Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/m54ERl4RAStgtICVzElyi9QGJGM.roa
File: m54ERl4RAStgtICVzElyi9QGJGM.roa (raw, json)
Hash identifier: 9WlupxaSsToQetajczvT6chbl3NCtDTZqfFy7dnq6Os=
Subject key identifier: 9B:9E:04:46:5E:11:01:2B:60:B4:80:95:CC:49:72:8B:D4:06:24:63
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 018573685626BFF856584544F6C5D5CB8B30
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/m54ERl4RAStgtICVzElyi9QGJGM.roa
Signing time: Mon 02 Jan 2023 16:54:55 +0000
ROA not before: Mon 02 Jan 2023 16:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 87.253.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:56:26:bf:f8:56:58:45:44:f6:c5:d5:cb:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 2 16:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b9e04465e11012b60b48095cc49728bd4062463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:a4:87:69:54:bf:09:f3:be:ab:36:3a:81:
75:e0:97:bc:c0:a2:dd:74:02:16:a4:51:04:14:9e:
3e:c6:9d:88:41:44:57:7c:20:36:29:ae:17:fd:dc:
bd:26:cd:e5:c8:ec:5c:a2:28:a0:1d:55:ff:52:55:
6d:b5:b5:ed:9e:e9:b4:bf:38:af:1a:95:b8:57:70:
79:ee:d1:1a:d0:27:8b:11:c8:98:a3:32:1d:d5:15:
57:62:40:6b:1e:66:58:a5:2a:f4:74:71:b6:8f:d0:
b9:ab:d6:05:a1:45:e5:b1:a1:ad:28:6f:4b:a7:b1:
c0:75:57:3e:ea:cd:d8:73:e9:d4:7e:25:68:e2:74:
3b:11:2c:50:81:53:8f:47:84:41:57:8d:fe:89:49:
11:26:42:07:95:2d:f1:43:6a:9d:11:57:79:13:ed:
70:52:a5:6a:8f:4b:70:6e:db:46:86:35:48:93:69:
0b:48:45:27:30:70:2a:17:e2:8f:44:fc:7c:00:46:
31:5c:06:60:22:f9:fe:44:cb:45:4a:2a:15:f1:ee:
47:02:e5:71:1f:2d:5e:be:96:0b:dc:07:4c:9f:c7:
d5:62:5a:9a:ec:d6:2b:3b:e7:4b:9c:3b:91:97:7a:
c3:8c:a7:c0:61:98:19:ab:64:a7:7a:58:c0:ac:3f:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9E:04:46:5E:11:01:2B:60:B4:80:95:CC:49:72:8B:D4:06:24:63
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/m54ERl4RAStgtICVzElyi9QGJGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.253.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a3:7b:44:50:05:11:5a:fe:e3:1a:27:54:5c:9f:4b:61:f2:
da:63:79:c8:64:9b:ba:bf:11:c7:26:dc:14:f6:f7:b4:2a:b3:
6a:55:1b:eb:8a:35:65:dc:82:83:d2:2f:87:29:1a:dd:e7:b7:
3f:c5:81:7d:d1:19:3a:96:29:26:c8:e6:1d:b5:4f:3b:f9:95:
8a:f8:13:58:68:1f:94:c1:bb:56:53:7b:77:4b:ef:d4:c9:ae:
3a:04:df:63:7d:44:98:11:81:2c:fa:fd:57:61:af:d5:01:fd:
2b:e9:44:33:70:ab:3d:97:52:29:93:8c:eb:dd:26:50:31:bd:
48:6e:3b:16:a6:3f:39:c6:b8:57:ce:79:59:e8:57:20:7b:ee:
c9:67:30:9f:d1:ba:9d:54:6e:22:ac:80:6c:a6:9d:11:e7:b4:
b2:e3:76:31:3f:30:04:b4:38:d2:58:fe:e6:1a:e0:35:90:dc:
3d:ab:38:42:4b:37:12:68:bf:4d:b4:77:68:a0:71:5f:7c:3f:
e9:c2:cf:33:e1:cd:ce:e5:c1:04:3e:1d:a1:14:40:2e:cb:c0:
4b:b9:9a:86:ff:84:ac:9e:b2:6a:0e:3f:b6:85:df:f7:fe:99:
79:70:47:48:f1:4c:94:ab:6a:39:c3:bd:e4:34:ef:32:a8:d5:
8e:5c:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:41 2024 by rpki-client on console-fra.rpki-client.org