Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/j-0XcafMgVEgdhVi1uTatc3Qd9E.roa
File: j-0XcafMgVEgdhVi1uTatc3Qd9E.roa (raw, json)
Hash identifier: QbICMBxqQS7hGbY9t6VOVVVT0paQbxVZud1TjQCBtjU=
Subject key identifier: 8F:ED:17:71:A7:CC:81:51:20:76:15:62:D6:E4:DA:B5:CD:D0:77:D1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 0186BC3E3CB65F4E6A48FE1812D1233D9EEC
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/j-0XcafMgVEgdhVi1uTatc3Qd9E.roa
Signing time: Tue 07 Mar 2023 13:24:00 +0000
ROA not before: Tue 07 Mar 2023 13:24:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50716
IP address blocks: 87.76.0.0/20 maxlen: 22
109.197.192.0/21 maxlen: 22
176.116.136.0/21 maxlen: 22
91.239.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:3e:3c:b6:5f:4e:6a:48:fe:18:12:d1:23:3d:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Mar 7 13:24:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fed1771a7cc815120761562d6e4dab5cdd077d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:f8:5f:70:b3:7e:7e:73:92:c9:ea:03:1f:
83:36:7e:c7:1a:0c:66:8c:2f:12:4a:65:47:44:53:
fa:67:e4:41:67:f7:d4:37:08:b9:86:59:dd:4a:ef:
33:1a:a0:48:9e:18:e9:d8:4f:3d:08:2a:7e:4e:b4:
c6:65:f9:eb:ec:af:75:55:c3:e1:da:98:d7:ee:4b:
39:a6:88:df:13:9f:b7:d8:20:84:0b:cc:65:e3:e0:
f1:68:7c:5f:90:db:b0:e5:c0:69:b5:a6:7c:06:91:
10:92:09:94:65:82:e0:ca:94:2d:d3:91:32:7e:fd:
53:eb:54:1a:a3:82:89:c6:92:89:45:b0:d4:87:81:
78:0a:48:65:91:51:23:ba:70:b9:ef:8b:b7:0e:0b:
70:48:cc:0f:fb:06:4e:aa:64:e0:9c:b3:e3:ed:67:
4e:64:92:dc:17:b5:30:4a:9b:82:ef:31:f7:89:49:
0f:69:52:be:b0:3e:d8:5f:e3:a4:9e:68:ac:7c:ed:
90:8a:41:46:9d:a4:e5:71:c5:7f:f7:f9:3e:9a:d6:
56:31:89:0c:05:75:cf:df:00:8d:53:d3:5a:85:9f:
57:63:f6:ae:64:5a:65:3b:52:7a:a3:59:0d:64:2d:
fe:83:39:db:72:8f:79:c4:2e:bf:93:33:52:aa:99:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:17:71:A7:CC:81:51:20:76:15:62:D6:E4:DA:B5:CD:D0:77:D1
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/j-0XcafMgVEgdhVi1uTatc3Qd9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.0.0/20
91.239.16.0/22
109.197.192.0/21
176.116.136.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:78:bb:f0:3f:63:3d:7c:4e:a7:6c:68:5b:d4:63:36:7f:85:
98:32:ea:95:1f:22:19:85:43:3b:4b:2f:3a:ce:fa:a4:3e:b3:
17:95:31:ed:34:7e:d4:41:6c:c5:37:ef:79:46:14:d6:25:87:
47:7c:06:97:d4:95:35:c2:c0:21:c5:e0:f7:5f:dc:ee:3f:f0:
21:36:06:5a:49:6f:ed:be:7f:f2:54:08:c9:48:ae:75:34:70:
3a:f5:06:55:ca:06:1c:8e:55:c7:01:96:ee:6a:39:06:43:70:
ca:b6:d1:fd:25:fe:26:d3:31:52:5e:e7:b0:29:82:45:1f:99:
0c:38:7e:56:c6:67:97:54:86:f3:bc:aa:41:3e:bb:4a:26:b8:
c1:96:93:13:ef:84:71:a9:71:9c:a5:95:5c:19:49:a0:6d:7c:
81:f7:a1:4e:64:79:72:b8:8e:e1:65:2b:81:e5:8c:4d:d2:ba:
a8:fc:54:14:29:de:fc:f1:b8:90:a3:d6:e0:e8:dd:5d:13:b6:
7a:cf:9c:6a:fc:db:ee:82:a9:de:17:71:3d:22:68:ad:38:bd:
de:f5:5d:69:09:e0:ad:a0:58:bd:27:27:a8:cf:6a:47:91:91:
6c:7f:ce:57:b0:69:b8:77:bb:6f:ca:82:d1:2e:cd:0c:5d:cc:
db:d3:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:10 2024 by rpki-client on console-fra.rpki-client.org