Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/V_q_rm4LWJuZOSH2SuYL_eLjCzw.roa
File: V_q_rm4LWJuZOSH2SuYL_eLjCzw.roa (raw, json)
Hash identifier: kJHFBi0GwGQiMSKw9BjNgvglP40RgYAVPjk9d+CH8I0=
Subject key identifier: 57:FA:BF:AE:6E:0B:58:9B:99:39:21:F6:4A:E6:0B:FD:E2:E3:0B:3C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 018F831E7DAB3EE21027DC986424C480CA14
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/V_q_rm4LWJuZOSH2SuYL_eLjCzw.roa
Signing time: Thu 16 May 2024 20:36:04 +0000
ROA not before: Thu 16 May 2024 20:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57173
IP address blocks: 87.247.226.0/24 maxlen: 24
87.247.230.0/23 maxlen: 23
87.247.230.0/24 maxlen: 24
87.247.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 09:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:1e:7d:ab:3e:e2:10:27:dc:98:64:24:c4:80:ca:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: May 16 20:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57fabfae6e0b589b993921f64ae60bfde2e30b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:0e:8e:70:f3:36:91:a6:c0:ee:10:e6:de:
f7:c7:03:f4:02:7f:bf:c0:42:34:2c:f0:02:f7:4a:
f1:aa:4a:57:35:29:f7:07:55:7d:29:e0:77:1d:cc:
5a:7f:ae:cd:75:1f:64:7e:13:66:fe:30:8a:5a:ad:
81:9e:dc:b8:d5:ab:7e:7e:a7:b7:0a:a3:31:6a:72:
0d:28:c6:78:62:2f:a0:4a:76:f1:fb:51:87:18:5e:
5c:1e:14:fc:06:9f:b2:ab:36:16:34:6e:67:52:17:
3d:25:27:a1:f4:fe:95:34:09:9a:7e:61:0e:b3:71:
fe:0f:4d:ac:ac:ac:ca:0b:13:5e:12:4f:8c:3d:89:
8f:ad:39:ab:f5:5b:c2:99:88:ea:bc:0a:98:a4:41:
a2:83:21:2e:98:f2:68:19:a2:b9:6d:bc:54:b2:74:
bb:f2:f7:45:e2:81:13:4a:e2:da:df:bd:1f:30:a8:
b1:9f:90:0b:b0:3e:d4:57:45:0c:a6:d3:36:08:9d:
7a:9e:29:3b:6c:4b:25:91:f3:3d:c2:14:8b:76:de:
4f:12:56:2f:7d:48:fa:06:09:db:3b:ff:31:95:14:
66:a8:92:fc:83:1a:35:52:6e:18:11:8f:a2:29:ce:
5b:92:99:ed:63:eb:08:b9:e9:c6:d5:3a:d7:60:09:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:BF:AE:6E:0B:58:9B:99:39:21:F6:4A:E6:0B:FD:E2:E3:0B:3C
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/V_q_rm4LWJuZOSH2SuYL_eLjCzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.226.0/24
87.247.230.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:f5:f5:3e:02:85:3e:bc:cd:5b:c7:e7:f2:cc:bc:62:44:29:
6c:5d:37:be:97:1d:a1:da:07:08:25:83:1d:8f:93:f6:fc:df:
cc:07:b3:37:b0:4d:31:1a:fe:e9:26:4c:87:09:1b:d7:ee:c7:
6f:57:40:f3:00:15:34:e4:37:7f:a5:9e:9f:b7:8c:9e:aa:c1:
b0:85:05:ad:11:2e:d0:f3:0a:09:31:1e:1a:df:63:48:c9:6a:
34:a1:d8:8c:ae:6b:bf:5e:b1:fe:b4:a5:96:ef:31:41:c7:29:
63:73:c3:13:25:f0:a6:2f:8e:fb:f5:dd:ac:cc:21:92:9f:2f:
f0:bb:23:9c:a0:9f:52:7c:85:cf:a0:68:59:16:bb:b1:b1:a0:
25:90:2d:a6:bb:77:a1:d9:d4:a0:3a:3e:99:3a:b8:0c:27:0e:
04:7e:b1:8c:10:4a:4f:ad:41:8d:29:0c:33:e1:c3:1b:d6:46:
48:0a:ef:f9:98:47:0e:5b:34:85:92:f3:be:b2:73:64:41:9f:
51:7a:40:4f:3a:6c:59:82:81:67:60:ba:85:a2:b1:5b:89:ad:
04:94:c4:11:f3:0c:23:3a:a1:d0:fb:db:c3:c1:79:75:35:e6:
37:a3:24:2d:20:1f:84:4a:c8:ab:c4:68:fd:54:2b:08:e0:5c:
16:f0:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 13:17:21 2024 by rpki-client on console-ams.rpki-client.org