption
10:a1:29:a7:6e:a0:ff:68:cd:61:98:28:47:62:78:15:db:95:
5f:5a:98:a4:87:28:ac:99:f6:2a:3e:4f:27:e5:7a:0f:3d:f8:
dd:72:2c:57:fb:36:61:80:77:b7:3d:83:d3:d5:72:b4:7b:be:
29:d5:3a:ea:1c:ed:6a:e4:85:3e:92:7e:d9:c7:cf:d9:5e:20:
0d:fb:b8:80:d9:45:52:89:0b:83:9f:f6:82:13:3d:1e:2a:c0:
ea:f1:dc:d2:6d:7b:ad:20:e6:14:2e:b1:ae:a2:69:f1:fe:f8:
83:79:73:35:1f:9f:77:03:d4:b4:03:22:cf:9d:9a:44:48:83:
32:91:50:d5:0b:cb:6b:9b:19:65:ed:31:7b:6d:93:d3:2d:50:
c6:d9:25:c4:a9:b2:d0:4e:bf:90:91:5c:ca:3d:eb:45:a4:df:
a9:6c:3c:0b:b3:b8:45:01:ac:d0:fb:b3:b6:76:0a:06:df:cb:
2d:de:bf:96:31:74:7b:73:6a:6f:02:0b:99:1d:fc:92:e6:fa:
48:f4:ca:7a:06:6a:dc:79:70:69:da:ee:d9:12:b0:8f:0f:51:
b4:08:f0:04:5c:3c:87:d6:bb:1d:1f:90:26:a6:db:4b:42:f4:
4a:b1:0e:97:e8:2e:35:41:f4:f0:95:06:85:ee:3c:6c:08:5c:
fc:8b:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:26 2024 by rpki-client on console-ams.rpki-client.org