Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dQb73BKao_-1N0TbiykqIpq9BgY.roa
File: dQb73BKao_-1N0TbiykqIpq9BgY.roa (raw, json)
Hash identifier: jXmYbDliORs+Je0GNvdobLztDAhTx+bUab9McN/tsR8=
Subject key identifier: 75:06:FB:DC:12:9A:A3:FF:B5:37:44:DB:8B:29:2A:22:9A:BD:06:06
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0191935F79286EECD9C82D3D0AE189ABBA0D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dQb73BKao_-1N0TbiykqIpq9BgY.roa
Signing time: Tue 27 Aug 2024 10:26:33 +0000
ROA not before: Tue 27 Aug 2024 10:26:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35389
IP address blocks: 87.236.40.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:5f:79:28:6e:ec:d9:c8:2d:3d:0a:e1:89:ab:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 10:26:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7506fbdc129aa3ffb53744db8b292a229abd0606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:8c:75:93:ca:64:a9:b1:ac:85:59:ec:77:
4e:eb:57:69:49:db:b2:c6:e7:54:0b:53:c0:5d:86:
9c:c2:4c:1c:3c:17:84:71:c8:6e:77:39:16:7e:04:
85:ef:04:bb:f0:a2:c6:d0:28:77:a3:1a:76:2e:40:
67:b7:0d:bf:00:78:bd:1d:c2:fe:7f:2c:a2:44:25:
6a:c0:a0:f2:60:c9:cc:ca:fe:5c:f8:9b:54:82:36:
99:a8:cf:c3:6b:5b:27:c6:fb:17:cf:06:a7:5a:0a:
42:de:8c:c3:ab:f1:13:bc:cd:92:20:10:0a:f1:4e:
40:e0:88:b8:6a:a0:ed:3b:e4:9e:de:16:01:90:6d:
40:e0:99:f9:3e:51:d9:19:8d:d7:3a:9d:16:7f:5c:
05:18:14:05:1f:66:1b:bf:d6:3e:05:c3:80:5a:0a:
14:0f:d0:d9:fc:26:e9:8a:34:ea:a1:3d:fb:39:ba:
78:28:de:b2:0a:1b:d3:91:28:e4:8e:70:eb:5f:84:
9d:6c:e9:69:3c:b6:d1:d7:06:2e:76:1d:a9:21:e5:
d8:6a:49:b6:7c:9c:8b:11:9b:ae:56:6e:77:f4:28:
30:ba:cd:6c:c1:27:99:f2:2e:0d:88:aa:38:04:57:
1b:a8:1b:30:db:83:c4:46:bc:53:a8:83:2b:c2:ce:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:06:FB:DC:12:9A:A3:FF:B5:37:44:DB:8B:29:2A:22:9A:BD:06:06
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dQb73BKao_-1N0TbiykqIpq9BgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.40.0/21
Signature Algorithm: sha256WithRSAEncryption
97:26:94:6e:41:a8:38:59:fa:ce:d5:37:c2:59:0a:5d:aa:c4:
d5:2f:be:e4:63:c5:c1:9c:84:38:b3:3a:b1:4a:04:00:18:ff:
ad:f3:6a:47:44:9f:56:89:45:06:2b:bb:dc:e6:70:bb:df:7c:
79:7a:25:76:73:89:15:43:1d:03:78:4f:3a:bb:8f:28:9b:2c:
00:c7:da:c1:99:e5:b7:e7:4c:9b:f6:57:fe:4e:d0:17:17:0e:
d6:c5:4d:3a:48:5f:5a:95:69:b4:06:a9:b9:13:a3:2f:cb:84:
fe:e1:f4:0c:b8:52:d6:6d:1f:8d:76:21:1d:d0:47:75:7b:ec:
cc:5d:ba:8c:09:ec:48:d9:21:d8:43:1f:bc:74:6d:c2:ec:06:
2b:1c:03:9e:2c:f9:9f:09:48:d0:c4:b2:aa:41:4e:7c:5b:f3:
c9:00:38:94:ef:10:49:8e:d0:5c:05:7a:b4:d4:eb:95:eb:f7:
b5:9f:51:c6:18:47:5b:ac:da:cf:cb:36:20:03:cc:b3:ee:af:
38:5e:fb:f3:4d:35:ce:19:be:05:fa:be:9a:2b:81:1a:29:a9:
98:0c:76:3b:51:1c:c1:ca:81:41:ce:9f:f7:40:de:81:8f:eb:
76:92:ab:61:1b:bb:96:17:3c:9c:fa:47:70:b1:c1:71:62:c2:
9e:bb:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:11 2025 by rpki-client