Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/_1Z9ENaMqB5vfvL2jhmZY_7TZXg.roa
File: _1Z9ENaMqB5vfvL2jhmZY_7TZXg.roa (raw, json)
Hash identifier: h9CRr6U9oOIeBSt/E5GQ8mgKL2MOpyjbzvVmkZwGX4s=
Subject key identifier: FF:56:7D:10:D6:8C:A8:1E:6F:7E:F2:F6:8E:19:99:63:FE:D3:65:78
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 0186C5C738C69679BE92A281CF488C82849C
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/_1Z9ENaMqB5vfvL2jhmZY_7TZXg.roa
Signing time: Thu 09 Mar 2023 09:50:13 +0000
ROA not before: Thu 09 Mar 2023 09:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 08:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:c7:38:c6:96:79:be:92:a2:81:cf:48:8c:82:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Mar 9 09:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff567d10d68ca81e6f7ef2f68e199963fed36578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:f1:5f:8d:72:34:6c:e5:62:af:4c:19:b3:
bb:ef:97:44:04:3f:87:f1:e9:30:06:be:de:56:1b:
c3:79:47:35:b7:8d:18:ae:34:da:eb:a3:37:ce:dc:
5b:69:08:4f:2d:72:bd:db:02:5f:bc:2d:c4:db:69:
fd:de:3f:32:d5:59:8f:73:6c:0a:8d:e7:f0:c4:40:
82:33:ae:38:9c:80:a3:10:05:b3:ad:c3:8a:49:29:
45:b8:24:8a:55:d5:40:79:95:fb:05:14:a6:19:a7:
91:fb:2f:cc:36:16:ad:12:34:e3:32:62:b3:da:04:
5e:c5:88:04:ef:7d:5e:1b:6e:2d:38:59:b4:c6:70:
73:a5:95:28:50:01:7f:7d:f2:fb:c0:ea:79:91:e5:
a9:b3:c9:cf:5a:e9:5b:64:64:6e:b0:02:a1:f5:6d:
83:fc:8b:69:d1:58:9a:13:e6:8b:b5:17:38:19:a8:
7d:0c:72:a8:70:3d:a6:6d:be:c5:bd:d9:31:28:2b:
83:9b:8d:00:e3:ca:5b:74:cc:8a:c3:f5:33:db:cc:
48:99:7d:9e:02:cc:76:cc:3b:74:07:c4:de:20:29:
8f:55:e8:48:7c:2e:18:ac:49:c9:5f:08:de:35:4b:
88:52:5f:92:4b:5b:78:2a:e4:6c:db:ca:75:46:00:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:7D:10:D6:8C:A8:1E:6F:7E:F2:F6:8E:19:99:63:FE:D3:65:78
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/_1Z9ENaMqB5vfvL2jhmZY_7TZXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ac:92:79:82:8f:0a:e9:84:81:0f:d3:9f:b3:81:a8:6d:0c:
9f:85:8e:5b:29:f1:60:27:01:50:0c:89:cb:0d:95:97:30:c4:
80:31:37:b5:73:bc:ff:f3:a7:f0:fe:b9:4f:32:48:05:b9:5d:
58:7a:e1:ea:b7:45:36:9b:57:1c:73:c4:c0:19:a1:dd:2e:09:
99:24:2b:b9:8f:b7:e8:a3:da:79:a6:4c:e5:8a:86:df:ff:ea:
34:f2:aa:b7:fe:35:e4:f3:88:df:9c:12:3b:0d:a4:e2:84:06:
d5:83:f0:0c:80:89:4a:40:d6:f7:ce:64:19:2f:ba:97:db:31:
0a:77:f2:0d:0d:c5:c2:b9:b0:f9:f3:68:20:4f:49:45:c5:46:
c7:f6:8c:f8:38:49:0f:01:ea:21:58:af:a8:e3:23:4b:54:2b:
a7:52:52:90:12:f4:99:3a:df:f3:c5:cc:0e:f7:bf:02:ae:fe:
87:33:af:3d:cb:b2:b9:6a:b1:68:7a:f0:69:36:70:bb:43:d3:
9d:55:a4:6e:ab:6d:3a:07:9f:5c:4d:bd:e6:5d:d5:e3:84:8e:
64:9e:be:67:3e:43:84:cd:f4:7b:b9:34:ea:ea:83:a9:48:9f:
eb:f8:ef:17:f9:66:72:c4:7b:6d:9b:f8:13:70:a5:a4:97:95:
74:92:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:27 2024 by rpki-client on console-ams.rpki-client.org