Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/PGcqiJnn1iY9EhRucLy8_P9Lf1Y.roa
File: PGcqiJnn1iY9EhRucLy8_P9Lf1Y.roa (raw, json)
Hash identifier: DLVkhcqrl1vC3Og2osai4yHLFQOIqCnIZxlXreBc+2g=
Subject key identifier: 3C:67:2A:88:99:E7:D6:26:3D:12:14:6E:70:BC:BC:FC:FF:4B:7F:56
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 0187566218DED84D9E5BACCA9C27C3F3B2E6
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/PGcqiJnn1iY9EhRucLy8_P9Lf1Y.roa
Signing time: Thu 06 Apr 2023 11:44:42 +0000
ROA not before: Thu 06 Apr 2023 11:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203698
IP address blocks: 87.236.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:62:18:de:d8:4d:9e:5b:ac:ca:9c:27:c3:f3:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Apr 6 11:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c672a8899e7d6263d12146e70bcbcfcff4b7f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:1d:20:e6:06:47:8e:43:b7:16:53:b3:85:
e7:92:3c:72:24:ba:eb:7b:73:80:a6:e8:3d:92:7c:
df:55:b7:91:44:f3:4a:eb:f7:4f:5c:e4:89:36:1e:
7d:5d:e3:bc:0c:1c:a5:1f:b0:ea:14:8f:e3:62:4f:
02:96:67:ae:8b:2a:c4:d7:b9:98:a9:dd:5e:47:22:
e4:82:d6:2b:05:2e:4c:ec:36:d1:da:ec:62:2d:f5:
4b:89:08:22:ac:8f:14:72:43:d4:01:3c:dd:6b:0b:
f1:7b:f1:eb:3f:68:72:e2:28:45:b2:f8:7f:6a:40:
dd:2c:4e:d2:b1:de:5a:1e:4a:51:c7:40:8b:14:78:
0b:07:e9:4f:08:45:11:60:49:37:3f:85:50:d2:44:
82:f6:6f:a6:12:68:a6:01:9e:fc:a8:1e:6c:35:43:
a1:d3:f7:e8:c9:83:e5:c2:12:aa:c2:55:80:26:cb:
18:c7:7a:fe:46:ea:99:3c:d9:cf:07:5b:03:12:8d:
78:46:0d:20:80:e6:a7:e4:c4:f7:0c:9f:92:33:13:
bd:06:bb:19:0f:23:1e:a8:d4:30:88:f7:16:46:7d:
f1:13:06:b7:4d:92:18:64:ec:41:14:6b:9e:af:9a:
d0:c7:92:d8:4c:0a:3b:6d:c8:33:12:b1:dc:26:eb:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:2A:88:99:E7:D6:26:3D:12:14:6E:70:BC:BC:FC:FF:4B:7F:56
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/PGcqiJnn1iY9EhRucLy8_P9Lf1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:83:03:98:87:a9:48:a3:b8:d6:42:b7:7b:2b:00:ed:76:b7:
16:9a:e2:fe:f8:ee:e3:4b:13:d1:e4:12:60:60:9a:ac:04:37:
82:b6:80:11:fe:f3:3c:14:7a:4a:17:35:35:64:c0:3a:62:33:
1d:73:87:f2:99:f8:fb:2d:72:e1:ca:98:1d:23:34:b2:9c:d0:
61:27:77:54:4d:ac:33:f0:42:c5:95:a4:9a:dc:76:39:d1:92:
45:88:06:7b:ec:db:70:1a:0b:5d:e8:87:ee:a2:29:20:f4:dc:
53:73:e8:7f:8e:f1:1e:de:1c:40:ff:36:8a:1f:7f:34:77:a2:
81:7c:0c:3d:e5:08:88:18:d7:8e:ba:c9:ae:3d:b9:98:a3:46:
37:25:cf:77:f1:9e:63:1c:92:8f:b7:89:3a:eb:55:6b:7b:2a:
54:49:d1:ca:6f:5b:f2:c2:f7:c7:c6:b2:8b:70:70:6c:07:ff:
21:e4:8e:46:83:ca:e1:6a:b4:94:1e:d6:5f:b4:64:1a:2b:c3:
60:cc:94:fa:43:c7:3f:a9:76:a9:c1:dc:77:ef:8e:96:ae:89:
2b:96:02:cf:88:98:ed:c6:ea:d0:7a:b7:ce:8f:d5:3d:f4:0e:
a9:59:cb:7f:74:49:2b:17:0c:2a:40:e2:4f:4f:de:72:45:a4:
a5:89:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:30 2024 by rpki-client on console-ams.rpki-client.org