Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/JIB66pvlEqmQ2tRlEbSii1AJGUc.roa
File: JIB66pvlEqmQ2tRlEbSii1AJGUc.roa (raw, json)
Hash identifier: mCbWM+wN/zIYR1utFfTHxOjnjDCn0JVPzTN+uGof0Bw=
Subject key identifier: 24:80:7A:EA:9B:E5:12:A9:90:DA:D4:65:11:B4:A2:8B:50:09:19:47
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01875F11015BDB2E60B19035C7F828EF01C7
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/JIB66pvlEqmQ2tRlEbSii1AJGUc.roa
Signing time: Sat 08 Apr 2023 04:12:42 +0000
ROA not before: Sat 08 Apr 2023 04:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 87.246.28.0/22 maxlen: 22
87.246.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:11:01:5b:db:2e:60:b1:90:35:c7:f8:28:ef:01:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 8 04:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24807aea9be512a990dad46511b4a28b50091947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:03:f5:c6:e2:a1:53:ae:22:0a:e6:94:79:
df:71:0e:5e:23:d8:98:36:12:c9:af:e4:cf:6b:66:
4d:c3:8a:49:f0:bf:6a:b1:99:ac:18:3f:c5:a4:2c:
3a:2a:17:e1:a7:5c:b7:d7:0a:5c:33:d5:b9:72:5a:
b5:f7:66:81:ac:8d:b5:26:c1:0e:1e:7d:22:35:f7:
b4:79:5a:81:26:eb:61:99:79:88:1f:58:b3:3e:97:
e4:61:65:53:61:9f:47:09:46:21:5f:3c:08:8c:39:
02:56:e5:d7:11:d7:49:17:bb:6b:10:de:81:9f:5f:
e5:dc:b4:7f:d7:55:76:0e:85:f1:59:7c:55:72:b4:
72:5d:99:d5:5c:16:97:a1:41:f6:09:12:f1:cb:2f:
0b:c1:e1:d8:16:8e:cc:b1:14:d3:97:c5:34:b1:51:
07:7e:ee:b1:81:59:a4:98:ff:3c:aa:ed:d9:6d:6a:
25:51:75:97:32:d2:a6:db:f3:f2:91:1c:05:e7:56:
2d:b3:19:5a:dd:31:cb:46:0a:56:8b:f5:14:5b:bd:
70:58:63:42:d8:c0:6c:56:d7:f1:f4:b7:e4:a7:7c:
c5:ba:43:a9:1e:11:8f:5b:40:36:c6:ff:a3:74:92:
4e:79:c4:13:74:f1:e0:8c:fa:13:00:0c:9b:a2:6c:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:7A:EA:9B:E5:12:A9:90:DA:D4:65:11:B4:A2:8B:50:09:19:47
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/JIB66pvlEqmQ2tRlEbSii1AJGUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.8.0/22
87.246.28.0/22
Signature Algorithm: sha256WithRSAEncryption
87:aa:11:72:ca:21:b0:32:7d:1d:d6:fa:3e:e4:bd:18:97:4d:
de:64:ff:5f:f6:67:19:31:5a:a8:af:5e:59:9b:e5:b9:15:15:
4a:60:3b:ef:af:00:68:c7:ef:d1:3d:b8:06:ee:7a:fb:2b:a4:
ca:b6:85:b4:25:6b:b4:9c:8d:41:c8:60:69:06:3b:6f:4d:ab:
70:73:0a:f2:56:0b:ad:36:7d:cb:b2:12:71:8b:4f:0f:22:06:
39:17:db:fd:18:ab:29:24:4f:13:08:fb:bd:41:91:8c:9a:ef:
df:17:97:4f:34:b9:a6:99:01:0d:d3:c5:1f:76:a9:81:2f:b1:
eb:d2:bc:ef:c7:0e:0b:c3:91:e8:db:81:98:af:b0:32:32:8c:
2f:9e:cb:97:79:12:b4:0e:04:92:f8:12:c9:d1:2b:0c:b7:b3:
49:13:9a:13:1a:ab:d7:29:26:20:eb:2a:6b:47:dd:d0:fd:6c:
97:2f:61:9c:03:b6:a0:d4:b8:15:8c:a7:b4:6b:ea:0e:98:89:
5e:ef:3e:cf:37:db:1f:8c:ae:8f:28:45:56:00:45:87:c7:6d:
c5:53:db:bd:a9:ac:d1:3f:81:8c:12:18:1d:c4:b7:f6:91:a5:
1a:44:ad:91:ab:31:63:e6:9f:22:9b:32:71:5c:f2:d1:e2:fa:
0d:fc:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org