Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/V4ziI8KOyKAklqr9cDS3yK-NcjI.roa
File: V4ziI8KOyKAklqr9cDS3yK-NcjI.roa (raw, json)
Hash identifier: j/VCyROrn1SpHY75wlWojL/zYcKCKVtMuXm0ww1zokk=
Subject key identifier: 57:8C:E2:23:C2:8E:C8:A0:24:96:AA:FD:70:34:B7:C8:AF:8D:72:32
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 01856D9D33AF8F818792CDB82573739177B1
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/V4ziI8KOyKAklqr9cDS3yK-NcjI.roa
Signing time: Sun 01 Jan 2023 13:54:56 +0000
ROA not before: Sun 01 Jan 2023 13:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35834
IP address blocks: 87.237.38.0/24 maxlen: 24
87.237.32.0/23 maxlen: 23
87.237.32.0/24 maxlen: 24
87.237.36.0/24 maxlen: 24
87.237.33.0/24 maxlen: 24
87.237.34.0/24 maxlen: 24
87.237.34.0/23 maxlen: 23
87.237.38.0/23 maxlen: 23
87.237.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:33:af:8f:81:87:92:cd:b8:25:73:73:91:77:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jan 1 13:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578ce223c28ec8a02496aafd7034b7c8af8d7232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:bf:94:aa:51:6a:46:8d:96:85:2e:6d:ba:
b1:8e:04:5c:e4:2a:58:2e:6a:6b:ec:e5:64:1f:e4:
36:6a:6d:79:03:cb:e9:e7:ae:87:9a:c9:66:8a:b1:
1b:8e:0a:ef:52:01:88:85:91:b5:ec:96:ed:08:d0:
03:65:4e:71:d7:fc:05:b8:d7:a5:13:69:18:bc:bf:
7f:3a:35:a4:4f:f1:b6:af:85:db:48:4f:5f:bb:cc:
35:e3:5a:d8:79:30:18:e5:89:00:13:5d:9a:b6:dd:
ef:08:5f:97:be:93:f9:4e:8f:8a:95:a8:f7:97:10:
60:a0:bf:39:9c:bf:96:c8:f3:73:6e:58:be:a7:5c:
b3:3c:96:4a:1b:94:81:9d:ce:f1:69:3d:5c:f9:71:
5b:07:52:f9:24:25:2c:e8:c9:3c:56:6d:c4:08:8c:
68:1d:6b:ae:65:25:cc:fb:4d:bf:f8:f3:f5:8a:19:
ef:1a:ff:aa:4d:21:ad:64:e3:48:1b:f3:99:8b:59:
aa:0d:1f:ff:37:b3:99:b0:b0:17:44:ad:7c:01:f2:
26:b6:3a:9d:e8:f6:01:80:86:ce:8f:13:0e:d8:6d:
10:7d:2c:82:7a:1b:36:73:0b:f1:61:89:50:3d:2b:
f9:a1:b9:1f:8d:6d:4d:3b:32:a0:cb:aa:e6:e1:8d:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:E2:23:C2:8E:C8:A0:24:96:AA:FD:70:34:B7:C8:AF:8D:72:32
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/V4ziI8KOyKAklqr9cDS3yK-NcjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.32.0-87.237.36.255
87.237.38.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:24:72:c7:e8:1d:8c:2d:b3:42:7f:96:9d:fc:47:42:93:a3:
e0:08:c5:44:9f:1c:47:36:f7:be:ce:4f:be:b0:5c:5a:7c:76:
0c:94:c1:5e:95:33:bd:a0:60:16:c6:00:df:3d:ec:7b:22:92:
1a:1e:ec:68:ec:64:06:bf:a6:e0:8c:59:fb:1e:d9:ae:40:5d:
5d:7a:d2:ba:a6:e4:fe:0f:bb:9e:4a:ef:e3:8b:f8:e5:79:fa:
44:76:23:cb:fb:64:61:c1:24:a6:b2:b7:d5:9e:85:7b:52:8f:
0d:a0:72:d7:e4:33:d7:6f:98:98:16:54:cf:99:f9:fd:1f:85:
7e:cf:de:ed:ac:4f:58:50:17:b3:ed:4b:c3:2b:14:c4:a4:c1:
91:eb:51:5c:81:de:af:36:fc:4b:65:37:6e:d4:0f:d5:c9:07:
b8:27:e7:b3:97:13:31:e7:86:11:ae:c9:13:41:b4:bb:2e:d8:
17:90:52:3e:52:76:aa:1d:49:2d:68:82:0b:11:5e:85:1c:1c:
8f:85:54:2a:58:79:c2:17:d5:8c:81:4d:a7:13:bd:a3:94:21:
45:09:31:f1:ca:7e:32:36:57:d0:25:54:0f:0d:5b:f7:4d:b7:
1f:a8:c9:b3:d9:9f:16:8e:d1:b1:04:42:ca:23:8f:ac:b8:8a:
c6:42:b8:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:41 2024 by rpki-client on console-fra.rpki-client.org