Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/t-G9kgYY_4p5zBCvHBqcdzNj06s.roa
File: t-G9kgYY_4p5zBCvHBqcdzNj06s.roa (raw, json)
Hash identifier: nL8lmbrO84DEtafpJC3cSMCoKDiT9YIHpT/xhsxMGFQ=
Subject key identifier: B7:E1:BD:92:06:18:FF:8A:79:CC:10:AF:1C:1A:9C:77:33:63:D3:AB
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139BD612E8FFC77B5A53C281906338D
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/t-G9kgYY_4p5zBCvHBqcdzNj06s.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210773
IP address blocks: 87.236.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 09:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bd:61:2e:8f:fc:77:b5:a5:3c:28:19:06:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7e1bd920618ff8a79cc10af1c1a9c773363d3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:1d:36:18:b1:cb:21:77:4d:17:0f:4b:4c:
2c:d5:a7:71:51:5b:1c:fe:8d:33:8d:26:1d:51:f5:
56:11:40:4a:38:6b:77:3f:cf:3b:be:c3:8b:ed:9a:
a1:a2:53:b7:b0:c0:ce:d6:9a:99:3d:75:60:b8:98:
d4:9d:9f:29:ba:58:8a:e1:f6:1b:1d:ce:e5:b2:51:
b2:39:ba:3f:46:35:58:ca:38:05:00:03:59:66:4a:
f6:2c:72:d2:a9:dc:f6:4e:ee:04:ca:34:b8:3d:9d:
60:7a:a9:cb:95:58:fe:63:4e:10:f6:9b:ac:10:f8:
0d:c1:5b:92:b0:21:13:4d:c2:d1:21:e7:93:58:6c:
53:06:7f:dc:62:f9:7e:22:53:4f:e4:ac:67:05:ac:
50:fa:43:8d:a1:74:85:e4:fe:a1:08:70:75:1e:1c:
d3:21:44:63:6d:93:06:a3:91:1e:7f:84:1e:aa:ec:
14:7e:3a:20:45:e1:41:c2:57:c8:f2:2c:66:fe:cd:
72:fb:15:01:a6:0c:87:17:22:a0:c4:4d:01:83:a0:
a0:b3:f7:26:78:45:12:44:34:b5:30:53:53:d2:06:
6f:83:38:11:bb:2b:4e:03:e8:20:fe:dd:03:11:41:
54:14:e4:d9:09:86:14:29:8f:4f:13:45:a5:84:6d:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:BD:92:06:18:FF:8A:79:CC:10:AF:1C:1A:9C:77:33:63:D3:AB
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/t-G9kgYY_4p5zBCvHBqcdzNj06s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a3:1a:d0:fb:fd:b0:b3:42:af:7f:85:79:91:0f:5e:dd:ce:
ab:8b:7a:77:11:cf:7b:85:1e:62:4b:28:94:60:f6:d9:51:12:
71:de:2c:55:d6:1b:28:c5:0a:33:1e:cc:9b:9e:bf:5a:8e:a0:
59:62:67:0b:a8:dd:ba:d8:ee:f0:0a:9c:80:12:77:50:7c:63:
2d:33:49:b5:66:db:c4:8d:41:76:b5:6c:42:03:8e:6d:9f:eb:
89:26:02:0f:f0:20:a4:fd:5b:29:97:12:c1:71:85:6b:07:94:
45:97:86:4e:42:b0:2b:5d:5e:36:1d:63:ad:10:4b:78:e3:cc:
5d:0f:20:4a:5e:62:3f:e9:18:32:4f:e4:05:26:49:fd:62:e4:
37:75:30:51:e7:df:25:b8:5a:a0:da:71:04:5b:6c:2f:ef:0a:
7b:e7:c6:c6:24:67:9c:ba:c2:50:86:65:ad:84:9d:d9:e5:a2:
98:87:9e:b0:85:92:07:a3:20:07:64:ed:0a:5b:d7:3e:2c:d3:
8b:30:75:aa:9d:be:69:f9:f5:1b:dc:04:a7:12:d8:95:4e:7c:
5a:69:6a:ae:37:60:1e:41:50:43:38:47:12:d8:07:c0:de:62:
1d:21:37:91:ab:16:eb:d5:86:eb:dd:5b:2e:5d:ca:b7:cf:b4:
f9:65:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org