Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/eiMSb5fywkipMNofj65k4XXuijo.roa
File: eiMSb5fywkipMNofj65k4XXuijo.roa (raw, json)
Hash identifier: PmO/KW6b07CW97TuHToT2ArP/vyyvsYskc5s6VMBMNg=
Subject key identifier: 7A:23:12:6F:97:F2:C2:48:A9:30:DA:1F:8F:AE:64:E1:75:EE:8A:3A
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 018AED7B105CD40F82D784CF57C7F2F831A3
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/eiMSb5fywkipMNofj65k4XXuijo.roa
Signing time: Sun 01 Oct 2023 23:02:59 +0000
ROA not before: Sun 01 Oct 2023 23:02:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210885
IP address blocks: 87.236.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:7b:10:5c:d4:0f:82:d7:84:cf:57:c7:f2:f8:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Oct 1 23:02:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a23126f97f2c248a930da1f8fae64e175ee8a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:5a:23:10:2f:5d:7b:02:0b:c4:81:18:26:
74:38:7a:43:ed:b0:34:c5:5a:32:f5:10:b8:8f:f8:
ca:2c:cb:75:8d:6f:81:cb:d3:d6:c2:44:c3:0f:40:
83:dc:a2:9a:e9:48:b8:7f:28:44:3c:2c:68:34:d5:
cb:42:0b:fd:df:9e:4e:16:a5:aa:66:6c:81:1a:c1:
93:91:24:ba:9d:2f:2c:c3:6d:13:28:e7:9e:59:b5:
c7:df:bb:ec:45:62:ce:b7:33:aa:27:33:71:12:a4:
d7:4c:64:1f:7e:f0:60:52:39:cb:08:fd:5c:f1:75:
a9:76:48:6b:34:68:46:42:03:a1:97:d1:5e:d8:a4:
78:ab:61:de:b6:53:d3:8e:cc:f2:c0:1c:59:cf:7d:
2a:c9:22:4d:ef:4b:67:94:6a:43:10:2e:b6:91:b5:
44:a4:23:ea:d2:c7:a1:9f:d9:ff:f4:a5:b2:79:58:
4f:dd:3f:1f:4b:d2:fd:3d:f5:50:d3:40:9c:6a:d7:
f8:08:07:b7:59:78:e9:93:74:b0:00:d9:96:fb:06:
a6:6b:2f:e4:cc:2f:ed:ff:45:9a:fe:b6:c9:bc:d3:
64:67:6c:96:7f:66:03:11:33:e2:32:9a:70:3a:57:
bf:17:38:32:4b:df:27:de:35:14:1c:a0:61:3d:d8:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:12:6F:97:F2:C2:48:A9:30:DA:1F:8F:AE:64:E1:75:EE:8A:3A
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/eiMSb5fywkipMNofj65k4XXuijo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:12:9c:27:ab:aa:b7:f1:2a:bb:27:bb:95:a0:52:79:c3:f3:
fa:08:36:68:47:e7:91:74:8b:61:cb:39:d5:ae:a8:6c:0e:b6:
81:bb:c4:6a:aa:92:ef:26:08:ca:7a:e3:bc:89:42:2c:4e:50:
35:2d:b8:a0:4a:e9:8e:62:5e:7d:2b:6b:c0:eb:e4:24:12:d9:
41:b5:56:fa:8d:02:df:9a:05:1e:43:ee:49:d0:a0:9e:6c:c1:
74:92:09:32:10:35:a5:e0:df:08:1b:6d:47:7c:a4:1a:c6:1c:
f4:94:25:f1:2f:59:bc:e4:bc:cc:84:20:28:ed:94:65:db:e8:
d9:a3:e4:ca:3a:b4:22:25:89:85:e4:dd:d5:46:4b:39:55:b0:
14:74:ef:29:fd:cc:f4:5a:94:95:37:6c:e2:2a:9d:e0:95:25:
86:6f:3c:93:db:e8:dd:2a:2e:6e:7b:1d:39:69:0d:38:30:72:
dc:60:bf:7e:54:b2:50:6b:d0:91:8e:05:2a:47:b9:6e:30:2c:
c0:22:e2:29:eb:0d:af:c1:71:ad:fc:31:1d:5f:55:3e:05:48:
c4:ac:e8:b4:a9:f4:42:af:63:2d:0b:e2:c8:68:ab:e2:e3:cf:
0d:7b:32:d3:c4:40:4c:a7:d2:fe:1e:af:08:23:4e:d5:cf:5a:
be:5b:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org