Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/fFQ6VKVtN3KJgm9opZabj8yxIe0.roa
File: fFQ6VKVtN3KJgm9opZabj8yxIe0.roa (raw, json)
Hash identifier: Bx/+CmZNy6xj3yp8e9ZPrahYS+wjqaoufkr5WzyRQxY=
Subject key identifier: 7C:54:3A:54:A5:6D:37:72:89:82:6F:68:A5:96:9B:8F:CC:B1:21:ED
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 018CC9BBCFA18A928941F2CB01CD21137559
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/fFQ6VKVtN3KJgm9opZabj8yxIe0.roa
Signing time: Tue 02 Jan 2024 10:32:57 +0000
ROA not before: Tue 02 Jan 2024 10:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208264
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 06:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:cf:a1:8a:92:89:41:f2:cb:01:cd:21:13:75:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Jan 2 10:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c543a54a56d377289826f68a5969b8fccb121ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:f5:e5:1f:d8:83:b1:f9:16:95:99:1e:0a:
d5:2c:13:9e:9f:a2:e8:78:7f:8d:4d:6a:74:5b:ef:
ce:5a:10:fa:af:7b:61:53:b2:ed:a3:8d:e3:19:61:
1b:f9:ad:d0:f0:9d:a2:42:90:44:0d:bd:f5:be:71:
3e:14:cb:d4:41:60:5e:74:e6:a4:81:02:96:d9:6f:
41:f8:10:e5:47:2b:69:4d:bd:fd:df:8a:e7:d3:87:
7e:91:73:2a:63:83:ae:a5:b7:eb:8e:6a:28:da:97:
14:51:65:8f:85:28:40:8a:d7:b2:79:30:03:74:00:
08:12:fe:50:5d:20:c7:f5:b5:bc:a1:26:48:08:e8:
eb:9c:c2:62:bd:c2:79:8c:4e:35:fb:a3:17:9e:1b:
fb:4a:90:31:a5:d9:8c:06:d1:53:5d:b1:d4:36:fc:
62:10:ba:d3:f0:dd:a9:8a:7f:b2:a2:b3:de:fb:e2:
60:1d:31:83:30:1a:47:8a:4d:df:a4:0c:28:54:53:
d4:35:c5:51:91:e3:ad:82:d6:f8:a2:45:ba:24:72:
39:8a:03:eb:55:06:07:a5:d7:20:bc:1b:dd:0a:37:
5a:f1:8d:91:57:39:26:ca:b6:0a:f9:13:da:2c:d2:
a0:49:9f:55:df:f0:66:24:fe:b1:8a:4f:73:5e:33:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:3A:54:A5:6D:37:72:89:82:6F:68:A5:96:9B:8F:CC:B1:21:ED
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/fFQ6VKVtN3KJgm9opZabj8yxIe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:57:6e:34:71:3e:d2:a6:b4:ca:f6:44:6d:bf:a1:36:c9:39:
f4:8d:b6:08:55:80:98:25:48:01:20:0a:a3:e0:34:7b:31:58:
9d:99:8a:b8:c2:ed:dc:f3:29:23:6b:77:b8:a0:2f:28:04:2b:
00:0d:01:85:26:e5:38:5a:f5:5d:f9:c7:b7:31:7a:87:cd:b7:
9d:28:42:b9:5b:bc:40:bb:44:02:53:68:0b:f0:b0:9e:40:6a:
a3:a9:14:6e:6d:2b:e0:c9:fb:d7:5b:2a:e8:2f:82:11:51:63:
d8:df:b3:d7:dc:a4:e4:11:55:4f:5a:fc:dd:33:c9:5a:ba:1f:
a2:42:f5:2f:9a:28:9f:85:b2:37:57:37:0d:bd:38:8b:34:7b:
c8:5d:bc:c5:64:61:0e:25:ba:96:d8:06:2b:93:ea:d2:15:f0:
13:ba:82:16:79:90:c0:62:bc:37:e2:51:2e:f8:fa:a8:bd:e3:
37:36:70:e8:47:94:88:48:19:02:d1:b7:f4:6e:ad:25:5e:29:
20:ae:22:79:7a:4f:04:60:cb:b2:c3:6b:93:d2:4a:69:13:85:
88:d1:c5:bf:07:9e:cc:f0:0d:ef:ef:fc:d7:c3:a7:8e:3e:79:
f6:ac:77:05:b7:0f:e9:1e:d4:ad:74:45:d3:8c:5c:83:13:b7:
46:35:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org