Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/H81ykE4rZvs3yQZybcKrKzmkgTg.roa
File: H81ykE4rZvs3yQZybcKrKzmkgTg.roa (raw, json)
Hash identifier: riJNLvZWrPbQYcflbjLgRDGEzk+V2d4UG376D953h04=
Subject key identifier: 1F:CD:72:90:4E:2B:66:FB:37:C9:06:72:6D:C2:AB:2B:39:A4:81:38
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018B642481CC77C1B05822D66A0B996408D8
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/H81ykE4rZvs3yQZybcKrKzmkgTg.roa
Signing time: Wed 25 Oct 2023 00:03:15 +0000
ROA not before: Wed 25 Oct 2023 00:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.251.2.0/24 maxlen: 24
87.251.7.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:64:24:81:cc:77:c1:b0:58:22:d6:6a:0b:99:64:08:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 25 00:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fcd72904e2b66fb37c906726dc2ab2b39a48138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:a3:62:33:44:9a:b7:14:6f:62:ab:cb:26:
71:8d:7e:30:49:5a:ac:b3:ff:68:05:76:a4:2a:f6:
db:19:07:4c:12:10:f4:0b:92:ce:b1:50:03:51:c9:
d9:ae:83:14:da:83:d3:8b:38:ea:c6:a0:3b:e8:79:
64:5a:06:0b:f8:c4:5f:a2:3c:ef:9f:ae:c6:37:11:
ee:f0:8c:f4:c3:e2:24:38:3b:a4:da:1e:82:99:4f:
33:4d:1a:a5:dd:79:38:31:d6:5a:e3:ff:96:ad:3b:
b4:7c:5a:2f:7f:f5:c2:49:e6:5e:05:f6:e7:1b:58:
2f:59:20:06:14:80:70:17:61:f7:5b:33:08:53:8d:
01:2e:1c:93:a4:18:4b:e5:82:f2:e2:51:79:f0:06:
6d:e9:c1:2f:89:52:6a:80:d8:26:df:f5:6a:80:91:
a0:4c:1b:87:79:67:88:b2:5b:fe:54:d4:ec:f9:02:
17:e0:f3:cd:c7:cc:ab:f2:a8:05:83:4b:fa:6d:45:
12:3c:f1:f4:e0:4a:90:c3:b7:20:e0:93:5f:6b:2d:
61:cc:39:e2:75:97:71:45:fc:82:cf:13:27:5a:12:
84:b1:b0:e0:aa:bc:44:7a:ab:b3:2f:8d:06:d2:1b:
41:f3:07:7c:4b:ae:05:e2:af:c0:eb:c8:5d:3c:d8:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CD:72:90:4E:2B:66:FB:37:C9:06:72:6D:C2:AB:2B:39:A4:81:38
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/H81ykE4rZvs3yQZybcKrKzmkgTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.2.0/24
87.251.7.0/24
87.251.17.0/24
87.251.20.0/22
Signature Algorithm: sha256WithRSAEncryption
88:54:76:73:f2:d6:17:c3:79:b6:90:34:45:71:8c:6d:36:e8:
50:b3:8e:bc:e4:fd:54:a9:88:76:01:8f:ac:50:b3:a8:fb:26:
11:93:14:e8:52:9a:61:b2:fc:2d:af:9a:a3:f5:bd:32:5e:83:
05:43:44:21:77:e5:aa:e5:64:df:f2:e8:19:fe:80:fa:e0:08:
38:df:6a:3f:db:d5:f9:7f:a9:49:0f:14:53:f7:32:12:2c:cb:
94:ac:13:12:0f:86:d2:a1:2f:6a:3c:1e:19:21:fe:b9:35:41:
55:a4:28:f0:54:2b:7b:e8:3e:62:c9:40:77:b3:34:f4:1f:4b:
54:3f:41:83:75:de:e3:41:ae:25:ca:0f:52:10:b2:13:18:27:
03:dc:13:9c:66:9b:46:cc:d3:af:2d:73:3d:e9:52:e7:5a:aa:
22:98:d9:45:fe:5b:56:61:6f:cc:b1:89:10:83:fa:b1:ff:8e:
cf:ee:19:86:56:be:fa:a3:9d:af:86:17:a2:5d:59:77:5a:42:
22:2d:2c:2b:f7:6b:e1:e1:7b:26:a7:ce:0a:88:6f:03:41:35:
e9:91:fd:ff:ed:12:80:59:e3:0f:d2:76:49:7d:e8:22:d9:58:
b6:c0:11:6b:6b:37:c2:48:86:90:a2:3a:32:8f:40:27:6c:be:
59:63:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net