Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/v4VM15_eF_Yjsuz5MfUkQko-GBs.roa
File: v4VM15_eF_Yjsuz5MfUkQko-GBs.roa (raw, json)
Hash identifier: wCYcf0IbMHRKh+CI0HPhbR8e8j8XntYvHQ+Fa8JCg7I=
Subject key identifier: BF:85:4C:D7:9F:DE:17:F6:23:B2:EC:F9:31:F5:24:42:4A:3E:18:1B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018641C61DBE95DE2B0F0C3DE719365C716B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/v4VM15_eF_Yjsuz5MfUkQko-GBs.roa
Signing time: Sat 11 Feb 2023 18:39:08 +0000
ROA not before: Sat 11 Feb 2023 18:39:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50224
IP address blocks: 87.247.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:c6:1d:be:95:de:2b:0f:0c:3d:e7:19:36:5c:71:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 11 18:39:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf854cd79fde17f623b2ecf931f524424a3e181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:be:12:81:e2:f9:00:25:b6:c9:a4:26:c8:
96:3e:b7:15:2a:ae:86:22:23:46:84:fa:89:c0:52:
fe:15:54:bf:f8:38:58:18:82:78:89:56:b6:6c:41:
ff:bc:68:04:1c:40:03:28:d2:1a:5c:4f:7e:09:bc:
64:c1:ae:40:de:4d:1a:5a:fc:f1:2e:34:29:48:1b:
6a:5e:6e:74:6b:89:57:cd:3a:a2:c9:63:2e:f3:96:
de:88:55:4b:f3:cb:01:75:c0:e0:22:65:85:49:e7:
ef:33:7d:ed:b1:02:8d:3a:4c:66:16:72:28:db:86:
2a:0d:fc:86:52:fa:1a:6f:5e:e4:5b:4b:40:98:98:
77:fc:86:5c:97:63:86:14:a7:20:d5:3d:8e:c5:50:
38:ce:f7:58:ca:0c:7d:97:15:78:c2:94:f2:ef:c2:
ad:ba:6f:af:1b:8d:ad:ea:5e:5c:8a:27:68:a1:ca:
62:72:a4:82:5e:54:4f:25:89:fd:0f:42:9e:d3:bc:
4a:dd:6a:9c:1d:17:f9:6f:6b:24:14:a8:42:ea:42:
34:61:0d:13:d3:02:cb:a2:a6:c3:ad:21:a4:ee:bb:
9f:aa:1f:79:8d:7f:21:d5:58:91:cc:56:2f:8f:92:
da:79:0d:0c:53:92:8a:ad:e4:47:47:a1:4b:34:67:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:4C:D7:9F:DE:17:F6:23:B2:EC:F9:31:F5:24:42:4A:3E:18:1B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/v4VM15_eF_Yjsuz5MfUkQko-GBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:79:0a:77:7a:18:12:7e:a1:14:fa:05:ff:a3:a3:ad:ca:
a9:a9:0d:44:10:62:88:0b:8b:db:e2:d9:e6:61:d3:de:8c:f9:
b6:36:db:79:a0:bd:d2:07:b1:09:27:89:db:31:fe:2a:72:c5:
24:bc:1e:9c:a2:d0:44:52:9e:1c:92:e6:93:ac:47:37:8f:06:
52:d7:05:a0:5d:8f:42:80:d1:1f:a2:ec:91:f0:8b:2c:18:bf:
fb:9d:9a:96:48:bf:03:fe:3b:14:6e:05:f0:07:69:1a:5e:fb:
db:f7:74:f5:e5:fc:24:9e:02:87:c2:9a:75:f6:71:34:af:ee:
85:6c:43:c1:a1:c8:ce:85:9c:da:f9:16:17:95:24:b7:9f:96:
2b:3a:f7:31:83:92:94:9b:d0:fb:ac:1e:d5:33:e0:db:98:f6:
97:fe:e2:86:9f:54:a5:7c:e5:f1:1d:38:62:6b:9c:71:6e:35:
81:4f:1a:7f:9d:23:77:6f:41:59:82:3a:36:54:ba:3b:66:3d:
d3:5f:fc:cd:c6:c4:c7:31:16:05:d9:d6:57:1b:81:b2:7f:2d:
36:8f:aa:28:0b:ae:c8:bd:19:bc:d7:63:fb:e0:75:60:87:bb:
53:d3:b4:5b:a1:96:6d:e4:52:43:0e:b6:4b:c7:2e:8a:ff:24:
d7:ad:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org