Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/pFk4NMy_pj-5A0xlacsvjForbXg.roa
File: pFk4NMy_pj-5A0xlacsvjForbXg.roa (raw, json)
Hash identifier: sqaUo3lkoxhJiG488KQpAdAvAJcRojNbzFZ0FvcL74Y=
Subject key identifier: A4:59:38:34:CC:BF:A6:3F:B9:03:4C:65:69:CB:2F:8C:5A:2B:6D:78
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018948C9CAC815CC2CCB6FEC26F3A2C2B58F
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/pFk4NMy_pj-5A0xlacsvjForbXg.roa
Signing time: Wed 12 Jul 2023 06:28:51 +0000
ROA not before: Wed 12 Jul 2023 06:28:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 87.246.16.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:c9:ca:c8:15:cc:2c:cb:6f:ec:26:f3:a2:c2:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 12 06:28:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4593834ccbfa63fb9034c6569cb2f8c5a2b6d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:4d:77:51:4e:2c:4e:25:a0:59:8d:b1:a2:
e4:6e:ae:3c:d4:4f:89:26:59:00:2a:22:62:24:37:
f9:5c:78:52:11:f0:20:21:8d:2b:f2:75:45:25:4e:
25:71:3d:2b:16:49:c3:de:df:80:a2:a4:5e:60:06:
5d:dc:b1:af:0f:dd:10:7f:e2:89:67:f7:e0:ad:c3:
cd:49:ae:be:44:c9:0e:95:d4:1d:2a:02:8b:aa:63:
37:65:0e:27:21:7b:13:76:53:8a:22:b4:15:e4:11:
3f:d7:de:6d:66:4b:7c:42:45:75:5d:42:1d:0f:c6:
19:bc:3e:53:6c:7f:fb:3b:0a:48:27:d2:d1:e3:e9:
eb:e7:e3:41:fa:cb:05:3e:f0:4c:60:b3:e7:81:4b:
f0:ad:c5:44:45:f6:73:41:65:1f:5a:4c:df:75:35:
bd:f9:0b:bc:99:c2:80:c6:11:c6:2f:dd:85:e7:83:
ef:61:11:a5:71:46:b8:6a:89:09:0a:9a:85:65:19:
c2:63:7c:6b:7f:49:81:a1:c5:1e:87:1f:68:4c:c6:
05:60:32:bf:01:7d:dc:22:4b:3d:20:9b:97:3d:21:
04:12:6b:e7:af:2e:d2:70:4d:51:ba:64:c9:ba:c3:
1b:45:80:48:c2:c2:c5:a1:2b:48:5a:90:79:f9:d6:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:38:34:CC:BF:A6:3F:B9:03:4C:65:69:CB:2F:8C:5A:2B:6D:78
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/pFk4NMy_pj-5A0xlacsvjForbXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.16.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:9b:6c:91:67:2a:35:9b:b4:72:42:42:d8:b7:d9:d5:fc:b8:
59:bc:b9:86:78:44:53:e9:3f:a2:4f:e0:b0:95:23:0b:8c:04:
a8:91:cf:86:cf:d4:05:de:55:f4:47:1a:55:c6:be:02:a5:e4:
31:c7:f7:b2:4d:30:70:8f:1d:95:55:d6:6b:93:39:e4:75:53:
a2:07:15:12:23:0c:38:67:6a:be:04:33:29:92:1f:70:05:ee:
5d:1c:b2:7a:e9:8b:a5:12:5d:5f:56:11:3b:3c:3e:63:57:09:
36:fa:bb:4a:9d:5d:e4:5a:58:4d:15:ec:d4:b3:c7:7a:1f:b3:
cb:9d:db:45:de:aa:b6:c3:1b:66:4c:f0:1a:13:a8:6d:ed:4f:
8b:12:75:10:a1:44:c3:e2:87:b3:6f:88:4f:d9:40:e0:5c:9e:
35:cd:82:b0:a0:97:a4:22:1a:a2:bd:f2:58:96:16:8e:62:1c:
1f:75:71:be:2e:00:aa:3a:27:25:70:ef:90:7f:f8:8d:c7:fc:
3d:bc:07:93:45:cf:d5:4a:1a:ed:4e:35:8d:17:2b:c8:ed:66:
22:93:22:5d:5d:ca:28:33:6d:06:64:08:7b:46:e2:23:99:64:
cc:49:3c:3b:dd:ea:71:01:84:67:1f:14:af:6f:3d:b3:e8:e3:
1c:22:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:42 2024 by rpki-client on console-fra.rpki-client.org