Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/uSNy-XMkaeCaqTevunn6RWeb6cA.roa
File: uSNy-XMkaeCaqTevunn6RWeb6cA.roa (raw, json)
Hash identifier: EiBaBCbCgzHWzMW1oez+l6EHtcR+h5EbzaxiGccuzWo=
Subject key identifier: B9:23:72:F9:73:24:69:E0:9A:A9:37:AF:BA:79:FA:45:67:9B:E9:C0
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139B975BDA14A46D959EE00048AB1EA
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/uSNy-XMkaeCaqTevunn6RWeb6cA.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60178
IP address blocks: 87.236.214.0/24 maxlen: 24
87.236.213.0/24 maxlen: 24
79.143.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b9:75:bd:a1:4a:46:d9:59:ee:00:04:8a:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92372f9732469e09aa937afba79fa45679be9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:f4:77:f0:a7:76:6b:d4:83:8c:0c:0c:a1:
68:30:ac:73:d3:22:40:88:84:47:18:f6:91:11:e2:
6e:68:15:c0:8a:5c:92:42:06:c3:df:ac:df:6d:6c:
76:67:43:b4:a1:d8:84:b9:b2:2e:6e:a1:cc:2b:5c:
62:3e:a0:0e:33:3b:08:45:cb:25:b3:e0:bb:be:a6:
d6:93:fd:d6:87:0d:2d:4c:3e:50:68:85:1b:5a:31:
25:91:df:51:fa:18:6d:f9:c5:d7:37:11:14:9c:ca:
d8:ff:a8:40:71:a6:76:3b:26:d8:3c:30:29:2e:55:
da:59:d8:0c:f2:bd:53:d7:5b:de:c5:f5:ba:5b:5e:
45:d4:e9:a3:bf:f2:dd:fa:7c:75:af:2d:ea:e8:c6:
5e:e3:ac:a1:13:cf:7b:af:64:fc:07:eb:6d:b6:73:
a2:4b:57:fe:d0:13:44:38:a5:29:fa:bd:04:ce:1d:
11:e6:95:9f:2c:ef:0f:6a:2e:4f:a2:3e:68:96:39:
09:86:18:05:c9:b0:0e:ab:25:38:14:d6:c4:cf:26:
e9:ef:aa:0d:fd:7d:0b:9a:8e:5b:0e:c8:a9:51:fc:
e3:ad:fa:92:ef:1d:02:06:45:52:37:e7:22:eb:1d:
01:00:db:e1:5f:88:a0:dc:d5:50:e7:62:b7:60:a6:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:72:F9:73:24:69:E0:9A:A9:37:AF:BA:79:FA:45:67:9B:E9:C0
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/uSNy-XMkaeCaqTevunn6RWeb6cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.86.0/24
87.236.213.0-87.236.214.255
Signature Algorithm: sha256WithRSAEncryption
6c:0d:ac:89:74:47:92:f3:74:f2:92:95:f1:e3:c1:97:40:39:
ed:03:fa:e8:7f:33:6b:58:8b:2a:f2:e7:c2:98:91:3b:6e:0c:
74:ef:68:3c:33:5f:38:c9:aa:5e:cc:ff:b4:e3:f6:ef:63:5a:
59:e4:a5:1f:4b:d1:34:10:ab:e7:54:44:2c:a1:a0:96:34:5f:
98:c7:d1:a9:a5:c6:7c:07:e8:85:19:27:ae:b0:f6:4c:2b:b1:
12:31:36:f0:4d:97:51:c8:b4:e0:36:07:63:0b:98:52:95:7d:
70:ed:68:5c:58:96:59:d1:e4:d4:0f:1f:78:ed:10:e9:f4:05:
2f:63:8c:54:62:ea:41:93:a7:35:51:b9:b6:75:8c:43:4b:a8:
09:7e:b7:45:ec:af:ef:ff:5b:7e:ea:c4:fa:46:a9:71:59:45:
2e:44:9d:79:6b:d1:dd:eb:68:9f:68:00:ff:29:93:a2:ad:43:
e1:57:f7:9a:05:23:2f:25:58:c6:ea:1b:5e:4b:21:f4:8d:69:
0c:87:b3:4d:5f:3d:ce:27:fa:22:99:a6:92:d1:14:4a:69:59:
6d:64:94:5c:e1:dd:cb:f8:30:d8:a9:61:c5:1e:a8:d8:12:7c:
fc:96:d1:bd:67:3d:45:07:b0:c1:56:28:5b:01:c3:b9:da:87:
5d:74:1e:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org