Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/G_SOhQH9vNbccKxwhTuOhM1mFuk.roa
File: G_SOhQH9vNbccKxwhTuOhM1mFuk.roa (raw, json)
Hash identifier: B1lpVOtdUIPclFLJFOfrr5FKNHg7nKSn7efBHkwTH+4=
Subject key identifier: 1B:F4:8E:85:01:FD:BC:D6:DC:70:AC:70:85:3B:8E:84:CD:66:16:E9
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 018CC64AF668CD68DBF9188AD608442013CC
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/G_SOhQH9vNbccKxwhTuOhM1mFuk.roa
Signing time: Mon 01 Jan 2024 18:30:50 +0000
ROA not before: Mon 01 Jan 2024 18:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203698
IP address blocks: 87.236.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 12:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f6:68:cd:68:db:f9:18:8a:d6:08:44:20:13:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf48e8501fdbcd6dc70ac70853b8e84cd6616e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:0d:73:02:f1:27:c4:d5:82:46:fe:52:3d:
89:99:0b:f8:53:84:05:5c:01:7b:30:53:0a:bd:2c:
a3:ed:b9:6f:f6:b4:28:c3:84:51:ad:ac:58:91:f2:
24:12:63:21:9d:22:60:38:ae:67:e0:b2:13:02:f8:
a6:a1:5b:b2:54:77:4d:66:9d:72:32:f5:30:69:5c:
28:5e:e7:c5:a1:42:6d:87:91:9d:5a:0a:19:9b:2d:
6e:26:c8:ba:d2:05:12:04:04:45:38:77:3a:f0:8a:
c5:e4:9f:36:91:fa:bb:d5:32:e5:31:9f:18:35:76:
b0:d1:bf:c9:1d:d2:b6:50:fb:67:11:1f:f3:eb:2d:
3e:38:10:a9:16:be:dc:c4:29:e1:8b:bd:f2:ca:cb:
82:a0:24:ee:b9:9b:b9:f6:ff:d5:9e:fd:40:1b:cc:
cb:de:e1:23:70:c8:a1:4e:93:bc:72:1f:3b:0d:81:
ae:e7:59:59:df:ae:6f:6b:60:54:c1:d2:cf:73:12:
5e:04:0d:81:25:6a:7e:28:48:3c:0f:68:b3:f6:bd:
2b:b8:72:20:e6:4a:96:1f:7f:ad:68:6c:0c:5a:7a:
ac:29:bf:e5:1b:1a:7a:81:28:02:d6:cc:78:19:73:
95:35:91:56:75:17:f8:39:97:53:0d:50:dc:a5:7e:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:8E:85:01:FD:BC:D6:DC:70:AC:70:85:3B:8E:84:CD:66:16:E9
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/G_SOhQH9vNbccKxwhTuOhM1mFuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.35.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:60:80:27:ab:b4:71:5e:3a:05:c0:ba:fa:e9:35:b7:be:bd:
40:f6:c0:78:f6:38:b6:42:db:03:d1:c3:20:6b:8b:92:a4:de:
bb:55:a3:5e:6a:21:f4:ac:7f:65:4d:2b:ba:dd:2b:a5:98:bc:
ef:7b:1f:52:6d:3a:36:65:b3:46:f1:4e:cf:6b:2a:39:13:90:
92:55:b8:c8:a7:64:e3:36:19:c4:79:a8:9f:15:64:cb:ea:a9:
6d:fd:1e:a7:a8:f0:1d:ec:f8:0a:dd:bf:fc:b3:39:2a:31:49:
24:9a:df:6f:bb:25:63:1f:f7:4b:f5:92:71:18:bb:99:79:10:
b3:a1:87:22:ed:d7:f8:9f:47:c2:da:ec:82:18:8c:76:6b:b0:
45:39:70:82:fb:81:75:5c:09:19:45:3c:b2:ec:27:42:be:f2:
d3:8b:4d:66:44:1e:f0:89:20:5e:cb:e1:e3:1b:e4:06:65:59:
01:b3:d7:f7:2d:93:df:cb:2d:a4:0d:dd:97:77:c5:6c:60:14:
9f:b2:89:1b:e8:65:59:f1:c1:e2:78:c1:4a:18:a9:8e:f4:30:
50:15:6c:74:20:98:48:9e:1e:22:7a:fe:0f:99:40:bb:ad:d6:
d8:ae:5f:43:24:03:cc:f0:a7:19:9a:c0:26:bd:cf:a5:64:38:
af:ea:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:07 2025 by rpki-client