Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/l5smFyTb_LQU8FqWQveuwiD6eD0.roa
File: l5smFyTb_LQU8FqWQveuwiD6eD0.roa (raw, json)
Hash identifier: xz/ZGOMfUqh/4KMcVpa9n6yfM4yVdFoiIHRnYhN5yyU=
Subject key identifier: 97:9B:26:17:24:DB:FC:B4:14:F0:5A:96:42:F7:AE:C2:20:FA:78:3D
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 01856B8A1EF0334B5954DB4A27B33354C2EF
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/l5smFyTb_LQU8FqWQveuwiD6eD0.roa
Signing time: Sun 01 Jan 2023 04:14:51 +0000
ROA not before: Sun 01 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31317
IP address blocks: 77.87.191.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:1e:f0:33:4b:59:54:db:4a:27:b3:33:54:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jan 1 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=979b261724dbfcb414f05a9642f7aec220fa783d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:01:18:55:64:04:74:16:86:2e:2e:f6:ea:
2a:10:2b:b0:16:74:0a:69:1d:57:ae:22:eb:8f:6d:
cc:ae:c1:87:84:f2:df:1b:a4:66:c0:07:d7:a8:08:
15:2a:20:94:24:9a:c4:b6:78:1c:ff:59:35:d8:26:
62:9d:33:03:c3:1c:db:17:bf:83:ba:45:29:60:95:
f0:0b:ab:71:b1:8d:05:93:27:ae:e7:ce:2b:5a:9f:
2a:43:a2:64:f9:25:ac:9f:01:a8:80:26:b3:48:49:
fb:7e:84:c6:64:1a:08:ec:db:a4:39:2b:e1:db:29:
86:81:24:e1:0b:dd:b1:66:e8:4f:8a:5f:1a:cd:a6:
42:f8:c8:46:98:2d:d8:ac:53:12:9f:7a:94:51:55:
91:6f:1a:ec:5c:e0:18:a9:3f:58:a5:ef:f2:6b:24:
cf:6f:c0:e1:89:88:82:3e:df:b8:36:ab:f6:aa:e8:
14:0e:2a:de:f6:9d:67:b3:2e:bd:f8:00:95:c2:b7:
b9:21:67:2b:d8:42:8b:71:aa:85:b1:f8:7f:a5:1e:
99:bc:d4:eb:45:45:2c:10:38:bd:ea:55:5c:c5:73:
49:d0:2f:07:bd:43:cd:d7:8b:70:a7:53:c4:06:ab:
46:aa:7b:e1:6e:d8:f9:7b:65:bf:19:82:ea:6f:fa:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9B:26:17:24:DB:FC:B4:14:F0:5A:96:42:F7:AE:C2:20:FA:78:3D
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/l5smFyTb_LQU8FqWQveuwiD6eD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.191.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ba:a0:8b:dc:71:48:6f:6b:d8:2f:a4:ce:d7:37:ba:dd:df:
16:94:5d:88:c3:13:fe:4f:10:12:6a:cb:76:b9:d1:32:e4:88:
ed:1b:3b:3f:b0:97:97:06:1e:64:bb:5d:95:e8:13:2a:7a:b2:
c7:ae:64:31:36:b9:bb:8d:58:ec:90:b0:37:ef:bd:88:6b:89:
ae:38:b9:e5:74:ed:35:f7:80:ab:83:f4:7f:91:ad:8b:5a:a8:
c9:d3:dc:fe:1d:57:97:32:79:61:b8:c8:68:6b:48:82:92:62:
f4:ae:91:d6:ad:95:b6:0e:c5:69:ff:92:e4:c0:e0:42:31:97:
e0:df:bc:95:ec:3d:9f:2b:04:cf:2f:ac:5a:44:33:72:ad:29:
52:4c:3d:0d:f3:66:54:a4:96:fa:d4:a7:e2:a7:73:fa:08:d9:
11:49:49:39:cc:2d:18:94:42:80:7b:79:3b:fc:12:77:7d:9b:
c5:8f:24:d3:14:a4:64:e7:47:5c:dc:3e:83:f7:57:d9:40:42:
d4:c0:eb:c0:bf:05:68:b6:19:8a:3b:51:f6:c2:a9:17:7b:a7:
09:d5:6e:c5:dc:08:04:2f:d1:36:aa:4b:5b:71:0f:c6:f2:d6:
62:29:ba:ec:1b:e0:24:3b:f0:0f:27:db:97:2b:6e:c0:50:00:
27:36:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:04 2024 by rpki-client on console-ams.rpki-client.org