Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/DXFkMcMt0afROItc58dWxC1-tlI.roa
File: DXFkMcMt0afROItc58dWxC1-tlI.roa (raw, json)
Hash identifier: QTwFfA7BQGdVjF5Y/dFAADy3PK/7MdZC1pMD542kIt8=
Subject key identifier: 0D:71:64:31:C3:2D:D1:A7:D1:38:8B:5C:E7:C7:56:C4:2D:7E:B6:52
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01856C25C0FBFF0D226F6A13417051120AF2
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/DXFkMcMt0afROItc58dWxC1-tlI.roa
Signing time: Sun 01 Jan 2023 07:04:51 +0000
ROA not before: Sun 01 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 87.236.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:c0:fb:ff:0d:22:6f:6a:13:41:70:51:12:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jan 1 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d716431c32dd1a7d1388b5ce7c756c42d7eb652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:11:34:d2:d4:d2:fb:bd:c4:f0:60:c5:2a:
c4:9e:3c:b5:94:b2:07:a9:4e:1a:a8:65:9f:ce:d7:
32:7a:c8:1f:51:19:55:ad:c7:ca:5e:3e:d5:9a:5a:
ce:76:ac:db:9b:c2:fd:9d:b8:f6:6e:b1:67:d9:9e:
36:73:cf:dc:74:ca:d2:4d:a1:23:d3:b4:04:63:45:
1c:f3:6d:fd:ef:e5:3d:5b:0b:1e:92:14:d5:be:d6:
78:ee:12:26:22:de:38:1d:47:96:d2:9c:43:21:f4:
16:9b:13:41:9f:4c:6a:9e:08:2d:f6:2e:d2:b1:5a:
35:5d:b2:31:67:67:5a:df:10:7c:33:50:d0:31:f0:
1e:ac:78:72:a1:c9:ff:0f:06:a5:28:1c:bf:0a:b2:
39:da:83:fd:03:47:4d:de:96:fd:da:73:82:c9:bf:
65:49:87:06:b3:6e:07:cc:9f:1e:de:1a:83:64:95:
a6:e7:9b:46:f5:63:58:cc:c9:e3:54:d4:b5:4e:36:
d4:a4:ea:2d:f3:86:ac:49:d6:85:c9:1b:10:0d:8e:
75:7a:37:86:ef:7b:ef:54:fc:a4:54:e0:45:bc:89:
50:28:93:06:80:bc:b5:78:3f:51:bb:a0:46:6a:df:
dc:eb:a2:28:3d:de:a6:52:82:e1:68:41:23:70:90:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:64:31:C3:2D:D1:A7:D1:38:8B:5C:E7:C7:56:C4:2D:7E:B6:52
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/DXFkMcMt0afROItc58dWxC1-tlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.164.0/24
Signature Algorithm: sha256WithRSAEncryption
77:83:9d:ce:fe:a6:21:3b:bb:c3:e2:9f:53:67:69:25:8b:c1:
84:fe:24:28:78:b9:58:4f:8b:dc:a1:a5:68:4d:09:87:d3:af:
63:d2:5a:d2:68:17:55:8e:9c:b5:c9:58:5b:7d:6b:c3:7e:51:
1e:70:09:7a:7d:e9:cf:eb:23:78:c8:8f:74:36:68:e2:86:fc:
6e:ad:40:d8:50:b0:2c:9a:7e:e3:93:70:f6:e7:18:1f:c7:7d:
f8:00:d2:86:cc:82:f5:24:e9:7e:5b:2d:cd:e4:48:02:38:30:
56:cc:96:84:83:10:97:8c:59:3d:f7:be:d9:de:73:db:0c:0a:
2e:21:58:52:69:4d:16:52:44:69:95:69:bd:72:1e:61:ad:23:
21:c8:7e:0b:0c:2c:0b:d6:66:c2:2e:d5:6f:ff:4e:02:7d:16:
cb:b1:68:83:d0:16:77:e3:69:58:40:3b:cc:09:2d:a9:92:99:
6c:ab:6e:76:ca:54:57:d3:c8:b6:46:50:fc:fd:6e:4a:cf:22:
75:9a:8b:2b:ed:48:62:33:a2:ff:67:e7:18:e3:2e:f3:1d:88:
f5:9b:62:a0:31:c1:87:5b:84:81:a5:ca:eb:79:0e:4b:24:c4:
e4:53:3a:31:58:39:c2:0d:6b:bb:1b:fb:d2:c1:08:2e:7d:b1:
e8:f0:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:16 2024 by rpki-client on console-fra.rpki-client.org