Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/qP26xAERBpsbJ6Ao_eYJ7Nx5DBU.roa
File: qP26xAERBpsbJ6Ao_eYJ7Nx5DBU.roa (raw, json)
Hash identifier: Fx7REnV6lfPp/kA/mwXuE9uTQV0YEWqNf6y5LgCgIbQ=
Subject key identifier: A8:FD:BA:C4:01:11:06:9B:1B:27:A0:28:FD:E6:09:EC:DC:79:0C:15
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 018CC9BCF535C610713F1668A4196BC31935
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/qP26xAERBpsbJ6Ao_eYJ7Nx5DBU.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 87.236.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f5:35:c6:10:71:3f:16:68:a4:19:6b:c3:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8fdbac40111069b1b27a028fde609ecdc790c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:42:60:a8:23:14:dc:b0:c5:09:33:75:25:
2c:b3:be:3d:10:11:73:4f:6b:60:ce:be:f3:1b:72:
f0:79:b0:38:8f:23:18:36:0c:a2:12:b7:8c:7d:c3:
28:6c:8b:51:84:55:17:fb:38:35:01:ac:da:78:53:
45:f6:0d:29:af:a7:11:68:5d:ee:8f:6c:d2:fe:7c:
11:6e:05:d8:1f:38:30:7b:52:bb:8e:d6:10:a8:10:
9c:3a:8d:e4:41:de:55:b9:c9:de:f9:8e:57:7a:39:
fd:4f:d0:33:9f:a1:0f:dd:6d:bf:94:aa:6c:8c:cc:
ca:69:40:d4:58:e3:e6:28:ac:f8:1e:90:f3:2a:0a:
3b:43:26:68:e0:6c:ea:95:42:49:69:06:6f:fa:cc:
1e:34:4d:f4:8a:69:3e:70:16:b8:f9:ec:45:12:dc:
f7:78:2e:be:99:da:42:f8:ef:fa:27:2d:f2:b9:6a:
64:64:4c:c0:ed:72:83:7c:37:42:b9:ab:fe:29:ea:
97:0d:f9:95:97:12:1a:56:47:ee:4e:53:49:f4:63:
2b:0d:29:f8:8a:4f:a7:de:da:dd:f6:a9:de:39:8d:
6c:7a:21:4b:45:20:d2:82:0d:b9:09:65:e6:67:98:
cb:3e:be:42:74:00:de:8c:04:7c:10:41:3f:49:86:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:BA:C4:01:11:06:9B:1B:27:A0:28:FD:E6:09:EC:DC:79:0C:15
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/qP26xAERBpsbJ6Ao_eYJ7Nx5DBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.164.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b3:dc:45:23:d1:71:95:83:b0:cf:5b:18:f7:02:1d:ee:b0:
f8:e8:59:59:aa:d7:4e:02:66:ec:9f:b4:c7:3f:d1:99:40:30:
50:d9:34:38:12:c0:c3:8e:17:a2:64:f8:9f:99:f3:80:33:93:
c4:57:93:30:d6:c2:ee:2b:96:ea:97:4f:86:7f:e0:df:28:fd:
81:ff:c4:92:32:71:8d:bb:f3:aa:02:20:01:d7:f5:00:d8:c9:
89:2f:ba:0a:4b:90:4f:c7:9a:bf:db:03:ae:51:97:89:24:1a:
a1:d6:e0:3c:43:db:9a:0d:02:9e:01:f7:ee:a1:45:5c:28:e0:
a2:5c:4e:62:48:74:d2:56:46:49:12:2f:de:2b:80:65:4d:07:
48:20:b6:ff:0a:c8:6e:5c:c3:54:3b:96:12:22:7f:17:1d:47:
eb:93:8b:a2:fa:33:2d:f8:38:28:6b:33:38:9b:86:8d:0f:2a:
b8:8f:cc:0d:59:48:4c:d2:6a:13:82:6d:f9:f4:51:b6:d5:f7:
e3:c4:7e:83:05:ef:b3:43:d5:41:8d:b0:dd:6e:3c:01:80:33:
6b:68:13:ab:36:29:14:8b:3e:3b:7c:38:89:3e:ee:d8:ca:6f:
82:fc:20:4c:9b:96:52:73:31:73:ac:1a:bc:30:2e:1c:1b:af:
17:87:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:47 2025 by rpki-client