Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/O4JheDlVoDxrDT-XeCwc2PLCWjY.roa
File: O4JheDlVoDxrDT-XeCwc2PLCWjY.roa (raw, json)
Hash identifier: URm+IR5KYLtxo4ptOGHT3xwRjKwvXJ9oz3dARtlFOe8=
Subject key identifier: 3B:82:61:78:39:55:A0:3C:6B:0D:3F:97:78:2C:1C:D8:F2:C2:5A:36
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018B5F61F18F036DA58CE7BA2A377982C6A2
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/O4JheDlVoDxrDT-XeCwc2PLCWjY.roa
Signing time: Tue 24 Oct 2023 01:52:16 +0000
ROA not before: Tue 24 Oct 2023 01:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47436
IP address blocks: 87.251.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:61:f1:8f:03:6d:a5:8c:e7:ba:2a:37:79:82:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 24 01:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b8261783955a03c6b0d3f97782c1cd8f2c25a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:8d:58:55:27:bf:e4:0a:52:20:e6:2a:e3:
fa:d8:ef:ff:80:94:66:c2:6d:ec:be:51:c8:91:63:
99:dc:fc:97:8a:fd:9e:3f:f9:d0:7e:dc:62:02:38:
d5:94:08:5a:5a:57:b7:fb:fc:63:09:bb:80:8a:63:
6a:40:00:c6:1a:f2:33:a0:3a:ec:93:45:a7:c7:4f:
d6:2b:a3:61:9d:03:47:1f:33:db:7d:46:ef:f1:97:
01:82:05:68:ad:ff:65:8f:86:4d:a8:f4:f0:a1:f2:
1b:9a:d5:01:b3:6e:2d:b1:6b:be:75:f7:e5:7c:12:
13:70:b0:8a:ed:68:4e:4d:40:83:bd:0d:c7:b6:80:
ef:31:59:b1:10:c7:c5:7b:40:cc:f4:5b:1b:1f:82:
00:ed:21:1d:fd:80:9a:c7:06:67:f7:97:d9:0d:34:
92:d7:25:61:8f:48:2c:8b:d0:f3:f0:e5:ef:7c:9d:
2b:c5:9a:13:17:e5:7e:c6:f1:c6:08:c9:a4:41:fe:
1d:9c:12:ac:69:72:34:4c:95:ff:3f:b5:18:8b:2a:
06:af:0c:64:31:9c:34:4c:b4:fe:a3:23:af:db:46:
71:f0:2c:0e:e8:4a:75:89:a4:08:fd:c8:23:12:c2:
d9:35:12:74:94:12:39:42:e4:7d:55:24:a6:dc:65:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:61:78:39:55:A0:3C:6B:0D:3F:97:78:2C:1C:D8:F2:C2:5A:36
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/O4JheDlVoDxrDT-XeCwc2PLCWjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c6:44:04:2d:e4:ef:93:14:4c:a6:49:6a:8b:43:9c:ce:7c:
5f:8b:d9:54:49:79:54:0c:0f:74:f4:5e:88:33:51:98:b7:cc:
98:cb:a8:e8:cf:c7:12:ff:66:5b:a8:5f:61:b1:0b:97:66:32:
77:37:cf:24:cd:bb:89:91:d6:80:da:c5:d5:aa:a8:46:58:c4:
b7:d0:9f:48:e7:3c:2f:40:c3:6d:2a:c8:1d:d0:29:f8:ce:40:
74:ce:bd:2b:63:5a:34:eb:99:e5:0a:2c:7f:55:db:1d:81:49:
e1:a2:f1:65:26:d5:37:cd:9f:80:78:54:89:2e:e1:4a:ad:b5:
49:b5:e4:54:0c:b9:97:da:48:e2:ad:c3:5c:a1:ed:18:f5:17:
e3:cc:9c:30:62:38:58:87:d0:cb:90:4c:0b:9e:1a:6c:e7:27:
b4:60:55:78:e8:ef:d5:60:8a:b6:0d:ac:cf:6d:0a:cd:ee:68:
3d:22:bb:80:fd:52:cb:1e:06:aa:8c:9e:74:b2:fe:e4:d6:29:
9b:92:cd:c3:61:69:c5:fd:e0:91:a7:ab:d3:4f:f8:a2:e0:e8:
d5:71:36:50:07:f1:72:77:56:c1:fd:cb:c3:f3:77:45:45:36:
f5:4e:a2:11:55:cf:c3:62:d2:33:8a:62:b9:d2:26:49:71:69:
85:e1:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:27 2024 by rpki-client on console.sobornost.net