Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/lxi0w2pIi2H3XH4NHoXKSQlaqSs.roa
File: lxi0w2pIi2H3XH4NHoXKSQlaqSs.roa (raw, json)
Hash identifier: oVixBaDL+M5mF1YR+7bnwLzCguGAGRrC8qpxvVxPYWM=
Subject key identifier: 97:18:B4:C3:6A:48:8B:61:F7:5C:7E:0D:1E:85:CA:49:09:5A:A9:2B
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 01856D01B3D6D353923324AFD607B8BA53B6
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/lxi0w2pIi2H3XH4NHoXKSQlaqSs.roa
Signing time: Sun 01 Jan 2023 11:05:06 +0000
ROA not before: Sun 01 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b3:d6:d3:53:92:33:24:af:d6:07:b8:ba:53:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9718b4c36a488b61f75c7e0d1e85ca49095aa92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:48:32:46:f9:1c:7b:66:60:6d:28:8a:db:f9:
40:44:c1:39:ac:c2:25:16:ff:75:aa:75:22:c4:74:
3b:78:2d:91:45:63:49:ea:a0:6a:a9:70:04:20:23:
24:79:b1:6e:91:96:6a:8e:7e:64:65:4d:17:31:c7:
42:a0:19:10:c6:ba:a6:cf:7d:07:f2:66:ab:27:bb:
a5:e8:b9:67:04:7a:2a:d8:92:0d:c9:2d:d9:e7:88:
b2:9d:7e:cd:d0:09:63:30:4a:4b:6c:5c:fe:8e:9c:
21:88:ff:9f:80:f0:01:51:a7:55:cb:73:64:3f:a5:
4b:db:db:b8:f0:6e:84:f0:20:08:ce:68:60:b2:ee:
57:d6:06:92:f0:be:00:14:68:2b:ce:8f:59:5d:96:
4d:44:b1:83:f7:b8:b9:1c:62:c5:54:f9:45:85:f1:
b2:81:33:49:58:6f:14:86:d2:45:d5:8a:8d:a9:dc:
42:d1:f2:c7:c4:7e:8c:3b:5a:d1:00:a1:7c:29:a8:
6e:03:55:ac:8e:5b:be:cc:d9:ca:43:53:fa:dc:de:
04:32:61:c3:19:9c:6a:bb:19:89:ae:ec:98:4e:7f:
d3:18:f8:df:54:a4:b0:2c:00:c3:49:de:9b:ae:a8:
2f:bd:2a:25:f2:94:f9:37:11:bc:cc:96:96:3f:66:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:18:B4:C3:6A:48:8B:61:F7:5C:7E:0D:1E:85:CA:49:09:5A:A9:2B
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/lxi0w2pIi2H3XH4NHoXKSQlaqSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.84.0/24
87.237.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:64:3a:2a:b2:63:79:fa:37:f8:7d:52:29:f6:4b:2c:66:7b:
d1:05:27:39:9c:12:00:02:14:08:77:50:a2:f9:7a:e7:b8:78:
d3:59:59:9f:67:0f:ca:72:81:1f:d9:5e:60:57:00:52:5f:17:
e6:23:c3:5f:d5:e8:2e:0b:2b:de:4e:d5:f9:22:8f:19:c9:f3:
a9:14:3f:4b:b3:c9:56:3b:47:ba:d8:79:1f:39:78:c2:38:d3:
47:b8:37:c0:56:a6:17:bb:02:c3:4c:08:98:7f:7b:a5:b2:a1:
47:bd:03:1e:12:c0:8e:ac:3e:58:f2:84:9f:59:ac:1b:ec:a6:
c7:94:1b:f2:d2:4d:ad:5b:fa:01:75:d5:1b:f3:dd:d0:5e:8b:
6f:70:ab:e0:9c:89:f5:5d:df:21:17:52:0f:5f:fb:62:ff:37:
10:29:c0:fe:2a:ba:25:38:a6:3c:d1:8c:ac:fe:99:db:ee:e3:
90:d2:d5:ed:d8:9b:87:37:b4:33:7b:d1:bb:af:c0:f6:a7:15:
94:b4:02:f9:3d:96:9e:71:c7:af:79:5b:fb:e2:59:c8:47:2b:
37:be:d4:00:b7:45:a3:5c:38:a6:79:d0:e6:46:9c:d4:eb:cd:
8b:6f:2c:91:a8:ea:d9:53:cd:52:a5:0e:3b:cb:48:b3:bd:ee:
6b:cc:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:40 2024 by rpki-client on console-ams.rpki-client.org