Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/87NQMlQUTicL8oZ6GLWiNeBOQPU.roa
File: 87NQMlQUTicL8oZ6GLWiNeBOQPU.roa (raw, json)
Hash identifier: FGF8qxnvWhZCXVYRiBZuKOCAtKyX7rPwOjLKnMq1REM=
Subject key identifier: F3:B3:50:32:54:14:4E:27:0B:F2:86:7A:18:B5:A2:35:E0:4E:40:F5
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0187758E8A51B861D1C4F2E25319B779B40A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/87NQMlQUTicL8oZ6GLWiNeBOQPU.roa
Signing time: Wed 12 Apr 2023 13:01:28 +0000
ROA not before: Wed 12 Apr 2023 13:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.81.174.0/23 maxlen: 24
185.96.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:8e:8a:51:b8:61:d1:c4:f2:e2:53:19:b7:79:b4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Apr 12 13:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3b3503254144e270bf2867a18b5a235e04e40f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:d9:5e:32:8b:36:d1:18:31:0e:2e:2c:14:
ac:ad:19:d0:a9:3b:76:cd:9d:a1:44:d9:64:8a:8e:
a4:14:2c:34:ff:d4:69:c2:15:22:4e:5c:4e:25:a9:
5f:9d:8b:11:b7:66:94:88:ad:14:38:84:d5:3f:bb:
34:16:3f:57:1c:c7:73:62:44:fb:e8:e8:22:d1:64:
d8:10:12:3e:ec:b7:50:3e:fb:ce:d2:d8:b3:ae:b9:
c1:b7:ab:4f:5d:fd:82:6c:05:80:54:5a:20:42:ee:
f4:09:aa:3a:d9:3c:c7:dc:d6:13:0e:85:16:75:dc:
49:89:4c:b3:d8:b4:4f:9c:ae:0d:fb:8a:b5:b3:d3:
7e:f3:de:ce:11:17:7d:bb:15:66:9c:38:89:f7:a7:
f1:71:98:b9:04:46:8a:e2:bb:c4:31:89:2b:17:2d:
52:fc:99:b9:61:a5:2a:c6:1f:60:5a:4e:48:cb:d1:
09:a0:03:17:31:2c:97:df:a6:f3:bf:53:f2:3e:51:
f0:7d:3b:e6:80:73:9c:aa:bb:ef:bb:ca:76:e7:5d:
9b:b3:c2:13:e2:1d:e8:e1:98:51:bd:49:2c:d1:74:
01:5d:3c:18:91:db:75:0c:50:96:c2:ff:64:36:47:
39:a5:61:c1:e4:8b:ba:e6:a0:1f:87:cd:d8:7c:c2:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:50:32:54:14:4E:27:0B:F2:86:7A:18:B5:A2:35:E0:4E:40:F5
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/87NQMlQUTicL8oZ6GLWiNeBOQPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.174.0/23
185.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8d:ae:56:2a:4d:6f:b2:2b:b0:3d:0d:14:86:9b:48:c5:6e:
67:8e:ec:e3:68:65:f1:fe:e5:4d:01:1d:38:7f:2f:9b:e5:ff:
a9:82:b7:15:f3:9f:fd:74:5c:dc:4e:8d:80:42:8f:73:75:bd:
fd:c1:27:7f:59:2b:bb:69:ef:bd:5d:7b:cb:14:b9:a8:84:4b:
41:53:9a:dd:db:93:c2:fd:3d:13:ae:79:a3:c3:7b:a3:8a:49:
e6:2a:2d:c7:3b:18:e8:48:d5:b5:f5:79:58:41:fd:10:ad:ad:
fb:eb:e7:ff:a5:4d:57:53:4d:01:b6:93:7a:d6:5b:12:63:b2:
71:4f:0a:96:44:fe:ae:50:c6:60:42:3d:39:07:18:2a:30:3b:
cc:9e:b4:53:1b:f8:f6:06:58:f3:09:88:61:44:e0:4b:19:11:
70:3b:77:97:b2:45:da:d3:c7:18:10:d1:32:c2:3d:b8:84:b0:
f0:dc:6c:f9:94:44:af:57:c4:54:4f:15:f6:72:83:55:85:64:
5c:34:81:a4:03:7b:e9:5b:13:75:c0:92:18:72:19:c7:1a:68:
28:9f:81:db:af:aa:3a:3b:42:a2:d2:93:40:09:f1:c7:15:7a:
63:93:23:a4:e5:9a:30:9b:ea:ef:da:26:5d:0a:e9:6a:24:46:
6e:78:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org