Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/zUQ-RAMv8V_b_K0g43aS6kvCKhA.roa
File: zUQ-RAMv8V_b_K0g43aS6kvCKhA.roa (raw, json)
Hash identifier: 96hRo/kmMvZXPX8/mzq36y9Y1GCVvVyrCHBu7pyjzhI=
Subject key identifier: CD:44:3E:44:03:2F:F1:5F:DB:FC:AD:20:E3:76:92:EA:4B:C2:2A:10
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018673A1A13AC100476C3FB6C51E4094EE01
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/zUQ-RAMv8V_b_K0g43aS6kvCKhA.roa
Signing time: Tue 21 Feb 2023 11:00:17 +0000
ROA not before: Tue 21 Feb 2023 11:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200024
IP address blocks: 87.246.25.0/24 maxlen: 24
87.246.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 11:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:a1:a1:3a:c1:00:47:6c:3f:b6:c5:1e:40:94:ee:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Feb 21 11:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd443e44032ff15fdbfcad20e37692ea4bc22a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:fa:66:a1:1a:25:39:27:04:a8:b4:8d:62:
14:fa:11:0b:80:83:31:50:65:ac:1b:de:73:1b:20:
ad:8b:0e:36:6b:fc:e7:dc:8a:13:03:e8:5e:94:60:
ce:62:93:d5:5c:9a:bc:e2:ac:4e:e9:cf:a6:86:7c:
e3:3f:78:be:bb:2e:c4:46:86:f8:72:71:06:50:c5:
6f:c3:e1:ac:bd:55:bd:21:c4:c6:7c:ec:f4:d5:3f:
d1:86:d7:97:77:ae:e4:30:40:05:b2:fb:4b:e0:82:
a2:3a:f6:99:80:ca:bf:cc:4d:1a:d5:94:39:34:27:
ad:fc:ad:68:60:06:0b:9c:47:45:f7:ed:28:01:f4:
f7:5c:f3:68:f3:34:9f:98:81:23:2b:29:60:cb:7c:
b5:2f:e5:bb:be:c6:d2:70:f2:7e:92:20:6f:50:94:
1f:12:a3:d7:7b:c3:39:33:47:db:d0:f3:26:7b:8c:
ed:c3:d2:b7:7b:4b:d0:8b:d8:31:c5:7a:33:6c:57:
e9:21:c3:0a:0c:2a:6b:1c:eb:64:11:e3:46:5a:2c:
4a:25:d8:79:ac:3c:19:bc:3d:5a:21:22:fe:99:b3:
a2:f8:f9:24:df:f9:c6:19:7c:7f:97:cc:9b:87:f4:
6b:a6:d7:8c:7d:89:7f:84:83:79:b2:db:1e:cd:e0:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:3E:44:03:2F:F1:5F:DB:FC:AD:20:E3:76:92:EA:4B:C2:2A:10
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/zUQ-RAMv8V_b_K0g43aS6kvCKhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.25.0-87.246.26.255
Signature Algorithm: sha256WithRSAEncryption
5e:75:d4:95:86:a0:d0:1e:8a:09:3a:c3:73:b8:f9:b5:9f:53:
bf:84:c4:cf:b4:ff:79:75:56:e5:7e:30:f5:a6:c2:9c:15:ad:
6c:b0:80:11:b8:d3:04:3e:9e:b1:32:1f:10:37:12:9e:25:8b:
e0:6d:cb:02:83:c9:5f:50:12:50:96:ab:41:76:a3:62:73:6e:
4e:31:68:9b:87:3c:a8:5c:b9:86:ef:d6:57:85:ea:f1:9b:82:
2f:88:b0:42:c5:7a:e2:38:bd:fa:eb:08:24:1a:35:27:f1:12:
ac:a3:c0:1d:cd:29:d9:0f:06:e8:a5:b7:fe:ba:65:31:75:a0:
58:68:42:12:0e:0d:ab:e1:9f:cd:b8:cf:15:d4:f1:89:25:f3:
d8:ef:72:f3:85:6a:66:73:2e:12:2f:17:e0:f4:ec:c6:e8:98:
e9:7d:c9:8c:ff:8d:89:30:6d:47:8c:73:ec:48:86:46:dd:5f:
2f:84:d0:b2:ef:79:bd:f9:c1:a0:ba:1b:a4:1e:93:5f:5c:3c:
54:b9:81:5b:31:9e:f5:a0:0c:67:f5:1b:29:6d:10:4a:ad:9d:
60:19:e0:fc:81:a3:19:ce:19:ba:e8:8f:7d:cf:8a:93:b4:fb:
31:94:97:3d:c3:d8:03:a1:2b:fc:cd:0e:86:fd:c2:8f:b5:bd:
38:91:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org