Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/B7T2ybuVn7SNhxqc6PmeKd4Jbro.roa
File: B7T2ybuVn7SNhxqc6PmeKd4Jbro.roa (raw, json)
Hash identifier: ppEtYANcJoSvR8gLBG4lF7U0Qe+BlP45RMSzHjhdp7M=
Subject key identifier: 07:B4:F6:C9:BB:95:9F:B4:8D:87:1A:9C:E8:F9:9E:29:DE:09:6E:BA
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0185719553C0468082A2532776CD50FB75CB
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/B7T2ybuVn7SNhxqc6PmeKd4Jbro.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197214
IP address blocks: 87.243.67.0/24 maxlen: 24
87.243.66.0/24 maxlen: 24
87.243.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:53:c0:46:80:82:a2:53:27:76:cd:50:fb:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b4f6c9bb959fb48d871a9ce8f99e29de096eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:a7:0f:6b:c6:b5:31:9a:c3:dd:81:05:ce:
de:f5:27:75:12:96:5d:9b:60:ac:53:fc:68:97:3b:
6d:e4:7d:d8:40:fb:e5:81:ff:99:89:71:60:67:93:
42:9a:b1:33:87:b9:7f:be:0d:88:d2:42:f7:08:35:
13:a2:79:ed:f7:93:5b:b3:01:3f:76:a9:3b:66:cb:
73:1a:fa:24:ea:17:7e:83:d4:39:0c:17:e5:d4:90:
27:4f:ff:d5:87:3f:55:50:23:27:1d:b3:00:f5:0d:
a1:7a:17:76:1c:ce:7a:88:1f:64:79:99:2c:10:3a:
46:8c:6f:79:84:b0:d7:40:cc:e4:81:79:56:3b:b5:
23:ee:72:32:58:5b:8f:3f:86:7f:0e:bb:d5:22:b7:
e8:55:75:a5:b1:56:2f:32:bd:ff:3a:6f:e7:04:b5:
05:6e:00:cd:7e:10:8b:02:13:dc:99:61:89:99:ac:
7f:9c:45:97:29:44:43:b7:34:49:0d:0b:71:bb:a8:
33:66:76:80:dd:c4:04:10:d7:3d:d3:f7:14:fc:04:
a4:55:ff:4e:da:83:ab:a1:54:2a:8c:aa:e8:0a:ca:
c5:23:12:5d:7f:ba:66:b7:ba:cf:e5:91:6b:e9:b3:
00:bc:17:3b:6b:fb:b8:75:20:89:54:2e:21:b9:d3:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:F6:C9:BB:95:9F:B4:8D:87:1A:9C:E8:F9:9E:29:DE:09:6E:BA
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/B7T2ybuVn7SNhxqc6PmeKd4Jbro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.243.65.0-87.243.67.255
Signature Algorithm: sha256WithRSAEncryption
cc:19:81:9e:d2:fe:d3:64:f8:7b:bf:6b:d1:e9:0d:a4:38:39:
c7:29:c4:d8:24:51:ca:ed:b0:c9:71:05:e9:1e:2e:84:95:c8:
20:c9:42:c1:92:56:36:51:c0:19:a9:5c:5b:ad:4b:40:da:ee:
45:1b:6f:7f:ec:69:3c:29:4b:43:0e:d3:16:84:bc:46:8d:23:
39:ab:00:45:26:32:9f:ec:e3:a4:02:07:dd:cf:5b:59:10:0f:
55:be:0f:d3:10:48:89:4a:54:32:fd:72:7a:e8:a6:2c:f8:a6:
03:cd:0f:50:23:89:9f:e7:33:c1:a0:8e:3b:19:f4:56:df:ba:
89:ba:fe:f6:69:09:55:9e:b4:d2:18:08:78:d0:7c:7a:ac:8a:
51:ca:ae:f8:25:23:2a:32:81:17:ca:37:bb:51:05:1b:39:80:
93:c5:a6:2f:ba:be:ef:53:19:44:fc:b6:8a:6a:3b:69:c2:97:
01:f5:1a:88:3f:4c:22:59:d5:0a:a2:ae:43:34:5e:a2:15:e4:
74:57:a1:e7:e9:9a:a9:25:0b:4c:3c:dd:db:34:28:67:1e:08:
16:0d:9d:45:5c:cf:4a:e0:ab:cd:b9:fe:5e:fa:5a:fc:94:41:
3a:24:8c:2e:8f:1d:9f:3f:1a:89:ae:c8:64:17:23:f9:17:f1:
fe:6f:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:15 2024 by rpki-client on console-ams.rpki-client.org