Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/g_PkZ-_Ri5_TGF5cOIEX5G-Qfso.roa
File: g_PkZ-_Ri5_TGF5cOIEX5G-Qfso.roa (raw, json)
Hash identifier: OILjwA+0rD+j6rJ+oirjk4nBmdWKhaN1dwc4l7d8PKs=
Subject key identifier: 83:F3:E4:67:EF:D1:8B:9F:D3:18:5E:5C:38:81:17:E4:6F:90:7E:CA
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 0190A5E2FA8A0F1DDEFF6833408EEEFA0216
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/g_PkZ-_Ri5_TGF5cOIEX5G-Qfso.roa
Signing time: Fri 12 Jul 2024 07:40:34 +0000
ROA not before: Fri 12 Jul 2024 07:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204030
IP address blocks: 87.101.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:e2:fa:8a:0f:1d:de:ff:68:33:40:8e:ee:fa:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jul 12 07:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83f3e467efd18b9fd3185e5c388117e46f907eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:9c:83:61:be:66:05:73:63:c7:26:8d:20:
fb:cf:32:f7:c3:65:72:80:cf:f3:15:ab:a0:04:cb:
5c:25:3e:72:ab:74:63:76:57:aa:db:7e:9b:5e:ae:
24:35:06:fb:74:3e:6e:f9:91:1f:29:ef:c1:84:71:
52:60:26:63:24:65:42:57:c5:84:e6:16:3e:7d:7e:
98:38:73:98:5a:8f:81:e2:bb:74:4f:b0:ef:18:2f:
6f:89:df:cd:64:33:dc:65:b8:9c:a4:26:66:de:46:
ef:c9:5c:61:44:03:c7:06:62:e3:de:e3:58:f6:d5:
af:af:19:3d:dd:1f:dc:c5:76:9d:c3:74:fc:24:3b:
95:e3:b5:16:8a:70:6c:db:35:65:b9:74:6e:a0:47:
cd:a7:c8:05:7e:be:87:d0:d1:42:22:fb:0e:18:a7:
2b:a9:4e:7b:5f:b4:b4:4c:fc:6a:89:bb:53:c5:30:
38:20:36:e8:6d:31:0d:db:cd:42:4e:bb:35:a5:b0:
01:31:38:20:37:f4:9e:cf:fe:23:7b:c8:08:2b:4b:
81:67:0d:e9:58:a9:41:38:82:62:ef:98:ae:62:6e:
90:d3:4c:36:a8:12:18:9a:e2:1a:5e:e0:28:c3:38:
ac:1e:b2:72:27:c0:4b:fa:bf:aa:fc:65:c7:3b:a8:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:E4:67:EF:D1:8B:9F:D3:18:5E:5C:38:81:17:E4:6F:90:7E:CA
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/g_PkZ-_Ri5_TGF5cOIEX5G-Qfso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ab:64:04:bb:86:e0:56:52:f1:a2:cd:19:fd:3c:09:02:2e:
40:bb:50:bd:9a:e8:2e:d0:a5:0b:7c:58:77:b0:1e:f6:3c:2a:
23:11:da:03:f4:a5:7e:bb:4f:96:89:57:ff:80:a9:77:22:c2:
e1:54:be:0a:6f:d0:1c:4e:51:a5:39:63:77:00:f2:e9:f2:b7:
97:4f:3b:03:89:39:10:d1:a6:d5:16:22:94:14:5d:c3:63:6e:
3d:0d:7b:7a:2a:70:e5:d4:0c:95:08:ea:2d:24:57:81:7c:34:
f6:a3:53:ea:7c:b6:4d:b2:74:68:e1:39:e3:94:84:a3:bb:e3:
42:58:87:31:61:a6:2f:88:11:92:6b:f1:70:54:1e:1b:87:5c:
fb:0b:d5:bf:75:57:b6:29:c1:ca:34:e5:0f:e9:77:64:64:6d:
b3:19:1a:80:01:15:84:33:f2:c6:52:3c:4b:54:56:1f:43:df:
31:1e:17:f7:aa:53:c0:b3:ca:8e:f4:7f:c0:f5:64:ce:c4:91:
f9:07:46:36:ec:ba:79:1f:3d:e5:2a:3c:b6:ba:80:52:28:ff:
e5:6c:67:ca:c6:bb:32:4b:28:32:6a:d7:61:61:91:05:66:1d:
77:28:0d:b7:e1:c5:49:72:2a:65:2e:4f:13:b2:52:04:a2:43:
01:30:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:13 2025 by rpki-client