Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/U6BmfyiUwjjL3-3H61PqwJeCQrE.roa
File: U6BmfyiUwjjL3-3H61PqwJeCQrE.roa (raw, json)
Hash identifier: ay4Odkyf6FX73Fj2sA59NeyCyYK3B0DdljdYD2V4ajM=
Subject key identifier: 53:A0:66:7F:28:94:C2:38:CB:DF:ED:C7:EB:53:EA:C0:97:82:42:B1
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139BB7E332346CC9265E4BF673D8497
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/U6BmfyiUwjjL3-3H61PqwJeCQrE.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201295
IP address blocks: 87.236.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 09:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bb:7e:33:23:46:cc:92:65:e4:bf:67:3d:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a0667f2894c238cbdfedc7eb53eac0978242b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:83:be:19:c0:6c:3f:69:39:83:94:9a:83:35:
f6:f1:52:db:e7:14:00:93:5e:ab:56:0e:63:fb:f3:
b9:d7:a3:7b:b5:51:c0:69:66:a2:6e:b4:a7:d9:3b:
01:5c:e2:24:2f:bb:ff:1e:3d:1d:d9:fe:52:fc:65:
7b:94:55:6e:8b:4b:1e:17:7b:a6:20:67:f0:7d:c3:
e6:7d:e6:c2:79:f0:ce:73:c0:56:6a:36:f1:56:8c:
ce:c3:64:97:af:21:ef:e8:5e:5f:df:cd:1e:b8:7e:
04:d8:9d:bb:a3:33:90:10:48:d1:9a:b0:e2:dc:55:
0e:9a:4c:73:ca:b4:7f:fc:60:c4:f2:6b:63:9d:18:
98:8c:a6:ed:a7:6b:00:93:3f:bc:a7:d3:a8:d4:15:
cc:db:77:db:74:36:cb:1a:f8:5e:b0:6b:d3:0a:1a:
cc:46:86:ff:d7:65:f9:93:d4:2f:08:05:cb:c6:06:
84:35:23:58:b4:59:ad:1d:6d:c1:9e:43:a8:41:c0:
dd:51:fb:3d:53:36:2d:64:8f:56:68:51:e3:50:28:
f8:69:28:96:53:28:98:41:2b:f3:7c:6a:ac:fa:ab:
44:1a:aa:4c:01:70:76:0e:08:da:b6:3e:56:9f:94:
8b:31:52:b9:b8:a8:29:9f:7f:c5:88:ff:a3:bb:96:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:66:7F:28:94:C2:38:CB:DF:ED:C7:EB:53:EA:C0:97:82:42:B1
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/U6BmfyiUwjjL3-3H61PqwJeCQrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:41:79:f4:fc:de:35:a4:82:85:8d:ff:63:38:bb:d9:16:80:
62:f7:58:d1:fc:0d:ab:14:93:f4:96:6d:c9:70:ec:d1:4e:4c:
88:60:23:68:cb:be:c1:1c:eb:15:ad:29:2e:a0:cc:0b:f7:54:
1a:99:a8:b2:77:7d:bd:87:52:fa:d3:64:40:36:f1:9f:44:b3:
1b:e9:06:a7:cf:0a:29:1e:4f:a7:68:51:7e:d5:9a:46:ea:be:
f4:a9:11:d5:ea:9b:3f:48:0d:ab:d6:c1:48:40:07:c4:53:a5:
78:ad:de:99:bd:94:97:82:dc:58:11:25:56:a6:96:38:10:1e:
3b:49:86:0b:e8:4b:47:a5:7d:fa:c2:32:3a:f5:76:77:bc:53:
e6:05:4e:19:99:02:64:ea:cb:47:82:d2:3c:eb:dd:f6:bb:db:
d8:08:a8:44:59:29:4e:16:bc:57:e5:3c:b5:ac:e1:b3:d7:d2:
cd:06:3c:98:f0:97:a8:30:8a:63:0d:98:de:cd:af:af:1d:eb:
9f:74:c2:bb:68:48:6e:a2:0b:f1:5d:a6:5a:80:d5:3b:9c:52:
4d:7d:7a:82:a9:59:ea:24:f3:29:f4:36:9c:7e:ba:96:b8:b0:
f2:ce:48:5b:46:f6:a4:00:b4:ee:87:53:6c:7a:99:10:7c:13:
b5:e7:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org