Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/OtlcITpcaduP-zkZSW3geO7t31s.roa
File: OtlcITpcaduP-zkZSW3geO7t31s.roa (raw, json)
Hash identifier: Bc7TVuOO81Nrj4FkRINb/O686j2MwbI6Wexk6iE3Zok=
Subject key identifier: 3A:D9:5C:21:3A:5C:69:DB:8F:FB:39:19:49:6D:E0:78:EE:ED:DF:5B
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 018CFE6684FA6EB9BC8E4D89A26642397DDA
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/OtlcITpcaduP-zkZSW3geO7t31s.roa
Signing time: Fri 12 Jan 2024 15:59:40 +0000
ROA not before: Fri 12 Jan 2024 15:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57173
IP address blocks: 87.247.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 19:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:66:84:fa:6e:b9:bc:8e:4d:89:a2:66:42:39:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 12 15:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ad95c213a5c69db8ffb3919496de078eeeddf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:eb:35:68:f8:34:d4:d5:4a:bb:5c:7d:0e:
98:53:64:c4:31:7e:d5:23:7e:3d:51:6d:a8:32:71:
80:45:d3:f8:e1:9c:69:45:83:ae:6b:0a:33:58:02:
d9:ea:00:f6:1f:e9:6f:b9:5b:c0:38:d6:34:58:10:
e1:66:77:1e:15:07:c9:c3:28:d4:f6:27:d8:51:31:
27:f8:f3:25:48:d3:4d:46:94:f2:15:fa:91:0a:f7:
02:e7:97:4e:b3:90:68:29:3d:13:05:a4:ed:a8:79:
48:cc:44:8c:fd:6e:f9:f8:1d:ad:0d:30:71:13:b7:
99:68:ad:a7:e9:50:55:e7:18:9d:dc:e8:3d:67:0c:
7a:0e:30:dd:15:d2:16:78:d6:96:31:ef:75:7d:c3:
c8:cd:8a:d6:ea:90:1a:3a:dd:97:3c:de:6c:5a:17:
7d:2a:d1:b9:fe:c8:6f:b2:39:cf:81:1b:83:70:6b:
1f:6a:54:2b:08:42:d6:3c:8a:ba:2f:da:e6:98:66:
19:95:d2:3a:51:cf:49:a7:90:af:2b:17:b8:ee:63:
66:9c:b7:be:90:98:20:49:99:41:16:a6:82:d9:60:
7d:a5:59:76:09:50:16:f5:0b:77:9e:d1:1e:c4:93:
f4:d1:d7:5a:3b:c9:b3:5d:fe:1d:5b:72:70:31:65:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:5C:21:3A:5C:69:DB:8F:FB:39:19:49:6D:E0:78:EE:ED:DF:5B
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/OtlcITpcaduP-zkZSW3geO7t31s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.226.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fe:56:12:01:e2:cd:d3:04:61:6b:c6:95:7d:e1:a3:3a:fe:
de:cf:ca:76:11:26:d6:e4:1d:51:f2:8a:40:d0:17:56:97:e3:
73:a6:a1:1a:66:89:e4:8b:47:e1:37:71:04:19:14:9e:2d:fd:
7f:78:e7:f1:53:d8:f2:39:3f:56:50:aa:05:01:f0:8f:a0:11:
ba:87:b9:a1:31:25:81:87:30:fb:ff:c9:f8:80:ad:3a:fd:8d:
fb:d9:b5:c5:6e:c5:13:dc:6b:bf:a1:d5:bd:64:f0:a5:03:7a:
01:6a:9b:70:8f:e5:39:c2:8b:e7:53:e7:c9:12:73:d0:29:bd:
6f:91:16:8c:63:b0:ff:3d:da:cf:ab:67:e2:aa:20:02:db:77:
53:e2:ad:6b:d5:51:48:95:15:4b:65:f6:a3:95:02:87:c6:96:
df:cc:9d:f7:7e:ff:52:79:66:9e:5b:97:4d:ab:15:5f:9c:07:
7a:70:1d:08:37:f3:77:c6:b3:3f:e5:db:d7:98:fa:dc:46:a6:
17:36:54:b8:e1:72:7b:10:a9:3e:bc:d8:7c:fb:bd:ea:a4:4c:
c9:e9:be:e4:fb:3d:5d:90:f5:40:87:91:32:f1:f0:c8:b3:b9:
28:64:e9:0a:b1:ec:0d:e2:be:c7:00:88:f4:1b:2f:b1:20:c3:
2e:cf:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:04 2025 by rpki-client