Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/9rN7sptV1Zirjzrv7vjULxLUTnU.roa
File: 9rN7sptV1Zirjzrv7vjULxLUTnU.roa (raw, json)
Hash identifier: x5HQ3aGRemCksCGK4Q5bfcRk4KkDWvLx2kjTIbAMUWI=
Subject key identifier: F6:B3:7B:B2:9B:55:D5:98:AB:8F:3A:EF:EE:F8:D4:2F:12:D4:4E:75
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018CC9BA73EA9A6900D6C84287ECE89578EB
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/9rN7sptV1Zirjzrv7vjULxLUTnU.roa
Signing time: Tue 02 Jan 2024 10:31:28 +0000
ROA not before: Tue 02 Jan 2024 10:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 87.251.16.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 23:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:73:ea:9a:69:00:d6:c8:42:87:ec:e8:95:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 10:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b37bb29b55d598ab8f3aefeef8d42f12d44e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:2a:50:aa:2b:f3:8b:d7:32:62:0d:31:57:
a9:84:fb:80:e3:25:3a:63:f2:0d:3e:d6:7c:d9:77:
70:a6:1c:34:f9:55:02:fc:65:36:a5:df:74:25:cc:
2a:93:9e:64:25:75:f5:ba:44:ec:21:b4:08:14:d8:
cb:ac:73:6c:c2:9e:d9:29:63:6b:c9:5f:a4:78:b9:
6b:24:96:57:75:cb:1a:42:98:59:b4:f6:1e:4e:a6:
6f:e8:ab:53:d1:20:a1:f7:ac:7a:d6:7f:73:ff:40:
01:e3:b6:5b:01:ba:4b:72:87:d6:08:6e:91:54:05:
20:91:b4:cd:92:38:d9:6b:d8:59:4d:70:fe:f2:77:
aa:f0:fe:ca:b9:06:ee:df:46:ee:a5:f8:dd:f1:f0:
a5:2b:55:bd:17:43:2b:5c:7a:70:3b:a3:a8:69:ab:
1e:57:4c:d1:f3:7c:19:1b:67:4d:02:af:cf:16:07:
7d:a5:88:69:4a:5e:da:a4:fc:1f:cf:ea:58:9d:d7:
83:2f:9b:ac:08:d7:23:df:c9:19:cf:c6:f0:7b:72:
a1:bf:5a:3a:c1:d7:75:01:75:40:36:8f:88:b9:33:
33:10:1c:28:e8:07:be:ea:36:f9:e0:89:ee:eb:40:
b7:c0:18:6e:b3:8c:2b:bb:38:aa:b2:0b:e6:3f:67:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:7B:B2:9B:55:D5:98:AB:8F:3A:EF:EE:F8:D4:2F:12:D4:4E:75
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/9rN7sptV1Zirjzrv7vjULxLUTnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.16.0/24
87.251.18.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e4:2b:5e:cf:77:35:0f:a6:d5:07:ff:f5:df:69:82:97:83:
32:cb:e4:a9:fa:c4:e7:bd:9b:c8:6b:49:10:28:98:36:1c:fa:
62:ee:0a:96:83:d4:dd:7a:c6:ac:0f:ee:4d:86:5e:c4:69:c8:
27:a0:e6:f5:51:bb:27:57:0c:05:26:3a:4e:df:f8:a7:63:8c:
03:32:6f:44:a6:24:65:1d:9b:37:b3:6a:ce:cd:dc:53:e0:f8:
9d:96:35:b4:e4:12:9f:64:42:79:89:d1:4d:af:e9:02:59:e6:
89:0c:21:51:3d:9e:b0:21:55:c1:01:24:77:21:5a:e9:01:82:
12:1a:38:8d:a6:25:17:69:84:10:db:1c:df:8b:15:cf:bf:e2:
06:a3:62:f7:c1:e5:8d:b1:23:f1:d8:85:b4:93:2c:1b:50:0a:
dc:69:b3:3a:31:27:4a:75:aa:e9:8f:9b:9b:0d:8a:17:65:0a:
b2:a5:75:b4:8a:bb:79:28:eb:1c:3f:4e:02:a7:f3:e6:f4:27:
be:cc:1e:d1:8c:cd:8e:ae:ef:51:80:21:fa:c0:9e:04:10:4f:
14:a4:45:9c:ad:09:87:83:16:e0:a0:0a:37:5f:d0:cf:58:b7:
7a:b1:26:a7:82:9f:ae:b9:0d:53:38:46:a6:c1:a3:f9:56:e9:
28:ed:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:22:34 2024 by rpki-client on console.sobornost.net