Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/cD1uHZom2w3ETFzGYs3M3VZwIBU.roa
File: cD1uHZom2w3ETFzGYs3M3VZwIBU.roa (raw, json)
Hash identifier: ei0yA3Z1a+1ebF0mPemgMQSxbQRCmKSsdKEpR0Kpb/Q=
Subject key identifier: 70:3D:6E:1D:9A:26:DB:0D:C4:4C:5C:C6:62:CD:CC:DD:56:70:20:15
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139BC144BA0CD167E51DF2BB059C2BC
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/cD1uHZom2w3ETFzGYs3M3VZwIBU.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 87.236.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bc:14:4b:a0:cd:16:7e:51:df:2b:b0:59:c2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703d6e1d9a26db0dc44c5cc662cdccdd56702015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:a1:6a:7d:a0:0c:95:fa:3d:d3:23:37:bc:
97:24:8c:33:a6:86:5c:4c:45:59:8b:51:a3:b1:87:
46:1a:5f:49:e2:48:c9:08:1a:4b:9e:63:ad:c0:a9:
e2:fc:05:a1:94:0c:90:27:8a:b0:30:96:fb:fe:7a:
3a:73:89:76:95:c2:1d:ee:e2:11:46:ed:07:35:60:
d8:d4:dc:d1:82:11:c0:21:73:68:b7:7b:bb:d5:c9:
8e:75:62:2c:12:97:e9:28:fa:ec:17:8b:cb:93:2b:
f0:3f:42:db:7e:69:9d:3c:29:83:9b:67:51:79:32:
d8:60:a8:29:4d:12:f9:08:06:1a:11:0e:a6:8b:67:
1e:86:80:e3:82:d7:bc:a3:4c:9d:7c:e0:2d:fa:cc:
3f:01:4e:2c:09:f9:a7:cf:11:9d:5e:0e:59:80:23:
94:6c:92:f8:6b:df:c1:68:6b:53:a5:73:6d:cd:aa:
92:ec:71:a3:c4:2f:54:64:61:00:3b:58:ad:d8:fc:
27:35:41:1b:85:95:c9:bd:53:65:59:23:37:41:5d:
db:31:43:d7:24:b2:9b:1e:96:fd:72:9a:58:bc:bf:
78:f7:40:91:0b:c2:6b:56:9d:73:8a:a4:ca:af:b0:
e9:7c:fe:b1:8a:92:b3:8d:fa:79:d4:87:a0:08:be:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:6E:1D:9A:26:DB:0D:C4:4C:5C:C6:62:CD:CC:DD:56:70:20:15
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/cD1uHZom2w3ETFzGYs3M3VZwIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.215.0/24
Signature Algorithm: sha256WithRSAEncryption
63:75:62:b3:ef:77:6c:eb:fa:6d:f2:6c:8c:fc:4d:29:a4:e7:
f9:ea:37:3f:48:14:3f:43:27:e4:3d:9b:65:87:a7:c0:f3:e4:
84:94:09:04:82:d4:5c:e2:6e:1f:4a:26:33:32:8b:7b:f8:5a:
bf:32:b5:77:12:89:20:8b:19:e0:49:c9:98:c5:c1:3d:24:31:
ca:6e:c8:7d:59:f3:8d:b6:17:54:75:ac:b8:16:fb:e1:97:66:
f1:d1:7b:50:93:ba:a4:88:e6:23:fd:31:c0:eb:3e:94:03:fa:
1a:2e:10:60:ac:47:34:ee:19:d2:1a:dd:33:29:7f:1e:13:36:
09:85:05:98:79:e0:cd:24:1c:d8:b1:7f:73:5d:b8:ef:64:b1:
17:5c:c0:eb:5a:16:4f:95:67:21:24:53:2e:25:ed:fc:3a:21:
9b:d7:6a:6f:dd:22:77:ed:89:40:3e:84:fd:ac:2f:f9:f3:bc:
5f:f6:93:c2:e6:73:83:85:de:99:66:a3:5b:86:f7:08:03:d6:
7c:75:5f:3a:8d:d4:48:1e:6c:6f:f6:38:0f:8b:45:c9:97:44:
ae:3e:72:df:c9:92:14:45:16:30:ad:5e:42:9e:01:e3:eb:81:
0f:27:d3:37:2a:c8:69:9a:61:2f:69:b2:52:ae:36:29:16:e7:
d3:b4:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org