Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/UBXKqU0-VFcfvFy2rEMnaGQ56fs.roa
File: UBXKqU0-VFcfvFy2rEMnaGQ56fs.roa (raw, json)
Hash identifier: /nnSqbqTPh49sRQNtC+ZKtxgbpS+56N46+EN0udtPxw=
Subject key identifier: 50:15:CA:A9:4D:3E:54:57:1F:BC:5C:B6:AC:43:27:68:64:39:E9:FB
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 018570706CDE0150D9F0F6ECC1D1001E9FB7
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/UBXKqU0-VFcfvFy2rEMnaGQ56fs.roa
Signing time: Mon 02 Jan 2023 03:04:53 +0000
ROA not before: Mon 02 Jan 2023 03:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 87.247.231.0/24 maxlen: 24
87.247.230.0/23 maxlen: 23
87.247.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6c:de:01:50:d9:f0:f6:ec:c1:d1:00:1e:9f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 2 03:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5015caa94d3e54571fbc5cb6ac4327686439e9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:0b:28:22:88:6c:50:fe:0d:c1:65:2d:b8:
e5:4a:29:33:d4:f3:16:df:6a:80:24:d6:c2:39:8c:
6a:47:39:a5:1b:b8:3b:78:52:30:4b:c1:2f:6e:b5:
c2:73:1b:9c:05:fc:e2:94:a4:5f:a0:df:ca:a7:5f:
6d:a7:c3:0b:d1:56:43:f6:b6:53:cf:9b:4b:67:39:
93:87:11:24:67:6b:45:90:ca:47:e7:cd:4b:a9:aa:
bd:95:59:82:a9:bd:5e:ee:30:2d:24:3c:e1:d3:15:
99:87:ac:1c:ee:29:30:03:fa:68:d0:40:91:e8:18:
da:51:15:b4:45:2c:4a:0a:26:25:98:8b:32:b4:90:
ed:fb:b1:ca:df:89:88:95:4f:fa:6c:33:86:e2:cf:
7a:70:34:28:71:48:ce:bd:a1:4c:43:57:13:f4:9c:
b4:38:c8:8c:18:1c:e0:ad:5c:ac:93:87:f8:ff:98:
28:99:5f:8f:6c:12:72:92:6b:d2:b9:a2:a2:ec:f7:
2e:ac:6c:63:0f:b4:93:2e:65:cf:c7:96:ca:79:8b:
3b:f2:05:52:54:f5:df:f1:f3:cb:98:2f:6a:26:a6:
ea:7a:a4:2e:9b:39:dc:75:09:5f:22:fa:ab:5c:ba:
5e:e5:2b:dd:ca:ed:52:7a:83:e0:46:52:3f:71:80:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:CA:A9:4D:3E:54:57:1F:BC:5C:B6:AC:43:27:68:64:39:E9:FB
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/UBXKqU0-VFcfvFy2rEMnaGQ56fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.230.0/23
Signature Algorithm: sha256WithRSAEncryption
17:6c:6a:91:1f:17:b4:ba:a3:d0:f3:09:d4:04:4f:cc:dc:da:
56:db:5a:c4:8c:8f:e4:9f:86:cc:69:26:a0:34:ae:d5:9d:99:
87:60:ff:66:b4:65:f4:d4:3a:07:1b:55:48:18:8e:f1:b9:26:
52:47:cf:eb:e7:81:24:51:1d:cc:4a:a6:4f:2b:40:41:ee:8d:
a5:cd:28:c1:15:2d:27:82:a2:23:1a:38:db:4f:f9:9b:94:ab:
a8:7d:21:bc:09:5f:19:ab:13:5b:8d:63:c6:9a:1d:01:f5:aa:
35:5b:97:14:ca:bd:cf:41:6e:3d:cf:20:81:bb:ef:cc:f9:56:
e8:1f:c6:70:d2:37:92:73:3b:7a:c6:00:33:ed:3c:46:b6:ca:
86:23:11:45:da:c2:bc:34:0b:f1:53:f2:0f:a3:0b:59:be:d6:
55:f9:79:a0:fb:9f:2b:d4:1f:a1:d8:cf:36:50:1d:3d:8a:77:
b1:1e:25:da:43:da:d3:32:d7:48:ab:0f:fe:c0:ba:de:f4:0e:
f3:b9:8f:8b:b2:5c:38:20:94:87:8c:36:06:66:ba:cb:a6:63:
f4:12:31:6b:8c:67:0c:3d:23:b0:2c:39:12:63:4d:a3:b7:6e:
cd:2e:93:33:77:a3:68:37:11:dd:9e:97:5a:e1:87:69:fe:e7:
08:84:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:23 2024 by rpki-client on console-ams.rpki-client.org