Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/giraYarZDUq-c8_vY3BTiuhEFvc.roa
File: giraYarZDUq-c8_vY3BTiuhEFvc.roa (raw, json)
Hash identifier: anRwyS23xBDgauPIYKaJ/ggHAdUKG9McWfnnLSjW8TQ=
Subject key identifier: 82:2A:DA:61:AA:D9:0D:4A:BE:73:CF:EF:63:70:53:8A:E8:44:16:F7
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01856F7960017D7239056393FDDBBEA079C3
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/giraYarZDUq-c8_vY3BTiuhEFvc.roa
Signing time: Sun 01 Jan 2023 22:35:03 +0000
ROA not before: Sun 01 Jan 2023 22:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:60:01:7d:72:39:05:63:93:fd:db:be:a0:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jan 1 22:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=822ada61aad90d4abe73cfef6370538ae84416f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:b1:4b:8e:52:d1:1d:f5:2e:a7:84:12:58:
04:86:47:18:62:58:a5:37:31:9b:38:91:19:83:d3:
0b:ec:23:ca:1d:c7:38:84:b1:7b:e7:74:87:59:2f:
fc:8e:6f:8b:f9:12:68:29:f6:f2:6c:ad:d5:40:f4:
b1:7c:14:b9:32:c9:dd:7b:d7:e0:3f:6d:b5:c2:07:
4a:63:f8:38:f1:25:44:f8:c1:c7:e8:11:72:12:ca:
fb:dd:3a:a5:0f:4a:d3:07:f8:f0:55:ae:59:70:46:
68:0b:50:3d:b6:a3:b6:11:bd:0e:3c:56:ba:3c:0f:
a0:84:9b:f7:92:86:7a:0c:83:34:cd:05:2d:d5:b3:
d3:18:e7:2f:87:88:bf:66:f2:40:83:94:51:f2:cb:
64:fc:ed:e6:bc:15:03:41:df:4d:73:f6:f9:93:ab:
08:9a:45:87:51:e5:56:ba:e6:49:88:20:7e:ac:3c:
e7:b9:ca:9f:d1:60:23:38:22:cb:62:d0:d4:55:2a:
60:83:19:4f:bd:b6:18:8a:8d:50:a9:92:be:a2:ec:
16:6a:ff:46:86:3d:6d:3b:d5:7a:d9:66:5f:0e:2d:
fa:32:fc:d4:ca:c3:a9:8d:85:fe:4b:4d:b0:38:71:
02:d0:19:19:78:13:ef:dd:f9:0c:f0:c0:a4:a6:b8:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:DA:61:AA:D9:0D:4A:BE:73:CF:EF:63:70:53:8A:E8:44:16:F7
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/giraYarZDUq-c8_vY3BTiuhEFvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
41:59:eb:9d:2e:b7:76:1d:cb:c8:77:56:d2:e9:03:ff:f0:f2:
7a:33:de:f2:e1:0c:99:77:87:dc:74:ed:06:56:c3:1f:e7:88:
8d:13:af:39:43:37:6d:55:05:69:56:9a:c2:fd:04:7a:41:1a:
8a:71:f8:4f:55:a3:e4:24:c8:fc:76:78:60:c9:b1:10:df:51:
2c:34:c5:64:89:29:75:4e:6f:dc:bc:a8:6e:11:9b:2f:88:5a:
47:6d:ca:66:14:41:56:c1:a9:41:a7:a5:a1:60:43:e1:34:a8:
f3:ae:29:e3:6e:4e:e5:42:71:e5:1d:9e:9f:4c:d5:ca:97:2f:
77:d8:9b:0a:96:b5:d8:a2:35:68:b8:8c:df:2b:21:41:4b:3d:
75:9c:02:eb:21:d9:1a:9e:fe:0a:b5:f0:3a:07:f3:00:e1:6e:
49:b4:f8:cd:87:9a:f8:b5:4f:74:e3:e5:7e:32:93:eb:e1:cb:
dc:6b:a5:92:58:bb:f9:4a:58:e9:25:2e:65:c4:83:f3:8f:5d:
cf:4a:96:40:7f:c3:5e:b2:9b:1d:1a:d0:a3:23:f3:b1:42:60:
6d:ea:43:44:59:6b:3f:be:a3:c1:04:9b:67:12:45:c8:25:6c:
6f:33:bf:b4:08:17:e0:1c:d2:df:e9:d1:5a:14:bb:54:96:30:
c1:7d:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-fra.rpki-client.org