Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9BRB5XSWiSKctiuNQm4ittiOVIo.roa
File: 9BRB5XSWiSKctiuNQm4ittiOVIo.roa (raw, json)
Hash identifier: 6NzuowxXZ0QLIeNyiwjOGu0zNwpi4qnIyk8+Hc678Rc=
Subject key identifier: F4:14:41:E5:74:96:89:22:9C:B6:2B:8D:42:6E:22:B6:D8:8E:54:8A
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0188FBFCF013114A30C8CE4D5559F769811B
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9BRB5XSWiSKctiuNQm4ittiOVIo.roa
Signing time: Tue 27 Jun 2023 08:33:57 +0000
ROA not before: Tue 27 Jun 2023 08:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 87.248.133.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:fc:f0:13:11:4a:30:c8:ce:4d:55:59:f7:69:81:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 27 08:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f41441e5749689229cb62b8d426e22b6d88e548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:57:07:a7:24:68:81:33:b8:b9:73:81:17:
a0:d5:cb:73:44:71:76:37:7f:a5:c9:04:2e:9c:b7:
0e:1b:d7:9d:f4:a8:7d:b8:3d:8e:88:a0:7f:1b:4f:
e7:95:d7:db:90:25:c6:6c:2e:76:14:a7:d2:73:b8:
a0:76:9b:22:32:b9:39:0a:2b:4f:bb:ac:6c:96:aa:
a2:1a:35:d1:77:53:89:b8:a2:00:02:17:de:1f:c7:
52:be:96:f5:50:e9:b4:59:90:29:86:54:0d:9c:1e:
b8:d4:b7:32:db:94:5a:f5:5e:eb:7f:51:19:d1:86:
0c:53:33:8d:a2:1b:37:36:94:d6:65:b9:3a:fb:d7:
4d:48:cf:7c:2c:d4:23:be:ac:0b:9f:6c:17:2a:98:
ed:12:7f:62:d0:94:57:0f:47:5f:53:92:86:e6:59:
e6:17:50:c2:aa:35:9c:30:3b:8a:f0:25:50:54:dc:
0f:b4:6f:18:dc:40:5d:2f:b3:f9:55:3f:f9:2e:66:
d8:0a:27:03:19:75:8a:4f:4f:fe:29:dc:15:0d:c6:
6d:5d:3f:22:f8:9b:07:27:65:b5:9a:77:65:15:fc:
0d:b6:7a:1e:7d:ab:59:8d:e6:49:85:2b:81:ee:58:
0b:3a:cd:21:c7:5a:a0:fb:33:1a:11:1b:64:20:12:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:41:E5:74:96:89:22:9C:B6:2B:8D:42:6E:22:B6:D8:8E:54:8A
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9BRB5XSWiSKctiuNQm4ittiOVIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:fb:95:82:b8:56:62:fe:c9:40:19:cd:37:e1:cd:a8:95:17:
a5:e9:7d:a7:22:5d:9d:ce:6b:ce:3a:25:0f:63:a3:29:e9:45:
6c:00:81:b2:77:15:f4:6c:55:fa:29:f8:46:3a:b6:75:3e:a8:
d7:f1:07:ce:92:72:5b:c4:dc:52:ec:e3:65:40:86:39:21:40:
0c:d2:51:d7:f9:b6:e8:b6:a7:32:91:a0:a3:2e:0c:5c:56:bf:
bd:30:21:74:1c:fb:6e:3b:3a:aa:06:b0:5e:df:36:35:3a:ba:
ca:61:a5:42:a0:34:1f:a5:4c:59:3e:4f:8b:6a:5c:c3:a8:c4:
81:fa:2b:50:dd:04:e7:8d:a5:0f:75:5c:ab:b5:aa:cb:52:c0:
36:b8:37:da:e8:9c:f2:23:8d:0f:80:d2:93:b2:af:b6:aa:13:
27:fc:70:a3:9f:d2:48:31:1d:9f:40:ad:71:04:69:de:ff:15:
9c:cb:f0:36:59:ea:6c:e4:8e:f9:dd:70:e6:24:4c:34:1f:ab:
6e:13:e5:77:3e:03:b9:a1:f0:49:48:63:fb:6e:48:e3:2d:18:
da:33:47:bf:4a:b2:a3:e7:4e:8c:06:6a:98:ac:bf:e3:9f:f8:
e4:98:3f:00:79:96:99:38:13:ab:b9:65:07:b9:d8:d3:54:c6:
cf:ef:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:49 2023 by rpki-client on console.sobornost.net