Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/T2u2IL6lOrZOKjfRis819eqTX6s.roa
File: T2u2IL6lOrZOKjfRis819eqTX6s.roa (raw, json)
Hash identifier: 63JQvDLZiSeXVKKJtp7Cgcem+e3M0xaNZeeYBKDWVVg=
Subject key identifier: 4F:6B:B6:20:BE:A5:3A:B6:4E:2A:37:D1:8A:CF:35:F5:EA:93:5F:AB
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139B9048AC1D0BD4FA0F6D3DE69EDE8
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/T2u2IL6lOrZOKjfRis819eqTX6s.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57230
IP address blocks: 87.236.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b9:04:8a:c1:d0:bd:4f:a0:f6:d3:de:69:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f6bb620bea53ab64e2a37d18acf35f5ea935fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:5e:43:c8:39:65:4c:72:d8:1a:2c:82:88:
16:22:12:c4:d8:84:89:b8:ff:74:49:40:d4:ea:3f:
71:b9:72:20:47:3d:66:42:e9:96:53:44:6a:63:d2:
49:ab:a6:cb:b5:6e:6b:0e:f4:15:0d:67:da:4f:ad:
0e:cd:61:93:11:f1:33:8b:55:53:60:2e:44:af:87:
f9:c5:4b:14:93:2f:82:65:d4:6e:bd:8e:82:29:b0:
07:6e:1e:c9:be:34:a3:86:fc:65:6f:12:20:29:2f:
ff:90:fd:18:4a:e5:1a:29:9c:ac:c3:99:36:e9:8c:
62:45:a3:76:42:cf:34:c6:a2:ae:6c:1e:b3:82:52:
38:d3:ad:1d:4b:55:ed:1d:50:00:1a:60:17:05:5e:
fb:b4:a1:31:b6:a9:1b:45:b6:16:b6:f8:9d:d3:a5:
77:7b:19:82:be:5c:91:f5:b5:dd:6b:fa:d9:3b:01:
11:9f:50:ef:19:5b:c1:14:85:04:fc:7f:5d:47:af:
e7:bb:3b:43:aa:75:e7:8a:a0:e3:cb:32:16:7f:70:
03:26:4c:c8:ef:0e:85:88:ae:9f:91:2a:11:38:e4:
a6:4f:60:bb:73:f5:ea:f8:fd:de:60:2e:e7:86:84:
b4:d7:4e:06:56:d5:50:45:ef:5d:ac:d7:66:8a:6e:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:B6:20:BE:A5:3A:B6:4E:2A:37:D1:8A:CF:35:F5:EA:93:5F:AB
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/T2u2IL6lOrZOKjfRis819eqTX6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.210.0/24
Signature Algorithm: sha256WithRSAEncryption
34:de:04:3f:5b:68:1d:54:ef:af:91:5d:e9:10:01:62:56:da:
75:13:d6:f1:19:ef:8f:c4:70:a6:a4:ef:ac:56:56:36:25:6d:
3d:88:43:6b:27:e5:e5:51:ef:ff:37:11:74:93:e9:06:57:78:
a9:7c:d9:a2:36:3d:59:76:03:d1:d4:1e:31:fb:54:67:45:78:
82:ff:80:2c:ff:47:2a:3c:86:67:f1:09:64:bb:8e:ad:71:d3:
60:3e:e9:e6:84:1e:0c:c7:8a:79:81:81:cf:81:f8:67:b7:32:
2d:c9:89:20:20:11:8a:25:b8:75:0c:93:0e:9f:12:6c:a0:29:
f1:25:03:a2:dd:a4:9d:0e:c7:c8:5d:e2:7b:7f:ab:e6:df:54:
d3:50:5b:24:f7:9f:80:15:f8:21:96:6b:4e:b1:1b:02:9e:ea:
57:f7:d4:8d:71:00:3b:5b:2b:2e:98:cb:4d:b3:53:c9:13:16:
91:e0:67:e0:c1:e4:8e:8d:d5:2d:91:d6:e1:4b:d8:06:74:bd:
9c:75:20:1f:39:bb:e1:a5:fa:b4:42:c9:a7:0e:79:74:17:15:
16:46:2b:18:f2:38:72:29:89:08:f0:15:67:73:66:82:b4:26:
7c:3b:25:68:e9:16:a5:8f:e8:a6:ef:04:d8:b3:29:0f:eb:f9:
23:3e:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org