Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/i6iuU_pjjv_FepkgLh3rfCv_7nc.roa
File: i6iuU_pjjv_FepkgLh3rfCv_7nc.roa (raw, json)
Hash identifier: L7/G7F9SQAa1EU+uKNLxFMqDaymDyluDbtfILpgHwOo=
Subject key identifier: 8B:A8:AE:53:FA:63:8E:FF:C5:7A:99:20:2E:1D:EB:7C:2B:FF:EE:77
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0189666575314B8AD2FE451D4D984EFC8408
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/i6iuU_pjjv_FepkgLh3rfCv_7nc.roa
Signing time: Tue 18 Jul 2023 00:27:52 +0000
ROA not before: Tue 18 Jul 2023 00:27:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 87.251.17.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:66:65:75:31:4b:8a:d2:fe:45:1d:4d:98:4e:fc:84:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jul 18 00:27:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba8ae53fa638effc57a99202e1deb7c2bffee77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:a9:83:34:0a:21:ce:c3:4b:3e:00:95:f8:
e9:fb:36:36:9d:1b:89:ed:fa:78:8d:75:a2:90:4b:
bc:ce:89:d8:42:81:d8:26:9c:1a:8a:56:16:9f:14:
0b:2b:b1:66:19:34:3e:b0:18:18:45:eb:34:94:69:
c4:c3:20:65:75:d1:3c:af:7e:0f:20:49:ff:65:d8:
c0:45:6b:8f:38:d8:5a:b4:0f:1d:dc:ec:0b:1e:23:
98:87:dd:63:36:eb:6f:80:90:20:83:c8:35:1b:4f:
ac:9d:4a:2b:04:e1:ad:cf:db:58:c1:86:dd:79:73:
8f:59:ac:d2:28:05:db:6f:5b:7c:63:c7:2c:e0:33:
2a:db:c8:d1:0e:6d:d0:f4:83:1b:f1:27:9f:e1:e6:
27:c2:23:78:43:04:62:58:5c:16:52:ad:07:7c:af:
56:f8:e2:b1:29:b1:f6:b2:64:2e:08:50:60:4d:17:
78:ed:73:f5:67:76:e7:0b:b2:42:92:49:03:de:52:
3d:bf:57:07:37:96:29:7a:7f:f5:9c:39:fc:b7:7d:
6a:7c:af:9c:f6:b5:03:60:59:cd:93:d5:f2:c8:d0:
d9:5d:37:d9:52:1d:42:3b:81:4a:64:50:b3:39:c2:
91:39:bd:a5:f3:e6:2e:fd:16:fc:e2:f2:ae:5c:e7:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:AE:53:FA:63:8E:FF:C5:7A:99:20:2E:1D:EB:7C:2B:FF:EE:77
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/i6iuU_pjjv_FepkgLh3rfCv_7nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.16.0-87.251.18.255
Signature Algorithm: sha256WithRSAEncryption
8e:93:73:a6:69:57:3d:0a:7e:08:a7:2b:86:ab:bd:82:4b:7c:
13:10:9f:cb:b7:af:1a:7b:9b:32:03:61:80:8d:19:b5:a6:0d:
11:35:4c:25:04:57:c8:28:b2:44:40:37:7f:fc:74:85:70:2b:
c1:a3:84:1d:d5:30:11:e4:9c:59:df:c2:90:e6:98:45:d1:35:
6e:dd:0c:32:07:e8:51:54:f6:0b:5b:46:d4:36:ea:55:96:72:
69:f4:19:00:69:c6:77:3e:3e:97:41:40:52:de:bb:83:f5:39:
c3:5f:7d:5f:86:c2:19:05:b5:32:a1:55:26:d8:df:dc:01:13:
02:7e:79:52:92:b5:8d:9a:aa:48:de:18:ef:a7:ac:68:76:9d:
28:e6:1e:d3:7b:32:6e:96:03:e1:2d:a9:5f:09:2e:0c:18:f3:
96:98:3f:3f:93:38:29:97:56:52:fe:62:f4:ea:27:f5:88:c3:
fb:6b:1c:fe:cb:82:08:e1:05:e5:a9:18:42:49:2c:80:96:2e:
c4:97:38:74:96:6a:f5:07:f5:bc:43:46:f3:00:61:e4:58:63:
2b:7f:47:19:95:f7:bb:5d:0e:6e:d6:b1:99:f7:88:c5:25:d6:
64:b8:c7:49:3a:ac:e9:af:cb:ad:6b:cf:44:28:b3:4e:15:46:
73:de:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net