Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/RFfYQfCu74GR6rhwql3hi2lT1_c.roa
File: RFfYQfCu74GR6rhwql3hi2lT1_c.roa (raw, json)
Hash identifier: HgBzFrt7zNYxZ+BMR6eVoT6msX//LEB0Br2FAwKmwZU=
Subject key identifier: 44:57:D8:41:F0:AE:EF:81:91:EA:B8:70:AA:5D:E1:8B:69:53:D7:F7
Certificate issuer: /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial: 0186E9EF6A7EE47F0C2139DFA933806491B0
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/RFfYQfCu74GR6rhwql3hi2lT1_c.roa
Signing time: Thu 16 Mar 2023 10:20:27 +0000
ROA not before: Thu 16 Mar 2023 10:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213241
IP address blocks: 87.236.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:ef:6a:7e:e4:7f:0c:21:39:df:a9:33:80:64:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Validity
Not Before: Mar 16 10:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4457d841f0aeef8191eab870aa5de18b6953d7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:eb:0b:f4:24:98:2a:b5:22:61:67:3a:fa:
bb:7f:d4:f7:e9:17:ce:7b:bc:44:bd:d8:71:5d:8b:
db:de:f9:1e:03:c1:9c:2b:71:cd:23:f6:83:9c:b0:
db:b4:33:93:d9:06:f2:9a:3a:fe:44:d9:bc:8f:e8:
dc:e8:c0:b7:7e:a0:b5:dd:65:64:5e:ba:4e:e3:5a:
4c:92:11:e2:8d:ee:79:79:c8:1f:cf:45:c4:9b:c1:
62:96:a1:b6:28:69:ca:10:55:8d:4a:b6:ad:12:a0:
5a:66:70:ff:4b:94:96:f1:1a:9a:aa:a6:42:48:27:
05:0e:a0:c3:4e:64:13:fe:8f:42:ff:bc:1d:84:dd:
10:f7:7a:99:25:79:61:6a:0b:ae:be:c2:ad:16:4b:
8e:79:a6:fa:a2:2c:4b:10:84:13:59:86:ba:63:4e:
4a:59:9b:eb:df:e1:5b:5b:2a:49:24:7b:4b:4a:10:
b1:a8:f5:10:72:20:dd:16:3e:8c:72:12:df:0d:bf:
b4:67:b9:a2:29:c6:6e:c6:f8:67:c2:4a:84:4c:24:
1e:d9:15:95:e3:0b:48:87:54:18:a0:64:83:4d:dd:
31:1e:f7:7e:00:f3:c6:bc:22:85:a6:77:5f:28:6e:
41:94:c0:5b:65:85:b1:db:3d:1a:c9:dd:97:fd:f6:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:D8:41:F0:AE:EF:81:91:EA:B8:70:AA:5D:E1:8B:69:53:D7:F7
X509v3 Authority Key Identifier:
keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/RFfYQfCu74GR6rhwql3hi2lT1_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.33.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b4:a0:ca:d6:ad:ba:d7:1c:8e:2b:57:e3:9c:60:a3:8c:b2:
52:8a:f9:f6:67:ad:b5:e3:28:9f:c4:12:a8:ed:69:f9:36:80:
c8:09:8a:d6:db:de:11:31:15:9f:dc:f9:96:3c:54:52:0a:e9:
f1:a4:a3:dd:b4:6b:10:fd:5c:32:61:43:9e:81:0e:42:16:84:
3e:53:ae:a9:27:9f:32:3c:30:ce:4a:e6:d3:13:26:b2:2b:d8:
ce:a3:e2:98:89:2e:44:6e:cd:ac:fb:7f:00:6d:da:1f:bd:6c:
9f:88:2c:7a:13:ed:ca:e8:f4:19:e0:10:10:bc:91:ed:64:66:
4b:74:f9:6c:24:0f:33:ed:d4:a7:3c:39:97:fe:f7:d1:3b:79:
27:eb:f2:72:d2:e0:45:60:60:be:95:8d:06:ba:b1:7a:1f:d3:
17:04:31:92:d3:5d:03:78:5d:ef:a1:06:46:82:32:c2:be:6e:
2f:f2:de:a5:b3:cd:b9:a7:44:10:0c:71:40:2b:3c:bc:cd:e6:
56:d6:3d:06:85:31:ad:27:02:f8:c2:56:cc:e9:bc:a8:d2:c4:
13:b6:5f:64:f8:49:77:ac:5f:13:79:ae:f4:54:90:d9:da:f5:
a1:c1:28:44:1c:64:be:55:c0:50:9d:a8:7c:42:32:78:91:fc:
8b:8f:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org