Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Mt7vIvllMX2PXbnNtFFh5QeJYGQ.roa
File: Mt7vIvllMX2PXbnNtFFh5QeJYGQ.roa (raw, json)
Hash identifier: UbjpxYAqfm6vGAf97W+K2g1oOJmYoAL1W0zI9hw1mMw=
Subject key identifier: 32:DE:EF:22:F9:65:31:7D:8F:5D:B9:CD:B4:51:61:E5:07:89:60:64
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 0187EDA7A459689B6FCF19D567EBE204CFE3
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Mt7vIvllMX2PXbnNtFFh5QeJYGQ.roa
Signing time: Fri 05 May 2023 20:43:19 +0000
ROA not before: Fri 05 May 2023 20:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.170.0/23 maxlen: 24
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:a7:a4:59:68:9b:6f:cf:19:d5:67:eb:e2:04:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: May 5 20:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32deef22f965317d8f5db9cdb45161e507896064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:18:22:66:7d:c2:d9:61:ac:90:ea:cd:ff:
73:21:29:7a:9a:22:d8:59:12:84:7c:a2:6c:cf:12:
ae:04:35:99:35:c5:ff:dc:28:64:eb:a7:76:f7:1e:
af:53:65:e6:38:a8:26:2f:76:20:9f:a4:67:b7:dc:
d8:65:8e:f5:a6:5b:b6:a1:49:1e:a5:24:0c:45:4e:
7c:9a:ad:15:ae:16:e1:51:15:d9:53:1e:7e:4f:6f:
88:e5:df:d3:b9:8d:e6:27:96:a4:1e:69:14:a2:18:
fa:31:1b:51:27:bd:68:38:76:f9:b8:9c:dc:a7:0c:
8d:44:79:15:c0:b1:61:ba:85:14:ed:13:a3:6a:0a:
80:07:94:d3:71:18:3a:e1:7c:a5:2f:93:78:15:24:
a9:ac:48:00:c6:f2:aa:73:5c:9f:ca:dd:e2:87:cd:
e4:2b:4a:ff:78:f3:8c:35:a9:7e:5c:ea:09:00:82:
ed:8c:6e:50:86:46:31:a1:42:1b:ac:76:c9:c1:ec:
e5:71:cd:74:95:24:07:3a:52:a3:13:4b:4f:63:b5:
84:2f:10:06:b2:16:8b:d0:00:24:bb:db:49:81:dc:
9b:0d:72:d9:26:df:00:63:c3:d7:79:77:d6:2a:c2:
bc:48:e3:ba:3a:9b:73:7c:34:c0:67:15:a6:4a:32:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:EF:22:F9:65:31:7D:8F:5D:B9:CD:B4:51:61:E5:07:89:60:64
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/Mt7vIvllMX2PXbnNtFFh5QeJYGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.170.0/23
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
41:ae:75:73:ac:f2:9e:0f:cb:c8:d8:4e:e7:e9:0a:8d:e2:00:
27:a2:fb:f5:3b:d4:bd:a8:8b:95:1a:61:cd:5c:cb:a8:a8:bb:
cb:66:9f:4e:e3:b2:2e:a1:21:4a:f9:8f:1d:9f:8e:4a:30:9a:
97:e4:a6:aa:7d:44:56:ce:c8:6d:64:2d:b9:33:3b:f4:5a:ae:
1a:a6:57:96:ca:8f:01:b4:66:19:06:02:45:67:0e:0d:11:36:
9e:2f:01:55:52:cf:98:de:21:a0:3c:17:c1:19:43:3c:c6:03:
69:63:e1:de:7a:ad:51:4a:f1:93:7b:8f:7f:ff:a5:1d:72:be:
f4:ac:b5:5d:8f:b7:97:7a:ec:ac:39:63:63:3f:46:88:71:f3:
1e:b5:83:85:40:10:88:a6:4d:8a:3f:85:7a:2a:8c:bf:f5:80:
ce:45:0c:91:27:ef:e5:02:58:ec:3d:0b:b5:93:05:b6:6e:78:
32:28:74:6f:1c:82:90:31:c6:2f:a9:6e:33:c6:d9:a3:dd:eb:
34:1c:61:ee:27:49:43:c4:3e:c2:37:25:c9:d6:68:41:2b:df:
12:6e:78:b4:4d:cc:6a:ef:9e:34:90:89:09:24:e2:3b:cc:02:
ea:70:ff:5b:59:38:ec:32:cc:2e:4f:77:54:61:fa:43:05:40:
13:bf:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:07 2024 by rpki-client on console-fra.rpki-client.org