Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/87_MYt1HbhhVCoNVbsU4GrULBuk.roa
File: 87_MYt1HbhhVCoNVbsU4GrULBuk.roa (raw, json)
Hash identifier: ua/PFZg9gDmyvr44TfQOa7RPuKy91HgD9684OTqDpsM=
Subject key identifier: F3:BF:CC:62:DD:47:6E:18:55:0A:83:55:6E:C5:38:1A:B5:0B:06:E9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018EF1738E1FEE10613185FBEAC0D5135F1B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/87_MYt1HbhhVCoNVbsU4GrULBuk.roa
Signing time: Thu 18 Apr 2024 13:44:25 +0000
ROA not before: Thu 18 Apr 2024 13:44:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
89.36.34.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 10:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:73:8e:1f:ee:10:61:31:85:fb:ea:c0:d5:13:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 18 13:44:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3bfcc62dd476e18550a83556ec5381ab50b06e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:7a:e9:d2:82:9b:36:d4:e7:05:86:dd:5d:
dc:e8:c4:05:4f:95:c0:ca:cb:f3:1e:cc:78:b6:b2:
77:e4:ad:88:c4:54:b8:51:4e:30:97:d1:8d:71:03:
39:e5:67:aa:13:17:8a:ea:70:64:df:93:a5:1f:9f:
27:fa:6d:f9:14:f6:32:70:a5:03:f9:be:3b:56:ce:
9b:c9:2c:be:29:47:85:e0:da:52:ad:3a:7a:91:3d:
d1:75:9a:2f:05:0e:10:6a:ca:32:43:78:39:ab:10:
26:15:62:4d:50:11:d9:8a:58:39:f6:44:41:f3:be:
0f:80:73:9e:e9:16:05:28:9c:d0:08:77:fc:9e:7a:
3f:95:f2:11:3b:29:c8:e9:2c:25:cb:8d:3f:1c:b6:
b9:49:51:48:b5:9b:4b:3b:8c:65:85:a6:0f:be:5f:
fe:91:9e:d1:c8:bd:47:a3:cd:d8:cf:c1:67:62:d2:
b7:1c:4d:5c:e4:e6:91:c7:0e:8b:c5:6f:ea:bc:58:
88:7a:b4:3a:26:94:a8:98:66:8c:6b:0e:ab:b9:19:
4f:7a:1b:dd:2b:77:de:8b:d1:ef:fd:bc:3e:4d:9b:
f8:05:67:6f:18:10:5e:23:5c:dc:02:06:ea:0b:98:
d1:73:f3:f4:bf:da:05:1e:5d:15:36:99:0b:c9:89:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BF:CC:62:DD:47:6E:18:55:0A:83:55:6E:C5:38:1A:B5:0B:06:E9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/87_MYt1HbhhVCoNVbsU4GrULBuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.152.0/24
89.36.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:d8:57:56:2c:c7:64:7f:66:c7:7a:f9:c9:b5:bf:9e:17:24:
86:db:a6:38:f5:fc:2c:1c:35:78:d8:7e:a0:83:7e:21:53:c6:
cc:87:4a:cb:bd:94:31:e1:1c:fd:67:cb:43:a4:f5:f5:e6:77:
a9:40:69:88:51:44:b9:89:54:fa:ce:73:aa:d0:93:16:1a:3f:
59:ee:a8:df:fe:8b:70:29:2c:b7:ec:e3:8d:85:09:04:a2:8b:
df:4e:65:d4:2d:4d:ec:4f:0b:ab:ae:9b:59:3f:7c:3d:19:cf:
93:68:e3:0d:0e:14:e1:0d:c4:18:57:3d:2f:b0:47:50:41:a8:
e7:b2:f3:b9:23:3f:eb:1c:db:58:5f:e4:1a:80:2b:79:91:3e:
d9:8c:04:e7:2e:39:b2:dc:31:5d:56:8b:9d:03:2b:97:2b:1a:
b6:98:f3:24:ed:d2:dd:92:60:dd:d5:3b:26:80:17:b1:9a:aa:
04:b2:a9:21:96:10:cd:06:19:07:b5:09:8d:d3:ca:72:21:ba:
4b:af:31:7b:8b:75:04:9e:21:4d:9e:fe:4b:72:bd:82:fb:68:
c5:2a:09:a9:38:ab:23:c1:9f:25:34:97:55:85:cc:87:6a:61:
60:c4:40:46:30:46:ff:05:99:8f:c6:4d:f5:6b:49:69:da:11:
6c:54:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:44 2024 by rpki-client on console-fra.rpki-client.org