Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/g4ouCkxQYmNAKkmLfAAs6sNXltE.roa
File: g4ouCkxQYmNAKkmLfAAs6sNXltE.roa (raw, json)
Hash identifier: 6bjgC25Roty/G/0Cq+oLuD5qnXRRxVt2gG2g3aUPOXU=
Subject key identifier: 83:8A:2E:0A:4C:50:62:63:40:2A:49:8B:7C:00:2C:EA:C3:57:96:D1
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 018CC424BAD0FA1D5F7A9ED44D277807D16C
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/g4ouCkxQYmNAKkmLfAAs6sNXltE.roa
Signing time: Mon 01 Jan 2024 08:29:50 +0000
ROA not before: Mon 01 Jan 2024 08:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60178
IP address blocks: 87.236.214.0/24 maxlen: 24
87.236.213.0/24 maxlen: 24
79.143.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ba:d0:fa:1d:5f:7a:9e:d4:4d:27:78:07:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 08:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=838a2e0a4c506263402a498b7c002ceac35796d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:ac:2c:55:16:6a:19:7c:f3:45:b9:8a:8f:
9a:38:9e:08:f1:19:26:12:8d:98:75:33:62:a2:ef:
6c:69:ea:81:11:34:da:8f:b4:7c:00:ca:34:1e:1d:
a5:34:d9:fb:8a:ce:34:9b:83:38:48:1f:2c:b9:55:
40:5d:6b:40:ec:86:ef:7a:3f:23:0a:25:e8:83:fd:
ca:66:6c:a8:0f:4c:19:f9:00:02:3d:c7:29:69:50:
e5:5b:2b:4b:06:90:29:76:ff:a7:c6:80:ec:73:bd:
28:29:b2:ce:f9:07:87:e0:5a:41:84:d8:9b:b9:57:
1a:5b:65:5a:75:82:59:9c:5c:73:57:d2:6e:3d:30:
64:c8:dc:0f:84:c5:d3:05:2d:7c:de:a0:09:13:91:
08:28:dc:ed:47:61:ea:ed:00:e9:70:bf:7d:15:05:
3b:e2:27:61:0b:58:db:ef:24:84:fa:0b:7a:b2:1f:
4e:2a:3d:68:5e:a6:f8:be:96:01:57:96:b9:ac:77:
f3:33:d6:08:e6:0e:a6:24:f4:e1:60:0f:34:3c:d4:
48:b8:af:9e:8e:53:f4:0e:c2:50:b4:93:24:91:e6:
5e:1b:32:5b:e1:52:81:b3:cb:6a:57:46:50:16:db:
40:5f:90:7e:6b:e4:1d:87:67:82:86:d1:74:ea:3f:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:2E:0A:4C:50:62:63:40:2A:49:8B:7C:00:2C:EA:C3:57:96:D1
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/g4ouCkxQYmNAKkmLfAAs6sNXltE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.86.0/24
87.236.213.0-87.236.214.255
Signature Algorithm: sha256WithRSAEncryption
6a:6e:5d:0e:1e:fd:38:f8:75:f2:3c:57:50:f7:b1:2c:19:1e:
fe:61:06:35:9d:8b:84:8e:74:33:38:ae:cb:97:f1:83:9b:bc:
fa:b4:59:b8:88:66:0a:76:78:19:08:5c:7d:6e:ba:21:e0:01:
44:15:66:0a:34:55:a8:52:ea:59:0f:c3:4a:4d:70:5b:7f:2d:
85:6e:33:0d:b9:2f:ed:9d:bd:64:5b:40:cb:f1:9e:19:87:b5:
2f:83:ab:ef:19:f7:f9:55:cb:7f:ce:05:19:c1:54:c3:77:d0:
42:c7:17:6d:1b:8e:ce:fa:d4:20:73:dd:c5:65:f6:3a:c9:d0:
db:60:c1:47:2e:11:ab:bf:cd:81:02:8a:1c:0c:04:d3:21:7a:
9e:7c:07:a3:e8:a5:d9:b7:cf:bd:95:e3:3c:87:b5:b7:e6:78:
25:6c:77:59:82:e0:9c:62:22:27:cd:60:4d:65:60:d6:3c:1f:
44:bf:0a:e8:6f:4f:12:a1:4e:a7:d1:1d:39:e6:4c:77:71:1e:
76:79:ad:b9:39:a6:85:0b:63:27:f7:0e:1a:65:86:27:3f:0e:
0b:f3:2e:06:37:5f:c5:b4:e2:93:ba:1c:4a:9a:dc:3e:9e:f6:
2c:b5:60:fa:9a:10:f0:87:4c:f8:97:bd:dd:1d:8e:21:c4:be:
0b:b5:10:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:58 2025 by rpki-client