Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/FhMBH86J7yjDBJuTHwjA0ye6WKA.roa
File: FhMBH86J7yjDBJuTHwjA0ye6WKA.roa (raw, json)
Hash identifier: tlYPdevlQauPHVVy5yv+MOZA956aeRK8NflA9tEMwOM=
Subject key identifier: 16:13:01:1F:CE:89:EF:28:C3:04:9B:93:1F:08:C0:D3:27:BA:58:A0
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 018CF29C06ED424811B2E4553E685E7BE9FB
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/FhMBH86J7yjDBJuTHwjA0ye6WKA.roa
Signing time: Wed 10 Jan 2024 09:02:40 +0000
ROA not before: Wed 10 Jan 2024 09:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 87.238.243.0/24 maxlen: 24
87.238.242.0/24 maxlen: 24
87.238.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 12:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:9c:06:ed:42:48:11:b2:e4:55:3e:68:5e:7b:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jan 10 09:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1613011fce89ef28c3049b931f08c0d327ba58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:34:b6:04:8b:39:a7:55:65:1f:f7:e4:cd:
9c:b5:c2:40:ba:48:c0:c6:b2:8b:8c:c9:1a:a9:c0:
ef:4d:68:f7:0a:ab:ba:cd:f1:d0:dd:ea:c1:2c:cb:
9c:6c:60:e6:29:1f:50:b7:45:15:32:de:ef:50:54:
6f:a6:81:8b:a3:5e:0b:ff:b6:18:15:0e:2e:4a:50:
47:03:24:51:9b:45:b8:28:9d:90:20:92:1f:6c:1d:
eb:b0:b9:0d:6d:7b:ac:87:ef:6a:b4:95:bc:8b:9e:
e7:11:5b:c1:26:75:6e:12:bf:97:35:ad:f2:b2:74:
53:07:7f:fc:33:6f:33:e7:80:1c:99:a9:6b:6f:13:
78:00:6c:bf:d2:c2:a7:b4:75:df:10:3f:1d:85:9c:
8a:ab:b9:6d:17:d7:9a:fd:a8:01:89:45:54:4a:31:
93:4a:0c:6d:df:c5:19:1c:66:ee:9c:92:eb:42:ed:
2a:96:90:35:da:db:99:3a:5c:7f:8c:74:a5:bf:1b:
4c:af:b8:b8:a8:14:c2:4d:be:42:4b:ef:e6:dc:cb:
59:c3:b2:db:64:5b:8c:d9:b8:da:34:d6:1a:00:8c:
d9:a7:60:70:6d:58:1c:cd:e9:fd:81:5f:03:1a:b7:
b3:c4:ae:ea:18:47:02:df:d8:80:0d:46:13:75:38:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:01:1F:CE:89:EF:28:C3:04:9B:93:1F:08:C0:D3:27:BA:58:A0
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/FhMBH86J7yjDBJuTHwjA0ye6WKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.241.0-87.238.243.255
Signature Algorithm: sha256WithRSAEncryption
b0:e5:fb:e2:89:6b:84:a2:29:47:3b:43:4f:4f:9e:89:9b:33:
e4:1b:c0:39:24:6a:a5:fb:3c:c3:7e:ae:c4:b7:1c:ec:1b:da:
15:a0:60:d7:77:d8:e1:2d:4a:97:42:17:a5:02:23:1c:91:e3:
c8:85:1d:08:13:a1:cc:4b:8c:c4:bc:30:68:ee:83:d9:2e:28:
d9:c1:4b:f2:65:b9:67:d5:ea:9a:3d:27:7d:80:24:b7:62:8e:
c1:ec:c9:98:3d:c0:81:1f:d6:c1:e8:70:9f:1d:83:b4:38:6c:
27:0d:d3:eb:8c:b8:e3:55:ab:24:6e:12:30:40:64:bc:62:dd:
f3:bb:32:7f:cd:d7:74:c6:87:ca:bd:78:7a:cd:ed:ac:8a:01:
4d:b0:3c:aa:ae:dd:27:04:62:49:3c:03:1f:8f:72:84:34:b7:
02:e7:38:45:23:11:2b:89:80:04:b7:fe:43:b5:de:fb:41:7a:
89:12:b6:50:5a:5b:0e:29:a2:c7:96:46:1d:e4:f5:cb:fe:88:
95:e0:2a:25:05:ba:2f:a9:f4:4f:3d:60:7d:32:15:8a:9f:a7:
09:de:fb:0e:39:9b:f6:8d:7e:c5:af:4a:40:a9:e7:02:0c:02:
0d:a7:6c:b6:9e:85:2e:1f:8d:92:69:c0:03:6a:39:ac:b7:86:
0c:74:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:20 2024 by rpki-client on console-ams.rpki-client.org