Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/bfFilF_dBoX_gjRgV6ca_RlFkp8.roa
File: bfFilF_dBoX_gjRgV6ca_RlFkp8.roa (raw, json)
Hash identifier: J77hSKPf1WW7h1F3mS8XmpsWoX3VCKH/CAvWKOsQ9Sg=
Subject key identifier: 6D:F1:62:94:5F:DD:06:85:FF:82:34:60:57:A7:1A:FD:19:45:92:9F
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 018570397C374AB12BA646996B45B34AE3F4
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/bfFilF_dBoX_gjRgV6ca_RlFkp8.roa
Signing time: Mon 02 Jan 2023 02:04:53 +0000
ROA not before: Mon 02 Jan 2023 02:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17802
IP address blocks: 87.236.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:7c:37:4a:b1:2b:a6:46:99:6b:45:b3:4a:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Jan 2 02:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6df162945fdd0685ff82346057a71afd1945929f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:7a:2b:e1:c8:9c:c4:1c:f9:97:83:7a:9d:
d1:8b:04:20:13:f9:09:02:b4:18:39:96:6f:7b:fb:
48:4c:65:bf:6a:d6:73:01:d3:79:86:ec:76:c0:6d:
03:9f:17:10:12:fd:c7:8e:19:17:c0:d7:cc:33:9b:
b6:2b:0e:cc:ae:10:62:e3:53:aa:d3:0b:fa:11:32:
23:63:fb:6b:8b:b4:98:09:49:d8:51:cf:e1:eb:f1:
c5:1b:7b:ce:3e:9d:bc:0f:a7:06:96:c4:f1:58:e7:
f6:ed:d9:ab:1c:ff:b6:43:31:b4:89:e6:3c:18:d6:
85:02:d1:fa:49:c0:78:92:3c:69:8d:1a:50:8d:80:
f0:1c:a5:5f:3e:2f:35:9a:54:f8:d3:4c:11:f5:da:
a0:fc:55:7e:54:20:bd:5e:d5:eb:3c:17:17:62:12:
85:00:f5:44:f2:0b:ef:2d:e9:3d:72:f9:c4:1e:9f:
da:1e:8d:8a:a6:36:34:c2:1e:b9:38:3d:9b:0e:a4:
9f:8b:a9:57:59:c9:0a:23:19:5b:fb:81:d3:9d:d8:
e6:67:8c:a5:59:bc:f4:b0:ea:6c:9f:64:ac:b6:0c:
16:46:fa:60:a9:89:69:d7:a6:9e:80:cd:21:57:6e:
06:c7:38:20:e7:4a:2a:8e:cf:3b:70:37:00:8c:2e:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:62:94:5F:DD:06:85:FF:82:34:60:57:A7:1A:FD:19:45:92:9F
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/bfFilF_dBoX_gjRgV6ca_RlFkp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.67.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:fb:84:46:a2:bd:49:9b:ad:fa:31:f1:00:13:4b:e6:dd:
43:46:e2:64:0c:41:3d:a1:f8:fd:52:01:c2:88:2a:5f:c7:73:
01:d9:aa:ef:25:84:60:33:bc:9c:ef:64:d3:8c:bb:2c:42:34:
3c:2e:aa:a9:a6:fe:96:83:ce:72:f4:bf:9a:ed:ea:48:2e:38:
44:27:13:d9:32:dd:64:d2:a1:1a:bd:f6:b6:e6:c2:71:61:4a:
83:b8:a4:31:67:20:2c:03:a5:28:59:f5:f3:91:bb:87:74:fa:
0a:ca:c1:6e:54:92:a8:61:c3:f0:c2:52:47:89:0d:ba:58:c6:
f5:97:84:2e:31:6c:4e:b2:7b:0f:56:b7:f1:b3:60:dd:ba:d3:
94:17:03:bc:3b:6b:f4:0e:12:92:b8:cc:4c:91:05:99:02:e3:
06:99:87:2e:16:ce:1c:1e:2f:ce:92:c0:db:a2:12:bd:c0:2a:
e7:f5:8f:74:1b:ba:64:2f:bd:89:04:98:fe:13:96:30:d3:fb:
f2:48:95:d0:54:0b:d0:3a:5c:dd:8a:28:05:d6:f7:c6:17:6a:
cb:ad:d2:7c:14:6e:18:2d:42:ae:c9:83:ab:82:1a:dc:d8:44:
97:b8:99:59:11:b8:8d:e8:06:44:85:8f:21:db:18:2f:41:d3:
e5:24:3d:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOXw3SrErpkaZa0WzSuP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0
YmExYzkwHhcNMjMwMTAyMDIwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGYxNjI5NDVmZGQwNjg1ZmY4MjM0NjA1N2E3MWFmZDE5NDU5MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGF6K+HInMQc+ZeDep3RiwQgE/kJ
ArQYOZZve/tITGW/atZzAdN5hux2wG0DnxcQEv3HjhkXwNfMM5u2Kw7MrhBi41Oq
0wv6ETIjY/tri7SYCUnYUc/h6/HFG3vOPp28D6cGlsTxWOf27dmrHP+2QzG0ieY8
GNaFAtH6ScB4kjxpjRpQjYDwHKVfPi81mlT400wR9dqg/FV+VCC9XtXrPBcXYhKF
APVE8gvvLek9cvnEHp/aHo2KpjY0wh65OD2bDqSfi6lXWckKIxlb+4HTndjmZ4yl
Wbz0sOpsn2SstgwWRvpgqYlp16aegM0hV24Gxzgg50oqjs87cDcAjC4UcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3xYpRf3QaF/4I0YFenGv0ZRZKfMB8GA1UdIwQY
MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt
Zjc0MmYzOTVhYWY5LzEvYmZGaWxGX2RCb1hfZ2pSZ1Y2Y2FfUmxGa3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5
LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+xDMA0G
CSqGSIb3DQEBCwUAA4IBAQA2+vuERqK9SZut+jHxABNL5t1DRuJkDEE9ofj9UgHC
iCpfx3MB2arvJYRgM7yc72TTjLssQjQ8Lqqppv6Wg85y9L+a7epILjhEJxPZMt1k
0qEavfa25sJxYUqDuKQxZyAsA6UoWfXzkbuHdPoKysFuVJKoYcPwwlJHiQ26WMb1
l4QuMWxOsnsPVrfxs2DdutOUFwO8O2v0DhKSuMxMkQWZAuMGmYcuFs4cHi/OksDb
ohK9wCrn9Y90G7pkL72JBJj+E5Yw0/vySJXQVAvQOlzdiigF1vfGF2rLrdJ8FG4Y
LUKuyYOrghrc2ESXuJlZEbiN6AZEhY8h2xgvQdPlJD0o
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org