Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/87u6d40L_6QFVQtnBLhxUWOLiOo.roa
File: 87u6d40L_6QFVQtnBLhxUWOLiOo.roa (raw, json)
Hash identifier: 4PWyNAYzlkBX5sIN7lluZcMLAJhiOh6fNxTBMsq+K8U=
Subject key identifier: F3:BB:BA:77:8D:0B:FF:A4:05:55:0B:67:04:B8:71:51:63:8B:88:EA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D2BFC4E68C5DED591C9BE155CB526065F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/87u6d40L_6QFVQtnBLhxUWOLiOo.roa
Signing time: Sun 21 Jan 2024 12:26:11 +0000
ROA not before: Sun 21 Jan 2024 12:26:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203394
IP address blocks: 46.102.237.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 12:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2b:fc:4e:68:c5:de:d5:91:c9:be:15:5c:b5:26:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 21 12:26:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3bbba778d0bffa405550b6704b87151638b88ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:b9:b7:da:89:50:e3:1a:8c:b5:24:6d:63:
ba:ba:cd:91:22:1d:26:0d:db:f2:b6:29:1f:8d:0b:
ae:c6:64:85:d7:aa:5b:37:1c:bc:d7:d1:61:78:d5:
86:c0:4a:86:3d:b9:c8:4b:f1:4a:a0:02:84:e2:a0:
4d:00:0c:82:72:c1:60:2d:5d:09:c3:d0:4d:cb:e1:
5a:39:28:6e:ab:46:f2:4a:56:6d:de:cc:d6:a2:1b:
eb:e4:57:39:ec:36:fb:a4:2e:63:27:fd:73:26:83:
3c:75:88:74:9b:ad:d9:2b:fb:29:d5:03:a8:b0:07:
f6:61:e1:b7:81:05:bc:a9:d6:1a:39:7e:78:6d:e8:
0f:c7:54:6e:38:19:32:86:2e:96:98:d2:0e:10:c1:
f5:cf:db:f3:ad:91:00:79:00:e5:1f:e1:eb:7f:c9:
79:fb:1b:48:86:83:03:bb:a1:d8:72:7e:22:cb:cc:
54:b3:a1:df:2f:09:7c:3a:13:4d:1e:db:ea:31:83:
f4:2a:40:3e:21:0f:5e:21:bc:a3:ae:f8:2c:cd:8c:
4a:60:0b:84:17:05:49:b6:75:75:78:c4:6b:23:ee:
cf:a7:7b:bf:37:0e:54:54:7f:a4:2f:d3:c3:a9:40:
9e:66:77:26:72:b4:fb:8f:3b:9a:af:b7:ff:f7:77:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:BA:77:8D:0B:FF:A4:05:55:0B:67:04:B8:71:51:63:8B:88:EA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/87u6d40L_6QFVQtnBLhxUWOLiOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
77.81.88.0/24
Signature Algorithm: sha256WithRSAEncryption
29:31:e3:ef:c0:f0:b2:d8:0a:1c:1a:e4:c5:0b:5e:be:5b:c8:
ca:ea:a9:10:ec:5d:43:fb:83:1c:a8:0d:1c:cc:4a:86:c2:95:
04:ef:36:a0:78:05:87:af:7a:77:f6:5e:c8:78:5e:26:35:56:
36:62:e7:08:62:0b:fd:34:c1:e2:45:6a:04:ac:47:a7:03:4a:
d5:a4:35:89:83:7b:76:b7:08:ad:4a:b6:70:28:cd:55:c9:24:
dd:61:0b:cc:59:08:fc:dc:eb:49:d6:af:c3:a0:b1:21:b0:d1:
13:44:34:43:e1:8a:39:9a:cf:5a:60:23:65:21:3f:f1:eb:b5:
03:f0:f2:d3:37:e6:52:8f:b5:14:b6:f8:c9:98:08:08:f7:4a:
d0:a7:4d:42:31:44:44:04:e8:0a:ba:38:39:b3:c1:27:6f:c9:
db:d3:30:fe:1b:11:26:e9:04:70:36:c8:2b:dd:13:de:69:8a:
fa:1e:c4:ff:d8:38:04:63:a6:0a:b6:15:2a:60:a2:47:c3:4a:
8c:b4:b9:1f:30:7a:55:87:8c:c7:13:4a:2d:39:a6:b3:31:c4:
ae:84:6b:c5:a2:89:44:88:33:b3:00:0e:5f:2b:f8:35:47:22:
e7:39:01:f7:80:64:e6:da:74:8e:84:40:96:34:02:6f:5a:39:
49:cd:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org