Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Xr4Cxq6DQXngC3uit6PuWC4lzzg.roa
File: Xr4Cxq6DQXngC3uit6PuWC4lzzg.roa (raw, json)
Hash identifier: QMRPODsKjzz624xE0teZm6KbN3KzJy871OWsLhRxAxg=
Subject key identifier: 5E:BE:02:C6:AE:83:41:79:E0:0B:7B:A2:B7:A3:EE:58:2E:25:CF:38
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01875F1100DEA0063205B722137C1BC8E903
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Xr4Cxq6DQXngC3uit6PuWC4lzzg.roa
Signing time: Sat 08 Apr 2023 04:12:42 +0000
ROA not before: Sat 08 Apr 2023 04:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 87.246.16.0/21 maxlen: 21
87.246.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:11:00:de:a0:06:32:05:b7:22:13:7c:1b:c8:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 8 04:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ebe02c6ae834179e00b7ba2b7a3ee582e25cf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:d2:87:51:59:e1:38:d8:24:10:5c:a6:2f:
84:11:da:f8:7b:75:f4:4a:bd:12:4a:ce:29:4e:4f:
b5:0c:70:ff:a3:ec:a8:5d:5a:26:c9:8e:73:a3:34:
70:82:b0:67:58:10:79:ef:14:c0:53:e0:58:19:5f:
25:77:97:a6:ef:7e:d4:f3:b4:1b:d0:1d:b6:50:5d:
4b:34:75:a2:fa:1e:04:5f:03:b0:36:41:94:db:e3:
ec:9d:3c:b2:1d:de:0c:c5:2b:d2:79:aa:f7:0c:1e:
ce:b5:18:62:30:cb:da:d7:3a:31:2e:db:93:6e:2f:
b8:87:3d:a0:43:a4:3b:f4:9b:d5:ba:2a:e6:45:07:
30:84:65:6e:92:ec:5b:af:40:4d:dc:d9:8b:a9:2c:
dd:e7:ab:78:9c:67:84:9f:60:30:b4:4d:09:a2:25:
81:61:ca:37:f2:ae:6c:03:d6:ec:e9:14:59:88:42:
5a:d4:23:69:df:21:74:be:6e:6d:ba:eb:8e:2a:9e:
0d:a8:92:54:b3:39:08:9d:ce:e0:5d:df:74:10:cd:
8e:e7:42:7b:4d:62:f5:7b:6a:2c:e7:9d:1c:48:0c:
e7:c3:33:c5:bf:6f:af:0a:0b:05:f9:03:43:f3:62:
c1:46:7a:3f:fd:8c:4f:c2:26:b7:c3:72:75:5a:1b:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:02:C6:AE:83:41:79:E0:0B:7B:A2:B7:A3:EE:58:2E:25:CF:38
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Xr4Cxq6DQXngC3uit6PuWC4lzzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.12.0-87.246.23.255
Signature Algorithm: sha256WithRSAEncryption
6e:43:00:56:c4:ed:6f:e9:47:27:50:49:a7:77:99:b0:d2:d7:
dd:37:f1:6e:14:5b:dd:9f:c3:c2:0f:fc:c4:40:b2:2e:f7:8e:
23:cc:03:30:d1:40:ff:7a:31:a2:22:f2:d3:18:f4:3b:0b:8f:
7c:ab:8a:c9:3b:c3:ed:15:76:9a:d2:af:40:56:39:52:54:61:
f7:67:9e:5c:cf:48:ee:5b:f9:68:e9:fb:ad:aa:e0:f9:55:2f:
75:49:e8:4e:92:cd:34:1d:1b:40:b2:0c:70:1e:af:07:3a:64:
d7:33:4b:b7:69:1b:48:33:d8:68:c7:a6:5b:ef:c6:c1:24:4a:
eb:06:c0:3e:2d:ec:d5:b7:4f:f1:5f:32:c0:8a:15:76:dd:4a:
e6:15:90:1f:af:f1:3a:b7:01:94:85:13:ba:b4:d2:b0:91:45:
37:72:ba:55:38:d8:86:1c:cc:02:10:20:e0:13:b1:36:e0:8c:
5b:fa:5c:d0:26:98:41:c5:24:42:2a:2c:f3:f0:25:b8:13:29:
5d:c2:75:d7:1e:4a:63:20:5f:f5:0d:88:a3:ed:d2:25:80:f7:
33:43:99:75:3c:23:32:a2:35:94:b4:84:46:86:55:83:e9:89:
b5:be:00:ad:66:a0:32:62:1a:45:bc:7c:e5:99:d6:ab:af:bd:
06:db:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org