Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/u-zGDLGRnhcOn4z9-o5pumBtab8.roa
File: u-zGDLGRnhcOn4z9-o5pumBtab8.roa (raw, json)
Hash identifier: dNJ0SSbE8xsT27QJsIhaSzLj47ddPSjUiQAY6kgCWyM=
Subject key identifier: BB:EC:C6:0C:B1:91:9E:17:0E:9F:8C:FD:FA:8E:69:BA:60:6D:69:BF
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018BF9D891C503F85E1558BB87DAD3E87EBA
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/u-zGDLGRnhcOn4z9-o5pumBtab8.roa
Signing time: Thu 23 Nov 2023 01:43:21 +0000
ROA not before: Thu 23 Nov 2023 01:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 87.251.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:d8:91:c5:03:f8:5e:15:58:bb:87:da:d3:e8:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Nov 23 01:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbecc60cb1919e170e9f8cfdfa8e69ba606d69bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:ba:4b:59:5e:b5:40:3c:bd:32:17:81:01:
97:da:64:b4:2e:b8:4f:ff:86:15:76:f5:f2:75:2e:
39:dd:a4:7f:5e:f4:d3:cf:1b:13:63:4d:b9:d5:85:
97:53:8a:91:c7:9b:a8:e4:e5:ef:c1:ad:75:a6:23:
0c:8c:9e:03:8d:fa:0f:bd:62:c4:08:5d:d8:0e:7a:
ae:ee:10:24:b8:5b:43:eb:72:7d:5e:ea:32:99:6b:
f8:cc:71:2e:01:6b:50:af:a7:1b:27:dc:99:db:f9:
3a:47:96:39:64:ad:65:22:27:a8:d4:cb:24:af:a7:
30:ba:8f:ec:55:e0:08:29:aa:d7:1d:ac:b8:13:e4:
70:59:f4:d1:9b:66:a3:dc:76:41:f5:a8:a8:b8:30:
22:98:ed:29:fc:02:da:57:a6:20:65:14:15:86:9c:
83:33:e1:f4:1e:d1:80:31:58:eb:d6:f5:4f:7c:92:
17:35:be:9a:49:0b:74:65:dc:f0:35:8d:64:35:66:
81:2c:7a:13:b0:ef:3f:a5:a7:5d:65:d6:ff:14:2d:
3b:a2:d1:05:9a:a7:eb:ac:1e:ec:f9:ac:28:e7:93:
7b:e6:61:83:11:a0:6b:5f:ce:b7:c0:96:09:9a:e1:
3d:2f:45:96:eb:03:60:c2:aa:e7:ac:1c:ea:36:6c:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:C6:0C:B1:91:9E:17:0E:9F:8C:FD:FA:8E:69:BA:60:6D:69:BF
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/u-zGDLGRnhcOn4z9-o5pumBtab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a9:f4:e1:62:82:86:6f:66:81:8d:08:10:4c:81:2d:00:df:
0a:b1:50:b4:ad:7a:89:31:2f:17:ea:a0:9a:eb:63:fa:fb:84:
23:05:b0:f4:3d:2b:ac:8e:d8:5e:41:3b:e4:5c:c3:f5:f9:ec:
48:f6:40:a8:4b:2c:17:0a:0b:f4:0b:34:fd:eb:a0:3b:ca:78:
ea:f4:cc:81:a9:9e:b2:6a:5c:5f:3c:5f:1a:cf:ab:c8:0f:e9:
1c:a6:9e:14:62:d3:ce:6a:94:be:41:a1:7c:21:83:fe:a0:65:
26:23:51:bf:7f:ca:e0:b9:21:b0:57:cc:c4:b3:2e:a5:37:69:
8c:d5:9f:73:f9:04:d9:61:df:68:0e:7d:bf:07:1d:bd:87:9b:
41:71:80:9a:f4:9d:83:f4:be:1a:04:1c:b7:5c:7e:e8:d2:ca:
f6:59:0f:16:d5:c5:99:3a:28:1b:59:f3:a5:3d:39:ed:ed:8d:
58:0c:2b:23:37:ae:35:8b:00:c3:95:9d:7a:d4:18:32:91:29:
cc:fb:7c:62:20:f3:11:50:66:23:20:c6:68:08:1d:34:2c:eb:
fd:f3:7a:d8:20:fd:8f:7f:fb:1e:a4:3e:3e:f0:65:1c:d9:85:
4d:2d:e1:2f:8a:01:68:2b:2e:cd:7c:e4:0b:96:e5:f4:38:21:
6f:f9:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net