Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/Ne8YnZzGYAbnaksznncINhiRy3o.roa
File: Ne8YnZzGYAbnaksznncINhiRy3o.roa (raw, json)
Hash identifier: cmwbAa3SXP/ED+jMwFpDKm40MHOBUsjVYgTebMC5wFY=
Subject key identifier: 35:EF:18:9D:9C:C6:60:06:E7:6A:4B:33:9E:77:08:36:18:91:CB:7A
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 018BDDD7124C26F7F5109BFFB50073EE66FA
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/Ne8YnZzGYAbnaksznncINhiRy3o.roa
Signing time: Fri 17 Nov 2023 15:12:21 +0000
ROA not before: Fri 17 Nov 2023 15:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 87.98.96.0/20 maxlen: 24
87.98.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:d7:12:4c:26:f7:f5:10:9b:ff:b5:00:73:ee:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Nov 17 15:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35ef189d9cc66006e76a4b339e7708361891cb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:77:0c:bb:3a:fc:d2:90:86:2f:06:8c:b0:
57:a4:4f:41:87:ae:31:b2:e5:d8:03:88:8b:01:e4:
72:e4:60:01:42:1e:d8:e7:f7:87:95:dd:38:61:45:
bf:ad:63:17:6e:ba:a8:b7:b8:67:a9:48:3d:32:0c:
db:5a:71:43:c4:f8:43:e6:2c:1d:0e:e3:c8:5b:1b:
82:ea:ee:ba:f4:ef:04:86:7e:20:98:d0:96:b4:24:
ee:6c:b0:3b:50:2a:13:9f:ec:81:79:fb:c2:d4:ae:
a3:91:42:a5:39:95:ac:bc:72:ae:6f:e6:49:2e:91:
75:31:d4:12:1d:3d:0b:e1:99:fb:a4:60:bd:04:02:
18:28:fa:10:ce:25:9c:8b:9a:7d:1d:39:03:8b:c5:
57:50:96:bc:51:e4:19:0b:00:d3:96:c4:fb:a7:30:
13:d5:b8:9b:91:5b:f1:1f:5b:bc:5d:ca:f2:64:ea:
b9:7b:40:08:39:ef:35:94:2a:5c:cd:f6:0d:95:0b:
57:03:e6:86:8e:c3:32:6d:b2:0a:49:bb:3e:af:c0:
dd:6c:14:ac:1b:59:1e:fd:c6:5e:6f:01:09:cb:d4:
a1:79:57:8d:63:be:63:24:2a:84:65:7b:e1:e5:57:
c5:11:70:8a:ae:a1:a5:e7:74:e2:05:e3:29:87:f0:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:18:9D:9C:C6:60:06:E7:6A:4B:33:9E:77:08:36:18:91:CB:7A
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/Ne8YnZzGYAbnaksznncINhiRy3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.98.96.0-87.98.119.255
Signature Algorithm: sha256WithRSAEncryption
2f:27:96:85:cb:8b:11:56:1b:90:78:1a:18:60:8e:24:1b:00:
22:04:eb:f6:ad:ad:d8:2e:24:b4:f3:5b:7f:5c:95:dd:6c:c7:
c6:f6:a3:5f:a6:ae:4d:5a:9c:90:ca:74:1a:42:62:fd:60:8d:
2c:f3:fc:44:48:32:1c:56:b1:09:67:3d:22:2e:de:45:9b:ce:
bb:f3:e0:1f:65:6f:d6:4d:60:85:b8:33:69:a0:2e:64:8a:b5:
b3:3e:d4:ff:ce:41:09:b0:46:f7:bb:43:09:52:0a:3f:4e:7f:
42:8f:43:f2:a7:5f:73:cc:d6:06:5d:f1:dc:69:12:68:cd:b1:
09:f5:a6:62:35:74:5e:96:a8:55:53:8f:4c:9d:78:37:a7:ca:
b0:f9:05:b9:e8:17:e7:28:a9:98:84:7c:9b:da:ea:86:21:66:
a3:fc:f1:97:44:32:a3:c4:f1:24:78:53:e6:f6:d8:47:08:b7:
16:ca:a5:dc:46:9b:9d:69:cd:38:f1:bd:8a:d9:90:5f:fb:f1:
6b:31:7e:fb:f4:b2:1a:6c:2b:1e:12:43:92:a6:07:2a:fe:19:
11:d8:5b:b7:40:73:4d:1c:66:44:cb:03:79:63:74:79:ee:e4:
9a:58:4f:1c:62:b2:73:c6:53:3c:d7:5c:f0:fc:1a:b6:26:c5:
aa:14:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:21 2024 by rpki-client on console-ams.rpki-client.org