Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/mubPA7gMQg8hBbt3zAJXWt6-lkw.roa
File: mubPA7gMQg8hBbt3zAJXWt6-lkw.roa (raw, json)
Hash identifier: vX/GfzopYxmPGARcPaHksTdB4RyHjBY3iVIygl0poGQ=
Subject key identifier: 9A:E6:CF:03:B8:0C:42:0F:21:05:BB:77:CC:02:57:5A:DE:BE:96:4C
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 0190C4AA01ED37A0747A31B3471BEAD8DFEA
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/mubPA7gMQg8hBbt3zAJXWt6-lkw.roa
Signing time: Thu 18 Jul 2024 07:06:34 +0000
ROA not before: Thu 18 Jul 2024 07:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49063
IP address blocks: 87.242.76.0/22 maxlen: 22
87.242.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 08:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:aa:01:ed:37:a0:74:7a:31:b3:47:1b:ea:d8:df:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Jul 18 07:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ae6cf03b80c420f2105bb77cc02575adebe964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:28:86:dc:b3:5f:e7:29:b7:b9:46:f4:af:3c:
c0:16:f3:5d:2a:7b:79:0d:ce:91:15:b1:aa:e3:f2:
2a:87:f6:42:0f:02:8f:4c:6f:f7:60:c9:55:e1:fe:
e3:23:c0:49:d3:d6:1a:e1:ae:16:f8:97:89:e8:cd:
08:4f:22:03:ef:be:b8:46:24:11:5d:86:80:8d:82:
e5:fc:68:93:e1:04:59:9c:d1:6c:dc:ac:3a:91:7c:
16:a3:31:da:94:41:24:f0:e1:01:84:2a:86:a9:9d:
cc:1e:17:49:06:09:32:8e:cc:47:65:55:10:61:7a:
b6:d5:41:fd:f7:80:2b:ac:a4:1f:8d:f4:dd:31:7c:
c9:cc:a5:2a:89:9c:4d:37:34:7c:cc:6a:7a:04:32:
a3:ae:1b:c1:46:7d:36:7f:17:95:6f:82:a0:58:9d:
5e:50:9b:82:80:6a:3a:03:8c:be:b1:5b:84:12:ff:
ad:aa:37:24:4b:1c:29:af:f9:73:50:58:e1:8a:21:
77:76:a8:b8:e1:d2:18:59:01:b0:c5:11:00:9e:f3:
ea:0c:94:26:9a:76:74:81:7b:3d:c8:54:1b:be:6f:
52:ca:6e:f5:0e:e2:fb:31:5e:b1:44:c9:9a:b7:0d:
14:84:7b:78:51:26:a9:fa:90:60:c1:9d:c0:9b:32:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E6:CF:03:B8:0C:42:0F:21:05:BB:77:CC:02:57:5A:DE:BE:96:4C
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/mubPA7gMQg8hBbt3zAJXWt6-lkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.76.0/22
Signature Algorithm: sha256WithRSAEncryption
61:22:48:e7:9c:a8:58:c1:10:a6:b6:f3:d7:c4:ae:24:61:fd:
c2:b3:03:69:22:17:1c:b0:42:52:74:a4:5f:2d:7a:fa:69:39:
9a:5a:a7:a0:b5:32:9b:48:05:f1:22:7b:dc:02:e4:d5:5c:c5:
0f:28:eb:c5:bb:c7:ad:c6:83:3c:5b:63:8f:ec:f3:13:e9:d7:
d4:91:c7:fd:d8:ee:06:3b:66:e4:74:57:89:ee:b5:46:fb:49:
42:0a:67:4d:7f:3e:60:48:44:63:a6:98:c8:07:85:33:d7:03:
35:66:06:ee:bc:1b:b5:34:34:0f:8f:bd:7b:4f:90:c8:bc:ac:
22:f6:32:05:c8:c6:71:5d:cc:c3:c6:6e:71:fd:d4:da:6b:2e:
bc:a3:52:ed:ed:cd:f6:47:f9:8b:a3:11:6d:11:89:98:cf:66:
8d:1d:11:b8:42:94:2d:5d:b7:c6:6c:1e:78:ed:a6:2e:a7:2a:
62:79:46:29:81:c6:4f:f9:e6:55:8f:49:18:8d:a7:98:cb:f1:
99:43:9a:1c:b0:2f:62:35:fc:ca:b3:27:14:e4:49:55:53:d7:
25:4a:be:b4:16:76:54:fb:56:fb:26:93:fb:7e:29:ed:61:34:
90:bf:56:8e:81:ca:44:a2:95:58:23:e6:1a:d0:71:47:54:c1:
fd:a7:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 11:05:22 2024 by rpki-client on console-ams.rpki-client.org