Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MikAeotHS8V4ICNTQ_DStbCcl7k.roa
File: MikAeotHS8V4ICNTQ_DStbCcl7k.roa (raw, json)
Hash identifier: WnQ1XRqpIlImN1QwJ/rL57KFPh+WOeTFVW20dQvaEU8=
Subject key identifier: 32:29:00:7A:8B:47:4B:C5:78:20:23:53:43:F0:D2:B5:B0:9C:97:B9
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 01856EB914350CA92123D04B1D8D5CC88162
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MikAeotHS8V4ICNTQ_DStbCcl7k.roa
Signing time: Sun 01 Jan 2023 19:05:01 +0000
ROA not before: Sun 01 Jan 2023 19:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 87.236.246.0/24 maxlen: 24
87.236.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:14:35:0c:a9:21:23:d0:4b:1d:8d:5c:c8:81:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jan 1 19:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3229007a8b474bc57820235343f0d2b5b09c97b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:45:40:a0:6b:12:d2:87:fe:72:88:0f:bf:
17:49:47:b2:75:02:e3:b0:22:bd:48:54:7f:3e:7e:
1f:71:81:81:09:4f:e9:4b:08:12:bc:8d:fe:a6:97:
c3:b9:55:1e:c9:a7:f8:94:45:d5:01:3b:00:37:9e:
d5:14:db:20:ac:9b:7f:bf:e0:cc:07:36:7b:9f:7b:
0e:f9:69:b0:00:83:53:c0:f0:ba:f9:bc:e8:e7:0f:
f3:e9:01:00:4c:60:6e:9e:11:0e:1d:a8:95:78:22:
94:cb:48:9d:43:4f:9b:3f:10:8c:33:39:ed:16:04:
2c:e8:72:9e:7c:ab:6f:c4:c5:98:1e:7d:c4:16:fd:
2b:5f:fd:20:26:64:8d:be:d9:6d:52:9f:0e:a7:89:
44:76:0c:95:6a:cc:25:54:21:a4:f5:a4:b4:a0:66:
f5:49:d3:cd:0d:01:be:6e:c7:f9:09:77:93:ee:95:
80:bd:f3:2d:ec:33:57:c5:ea:1b:f8:ed:62:41:6a:
24:af:04:40:ad:32:e6:42:12:05:76:b0:ab:aa:22:
a1:97:4f:e3:ed:98:66:7b:25:7e:e9:33:11:a8:2e:
20:9c:59:2d:5b:25:56:1f:78:0a:50:95:7e:93:d4:
3f:79:b0:11:f9:10:25:67:38:cd:1b:b8:69:45:2f:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:00:7A:8B:47:4B:C5:78:20:23:53:43:F0:D2:B5:B0:9C:97:B9
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MikAeotHS8V4ICNTQ_DStbCcl7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.245.0-87.236.246.255
Signature Algorithm: sha256WithRSAEncryption
42:8b:cf:68:04:b6:2d:5b:6b:80:af:45:a2:99:96:0c:b9:1e:
a2:f9:9b:dd:95:0e:3e:44:4e:c4:64:88:98:a5:f4:09:6a:d0:
d3:f1:d8:2d:dc:18:bd:0d:79:ec:96:3a:23:3e:d7:94:0b:c9:
97:d2:78:06:1c:e7:f4:72:c0:03:be:33:8b:ca:89:da:fe:67:
2a:a2:2f:e4:50:78:ed:8e:5f:3b:be:b5:da:6e:c6:4a:c1:93:
b7:3f:2c:42:2e:b1:c0:0e:85:b8:e4:ec:bb:24:38:f7:3e:9d:
55:c2:e4:82:94:85:fc:a7:da:bc:c3:bd:24:14:b2:10:37:8a:
ae:d8:47:66:fe:1a:34:15:8f:d5:f1:a4:e0:eb:6a:3b:d3:38:
af:d3:0c:61:49:61:27:cd:95:26:ee:20:20:2f:8f:8d:1d:16:
58:9d:21:c8:64:f5:b7:86:77:4d:7d:23:b5:df:c6:f8:a9:f6:
b5:b6:d0:59:e4:de:40:b0:a7:53:78:89:33:07:3a:5b:b8:f9:
29:72:5a:bd:40:4b:5d:75:2a:12:5e:50:f5:07:14:1f:13:d2:
b2:c5:72:e5:00:9d:65:ba:15:eb:0d:69:ff:e6:67:e3:50:9f:
0f:02:db:82:fd:ce:fa:f8:86:12:00:fd:46:33:e5:d3:8b:01:
cf:b2:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:13 2024 by rpki-client on console-fra.rpki-client.org