Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-u3r-nqRbn2o8gquOzalZEiZTQ8.roa
File: 1-u3r-nqRbn2o8gquOzalZEiZTQ8.roa (raw, json)
Hash identifier: SlE2Tlhhtif8/okywTYrxnmyCkM/IG0ytLfg7vDpry4=
Subject key identifier: FA:ED:EB:FA:7A:91:6E:7D:A8:F2:0A:AE:3B:36:A5:64:48:99:4D:0F
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018C445FAE05E12E1EF7D0B65FCC6D9E7945
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-u3r-nqRbn2o8gquOzalZEiZTQ8.roa
Signing time: Thu 07 Dec 2023 13:02:50 +0000
ROA not before: Thu 07 Dec 2023 13:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215881
IP address blocks: 87.251.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:5f:ae:05:e1:2e:1e:f7:d0:b6:5f:cc:6d:9e:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Dec 7 13:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faedebfa7a916e7da8f20aae3b36a56448994d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:33:5d:2d:26:fe:e1:8a:37:7f:51:61:6f:
a3:47:b9:f3:c1:da:e0:91:56:cf:15:af:19:9d:47:
64:eb:c1:b7:d8:90:36:a9:b0:ee:f0:34:6c:2f:c4:
db:0d:12:6d:d6:19:bc:1d:88:8e:09:98:44:26:ff:
5d:63:76:28:35:58:87:ca:28:e8:ba:6c:59:0e:26:
e6:8d:9e:61:4e:6d:52:5f:f0:49:86:78:5b:d9:e5:
34:6a:17:05:e2:98:a6:51:b7:ca:b6:16:01:f8:60:
b1:95:39:cb:90:47:15:f2:c3:d6:9c:74:d0:62:b0:
57:d5:15:39:fb:8d:b9:39:47:9c:66:30:15:2b:54:
69:b6:4e:08:ac:80:1e:be:1e:3c:e3:ce:ae:9c:2c:
8f:d3:01:31:41:d6:e6:ce:61:19:25:0f:40:fd:40:
14:d7:fd:77:e0:cc:a3:da:aa:91:be:ff:3b:8d:82:
bf:10:06:fa:fe:fb:f4:e6:25:76:84:02:36:fd:6e:
48:73:fa:b8:ab:f7:3f:25:5f:87:3a:d0:f3:fe:12:
8e:47:27:98:5a:4e:f3:31:32:b2:ea:49:cc:e6:09:
eb:34:78:71:d9:44:b0:c9:04:d8:00:21:7c:88:88:
a9:06:47:eb:b9:4a:bc:f7:b1:31:d2:e2:f2:d8:46:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:ED:EB:FA:7A:91:6E:7D:A8:F2:0A:AE:3B:36:A5:64:48:99:4D:0F
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-u3r-nqRbn2o8gquOzalZEiZTQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.74.0/24
Signature Algorithm: sha256WithRSAEncryption
11:87:c4:28:99:ba:ae:f7:05:04:5d:d5:43:75:a8:b9:d8:97:
34:bb:e6:6b:7f:41:38:00:be:43:83:15:aa:90:90:15:ca:19:
31:5c:58:3e:80:40:6b:14:6e:56:91:07:20:05:6a:59:56:5b:
b2:6c:3e:7f:6e:0d:20:6a:9f:55:35:3f:3a:a5:80:c9:46:0d:
c3:df:fe:cf:11:3f:b9:21:0e:1f:5c:ee:06:27:7a:c7:78:2c:
2f:a7:7c:17:e0:fd:97:f3:14:ce:00:7c:3c:4c:ba:7c:24:2b:
42:82:5a:8c:b6:4a:d2:66:79:14:6a:e6:82:ee:6b:fb:63:9a:
77:04:a7:f4:d6:7f:b2:48:71:e9:ba:86:e9:84:e4:1d:b7:9f:
4b:f5:aa:15:ec:5d:cc:c7:c2:5d:0b:1e:ee:bd:52:6e:5b:2d:
de:cf:7a:a8:e2:c4:5e:26:d3:39:bd:3f:ef:60:5f:61:ed:dd:
9b:40:8c:11:84:3c:0f:e7:b2:9c:3f:71:b7:fd:b8:ee:4c:20:
80:63:23:73:10:21:75:ae:6d:3e:ae:35:50:71:ef:2f:76:9f:
0d:35:7d:c2:bc:d3:5d:bb:d2:3d:73:4c:c0:e6:9c:35:f3:c2:
af:ae:38:df:a2:c2:5f:b7:79:65:9c:c3:ec:8c:f5:fb:e8:6f:
dd:19:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:25 2024 by rpki-client on console-ams.rpki-client.org