Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/4cjNC2WzKX_fMzSs4c4sA_Yv2t0.roa
File: 4cjNC2WzKX_fMzSs4c4sA_Yv2t0.roa (raw, json)
Hash identifier: kBnrWSAbHkOOTFcXz4nuVYAhAmaAYqF8cNbuPEHETr0=
Subject key identifier: E1:C8:CD:0B:65:B3:29:7F:DF:33:34:AC:E1:CE:2C:03:F6:2F:DA:DD
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018CC9BA7303D55BA2D0EAE446924A535F1B
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/4cjNC2WzKX_fMzSs4c4sA_Yv2t0.roa
Signing time: Tue 02 Jan 2024 10:31:28 +0000
ROA not before: Tue 02 Jan 2024 10:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 87.251.0.0/20 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 23:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:73:03:d5:5b:a2:d0:ea:e4:46:92:4a:53:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 10:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1c8cd0b65b3297fdf3334ace1ce2c03f62fdadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:54:af:66:58:d2:a1:91:79:d8:eb:02:b4:
8f:fe:75:a1:6c:c6:52:92:ab:02:ab:b1:2d:cd:7f:
10:d8:7d:32:f6:ea:69:c2:21:a9:a8:56:57:ad:06:
84:07:97:05:c1:75:c9:51:c7:84:a7:11:97:ac:11:
84:93:a6:32:27:d1:f4:44:91:33:05:c8:9b:6c:d4:
a3:46:8e:d6:8e:ae:04:ff:5f:39:69:5d:da:6d:36:
a6:47:4f:9d:b2:8d:58:3f:38:5e:93:22:41:39:04:
90:b3:d0:19:50:be:5a:0e:a7:7b:eb:1a:08:72:6f:
39:7b:05:f8:fe:ba:9b:18:ea:d1:16:04:0e:6a:3a:
12:78:14:31:d6:43:b5:ac:31:12:83:9a:04:d2:97:
ee:79:ed:32:17:b4:4c:38:a7:84:9b:c0:8c:cf:fd:
50:08:01:95:b9:c9:f6:d6:3e:42:da:9e:25:9f:5a:
59:13:b8:a4:cc:c9:9d:0c:0b:62:8c:a4:43:48:ca:
08:50:a5:02:f2:a7:99:e6:42:6e:3b:d1:d0:b0:6e:
bb:7d:ab:19:da:94:49:96:18:fd:2f:1f:af:ba:70:
92:a0:ed:7c:9a:da:06:74:f5:64:f0:78:95:de:a7:
fd:1c:6d:6a:1d:f5:44:ea:66:df:27:9f:bd:ea:a9:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:CD:0B:65:B3:29:7F:DF:33:34:AC:E1:CE:2C:03:F6:2F:DA:DD
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/4cjNC2WzKX_fMzSs4c4sA_Yv2t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0-87.251.16.255
87.251.18.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5d:ab:93:07:b6:13:90:83:bb:52:d6:c1:f5:87:56:91:f1:
0d:09:1e:02:37:93:98:8c:12:9e:73:96:37:04:8f:c0:c4:3d:
9d:16:b7:3f:50:34:d2:8c:ee:e7:95:42:d1:b0:7c:fa:70:a0:
95:bf:af:de:c7:cb:0a:e4:6d:2f:3e:16:a4:19:a5:0e:9c:f8:
5e:95:6a:e4:a8:df:80:97:5b:dc:b5:01:39:29:ef:cf:0d:9d:
e6:42:55:78:ad:47:9f:4f:3a:56:12:30:8f:a0:08:58:2d:4e:
5f:f9:f8:91:89:96:86:7f:25:bb:d0:96:bf:d3:62:18:d9:0c:
1b:03:a7:cb:d2:2b:2a:0e:89:66:c2:88:db:dc:10:7b:2c:97:
9b:6f:de:e8:aa:8c:2c:5a:2b:42:86:87:81:d6:6f:65:a1:06:
e4:ac:19:46:58:66:af:2b:07:71:52:c6:84:96:4a:06:07:ad:
bb:6f:17:af:5c:1f:77:63:e1:21:d8:0c:3f:2d:60:62:1f:e6:
9d:c1:80:e3:39:5a:a6:38:86:e6:a8:cd:b4:14:f2:11:94:22:
bf:c7:1a:c6:50:e0:eb:a5:01:d7:54:98:75:ef:1a:4b:f8:18:
d6:c7:5c:42:23:72:d3:9b:7e:3a:c6:19:7c:b7:26:bc:79:df:
f4:1d:1e:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 27 04:22:34 2024 by rpki-client on console.sobornost.net