Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/fDVWQkWIPKWOtpU4gnfr4Kni8ME.roa
File: fDVWQkWIPKWOtpU4gnfr4Kni8ME.roa (raw, json)
Hash identifier: 0rWO3ouuzux/qKGxaRrHG35cbv1vtZOdsxFqUfkj/P4=
Subject key identifier: 7C:35:56:42:45:88:3C:A5:8E:B6:95:38:82:77:EB:E0:A9:E2:F0:C1
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0185E30DE648768B907394F4322BADFFF107
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/fDVWQkWIPKWOtpU4gnfr4Kni8ME.roa
Signing time: Tue 24 Jan 2023 09:13:36 +0000
ROA not before: Tue 24 Jan 2023 09:13:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 87.239.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:0d:e6:48:76:8b:90:73:94:f4:32:2b:ad:ff:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jan 24 09:13:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c35564245883ca58eb695388277ebe0a9e2f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:12:b0:7b:eb:4a:53:8e:dd:fb:03:76:e9:
a1:d9:84:91:73:19:9b:ad:eb:3b:f7:a3:56:25:51:
c1:9b:14:61:9c:c6:97:7f:96:69:01:ae:13:f5:58:
ad:bf:d0:bf:0c:f7:5a:2f:37:3c:5c:d6:22:60:84:
d1:de:9a:b5:15:f2:72:e3:98:ca:dc:35:49:cc:4a:
ff:46:18:72:9e:53:e1:9e:34:61:31:01:29:19:de:
49:78:fe:e6:f1:50:66:dd:2d:44:b7:6c:e7:2c:91:
e9:1d:df:d3:9d:c9:60:8d:76:6a:f7:c1:b4:5d:73:
5f:79:cc:4f:11:ef:d9:9a:34:28:fd:d5:74:3e:0a:
70:b5:d0:f7:27:24:69:a4:7d:65:59:13:45:c7:b1:
d6:c3:3a:24:57:62:52:8d:9a:7b:40:ec:81:7e:0f:
f8:e1:b2:a3:70:36:a7:a7:ce:ab:1e:cb:18:c6:ec:
a6:a3:9e:f6:06:e0:ca:b6:7c:02:cd:da:81:b0:ba:
bc:00:5a:6e:2a:86:35:a9:38:62:b5:fb:4e:ac:56:
83:0b:80:05:b3:f2:d6:a1:e3:20:54:a7:d5:1c:41:
3f:cf:55:88:05:ec:b3:ec:4a:e9:7a:96:b4:a8:28:
04:88:1e:a0:b9:61:e8:28:d3:48:17:7e:01:a5:70:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:56:42:45:88:3C:A5:8E:B6:95:38:82:77:EB:E0:A9:E2:F0:C1
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/fDVWQkWIPKWOtpU4gnfr4Kni8ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.143.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:24:05:83:2e:ad:ef:04:37:c8:85:7a:47:f6:d9:3f:5d:51:
27:8d:49:b5:26:8c:51:af:03:17:72:42:ea:e6:f9:4a:51:ca:
0d:c8:c8:37:42:a5:38:05:19:6d:40:33:5f:d4:e1:ed:57:b6:
04:2e:f7:44:1f:4b:6c:06:63:6a:1a:41:6f:59:c0:d3:d4:79:
c2:70:0a:66:3c:76:94:4a:a3:ce:df:12:5a:38:ef:b6:f6:b4:
71:f2:91:26:25:8d:6a:34:2e:64:73:c1:59:83:08:fe:08:9f:
99:3e:31:2f:e8:2d:45:62:f4:39:6c:d7:01:7c:d5:35:e3:e9:
97:45:08:56:ff:f2:ee:b2:e9:08:8d:00:fb:12:72:a2:6d:ee:
5e:f4:a0:82:74:c9:46:6c:f3:da:6d:9b:09:22:56:1c:27:d9:
13:2d:24:d6:8b:e6:37:ca:58:9c:01:a8:39:d1:a9:ba:ca:17:
fc:04:50:e8:90:f8:75:16:56:65:77:9d:7e:22:05:4d:67:c9:
a6:d6:ac:91:54:a8:82:da:ef:9a:2d:ce:47:05:96:83:7d:bf:
50:ec:b7:6f:93:cf:06:81:da:78:57:72:25:2c:fe:7e:65:08:
4e:53:85:a7:40:e5:16:cb:8c:a3:9e:62:b1:f3:af:76:7d:66:
22:b6:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org