Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/E44GCI8om847O24F1A1sYPCOwcU.roa
File: E44GCI8om847O24F1A1sYPCOwcU.roa (raw, json)
Hash identifier: 6JiqLT/CUi7lAo7BpBMtOMbhZfRhfvb84qSKay5hlwI=
Subject key identifier: 13:8E:06:08:8F:28:9B:CE:3B:3B:6E:05:D4:0D:6C:60:F0:8E:C1:C5
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018CC9BA7253DB6928A94BA62D095FE98491
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/E44GCI8om847O24F1A1sYPCOwcU.roa
Signing time: Tue 02 Jan 2024 10:31:28 +0000
ROA not before: Tue 02 Jan 2024 10:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 87.251.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 07:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:72:53:db:69:28:a9:4b:a6:2d:09:5f:e9:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 10:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=138e06088f289bce3b3b6e05d40d6c60f08ec1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:e9:0f:bc:27:2e:55:26:3f:65:e6:87:31:
05:33:40:d2:be:d6:93:03:31:8a:21:07:1c:01:52:
b4:ce:38:72:60:a8:24:9f:9d:61:ae:ea:47:c6:2d:
3f:57:a8:10:5d:71:b7:37:1d:d9:ae:19:49:15:77:
14:c2:56:d4:ee:7b:e7:e7:84:2d:b2:68:7a:06:db:
2e:12:9f:fb:ad:cb:23:24:4d:58:bf:d7:a5:ec:51:
b2:48:d6:d3:9d:97:0c:1a:c3:89:5b:8d:49:81:d6:
51:92:58:ec:10:0e:d9:47:1f:7f:a9:5e:f6:88:3b:
dc:55:9f:2d:e8:e7:77:da:6d:ce:8f:de:82:dc:69:
d5:95:e8:de:39:91:47:ce:65:bf:21:f3:c1:67:4c:
bb:c1:0f:eb:26:58:dc:9f:3f:f0:d8:ac:31:1b:70:
95:cc:4f:03:a8:f4:ac:3b:b6:e1:89:0c:96:cf:ad:
b8:70:f5:c6:38:45:dd:14:9c:63:4a:45:ee:f9:a2:
9c:21:a9:d6:29:94:7e:ed:0a:e5:c8:52:11:8e:37:
3c:c4:84:a3:43:14:30:15:34:65:ad:6a:e1:59:f7:
c5:33:20:31:e9:bb:c0:65:9b:fb:61:e8:35:87:74:
dc:4f:ab:ff:77:21:2d:cf:1e:2b:61:3b:98:1e:72:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:06:08:8F:28:9B:CE:3B:3B:6E:05:D4:0D:6C:60:F0:8E:C1:C5
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/E44GCI8om847O24F1A1sYPCOwcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0d:99:2f:37:6d:c7:b9:46:e1:17:7f:ae:6f:66:5d:2d:d0:
f8:33:ed:94:0f:c8:0c:00:73:b2:55:4d:e8:5d:30:94:82:16:
37:a9:d3:27:8d:d9:1a:40:98:32:87:95:2d:cc:9e:76:7d:db:
62:54:7b:d0:18:4c:ee:af:fd:78:92:ab:53:94:2b:f7:b7:32:
ed:0d:9f:96:31:ee:f5:4a:1c:ab:71:e3:c6:0c:2f:3e:d3:87:
17:89:2d:4d:b3:13:18:9a:47:ef:3c:56:89:ca:0b:0a:59:9e:
98:0a:9d:c5:ec:37:97:51:2a:b1:66:2e:2a:bf:bd:0d:65:6d:
8f:87:04:e1:2b:32:cf:ce:65:e6:8f:c1:1b:5d:cb:1a:ce:5e:
74:03:e6:19:e9:77:e4:a5:e0:43:52:62:58:e4:ee:05:11:24:
36:6c:34:7b:d9:b7:7f:83:6e:af:f5:39:99:17:fd:bf:57:f8:
f2:66:42:c2:e2:1c:c9:41:61:4e:04:b7:4b:14:f1:f0:88:42:
52:70:09:d9:7f:f3:48:85:09:72:98:99:e3:22:e4:e7:70:11:
ce:e5:b9:4e:77:87:83:7f:61:c5:41:8a:99:d0:c0:2a:b1:d7:
33:27:49:f7:fc:5b:b9:89:33:0e:80:d0:79:e7:2d:cc:75:7c:
e5:d1:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 13:24:35 2024 by rpki-client on console.sobornost.net