Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dJFg2s03PVBJb6f82_RzTNnA2hw.roa
File: dJFg2s03PVBJb6f82_RzTNnA2hw.roa (raw, json)
Hash identifier: FYH+wD9N3WThZ+Eo9bx8LaIhM3g+knNVoD2Fi7qyE6U=
Subject key identifier: 74:91:60:DA:CD:37:3D:50:49:6F:A7:FC:DB:F4:73:4C:D9:C0:DA:1C
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01874FF1A8B8B45D5794334F144E585EB723
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dJFg2s03PVBJb6f82_RzTNnA2hw.roa
Signing time: Wed 05 Apr 2023 05:44:10 +0000
ROA not before: Wed 05 Apr 2023 05:44:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 87.246.16.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 08 Apr 2023 04:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:f1:a8:b8:b4:5d:57:94:33:4f:14:4e:58:5e:b7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 5 05:44:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=749160dacd373d50496fa7fcdbf4734cd9c0da1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:2d:97:06:de:12:ee:52:f8:b2:a6:9e:87:
95:c3:87:dd:3a:cc:48:5c:b5:67:4e:b4:6f:c7:13:
d9:9b:8b:d6:13:22:4c:fd:71:aa:e8:64:9e:9a:1e:
ab:a7:e6:98:f7:c6:01:1f:99:d4:62:0d:ff:25:97:
d2:1f:5b:66:ab:53:05:94:5c:2d:5d:52:9a:af:f9:
cc:1a:4d:08:6a:1e:df:77:58:4a:c3:b0:61:f2:e6:
01:f1:bd:b4:d2:e2:36:81:04:46:ca:19:5a:f0:0e:
cf:4e:4a:02:58:89:4e:d6:84:06:69:c3:80:fb:ea:
41:b8:fe:cb:5f:75:e9:31:8d:83:c1:25:66:ff:e9:
3c:eb:84:92:2a:1f:73:d2:a5:ea:f9:67:d8:ca:a6:
e8:d0:4f:6f:63:11:77:84:7d:a1:8c:18:7b:57:72:
11:2a:f8:f5:24:de:41:4e:92:07:bb:1e:41:a8:34:
ae:f0:62:91:28:c3:07:c0:17:d6:b0:83:f5:55:e7:
22:23:e1:4a:7c:88:d0:e5:25:b9:b2:0b:a4:ec:d1:
c0:ed:f4:c9:8b:58:23:9a:86:55:16:a6:7c:ba:74:
47:74:e7:e6:7c:fd:3d:55:38:52:f5:02:b7:3a:a6:
8a:35:34:e5:c9:54:48:ef:8f:39:9f:18:04:4b:32:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:60:DA:CD:37:3D:50:49:6F:A7:FC:DB:F4:73:4C:D9:C0:DA:1C
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dJFg2s03PVBJb6f82_RzTNnA2hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.16.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:4a:9d:b3:e4:1f:c0:ec:d9:35:cc:42:a2:ee:eb:63:0d:0c:
2c:30:66:84:ed:e2:a5:f8:c8:63:ec:c8:2d:84:2e:62:48:fd:
66:60:16:ae:5d:14:73:6a:49:cc:54:ed:e0:e7:26:8d:ba:04:
d7:42:bd:90:9e:1c:71:cc:90:1a:b9:b9:67:78:fd:19:2b:ef:
f8:bf:fc:15:ef:4d:94:f3:9b:2e:e3:59:64:9d:a7:c8:31:d8:
6e:7c:49:96:97:17:3e:25:20:6f:24:6a:96:65:ce:b7:53:9e:
7d:b9:86:a1:45:4a:98:33:7c:59:0e:6e:5e:4e:8a:18:73:37:
8a:7f:4c:43:8c:70:d2:8c:54:e3:8e:8d:30:32:be:70:c6:87:
6d:5f:4b:1b:a2:11:97:a5:50:bc:a5:6b:11:15:88:2c:37:c1:
38:fa:32:a4:00:14:b8:98:69:c3:77:87:bd:a3:5f:82:50:e3:
e0:38:f2:d6:1c:ae:0d:8a:5c:ea:0e:aa:a2:cb:ad:a8:4a:e8:
f0:61:ab:db:ef:83:4e:76:b0:a3:d5:75:7a:20:70:d6:06:ab:
38:20:5d:e2:7e:6f:fb:f8:67:6c:ac:b2:3b:92:71:02:b2:d3:
02:5c:b7:e4:c2:19:2d:f0:ea:24:ac:40:19:48:6f:3c:4c:03:
64:52:5a:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdP8ai4tF1XlDNPFE5YXrcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwNDA1MDU0NDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDkxNjBkYWNkMzczZDUwNDk2ZmE3ZmNkYmY0NzM0Y2Q5YzBkYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru8tlwbeEu5S+LKmnoeVw4fdOsxI
XLVnTrRvxxPZm4vWEyJM/XGq6GSemh6rp+aY98YBH5nUYg3/JZfSH1tmq1MFlFwt
XVKar/nMGk0Iah7fd1hKw7Bh8uYB8b200uI2gQRGyhla8A7PTkoCWIlO1oQGacOA
++pBuP7LX3XpMY2DwSVm/+k864SSKh9z0qXq+WfYyqbo0E9vYxF3hH2hjBh7V3IR
Kvj1JN5BTpIHux5BqDSu8GKRKMMHwBfWsIP1VeciI+FKfIjQ5SW5sguk7NHA7fTJ
i1gjmoZVFqZ8unRHdOfmfP09VThS9QK3OqaKNTTlyVRI7485nxgESzIz9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSRYNrNNz1QSW+n/Nv0c0zZwNocMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvZEpGZzJzMDNQVkJKYjZmODJfUnpUTm5BMmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDV/YQMA0G
CSqGSIb3DQEBCwUAA4IBAQAtSp2z5B/A7Nk1zEKi7utjDQwsMGaE7eKl+Mhj7Mgt
hC5iSP1mYBauXRRzaknMVO3g5yaNugTXQr2QnhxxzJAaublneP0ZK+/4v/wV702U
85su41lknafIMdhufEmWlxc+JSBvJGqWZc63U559uYahRUqYM3xZDm5eTooYczeK
f0xDjHDSjFTjjo0wMr5wxodtX0sbohGXpVC8pWsRFYgsN8E4+jKkABS4mGnDd4e9
o1+CUOPgOPLWHK4NilzqDqqiy62oSujwYavb74NOdrCj1XV6IHDWBqs4IF3ifm/7
+GdsrLI7knECstMCXLfkwhkt8OokrEAZSG88TANkUlpM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:28 2024 by rpki-client on console-ams.rpki-client.org