Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dT17VT8O7A58uB1HviVKHYnBm3M.roa
File: dT17VT8O7A58uB1HviVKHYnBm3M.roa (raw, json)
Hash identifier: U93SKyJupjQyEHGkPcz8VccqjjPYIkqlLjo+kVJWwjM=
Subject key identifier: 75:3D:7B:55:3F:0E:EC:0E:7C:B8:1D:47:BE:25:4A:1D:89:C1:9B:73
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0186A1A7BB7A96FBFAEE50E36609259ABDC9
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dT17VT8O7A58uB1HviVKHYnBm3M.roa
Signing time: Thu 02 Mar 2023 09:29:29 +0000
ROA not before: Thu 02 Mar 2023 09:29:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203
IP address blocks: 87.227.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:a7:bb:7a:96:fb:fa:ee:50:e3:66:09:25:9a:bd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Mar 2 09:29:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=753d7b553f0eec0e7cb81d47be254a1d89c19b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:1c:b2:1a:f5:24:5e:51:02:6c:90:3d:31:
87:d4:89:70:d8:68:b3:d6:13:41:31:74:e9:a6:c7:
5a:ac:3b:99:63:e4:f9:d0:63:22:fa:cc:c9:64:ae:
e0:bd:18:10:f5:36:e2:b3:cd:01:38:7a:96:d0:49:
f9:12:80:40:9b:d9:50:62:9d:d9:9d:ed:42:26:88:
8a:41:11:74:ca:52:d5:8b:33:37:73:c0:bc:42:af:
b7:7d:d3:c8:74:4f:15:c6:40:30:5f:d4:3a:2c:d9:
49:3f:e8:7a:1d:fc:9e:cd:75:85:ed:2f:9f:93:61:
32:cc:88:6f:83:bb:10:b7:2a:f7:99:39:83:0d:1a:
e8:17:26:c5:39:6f:ba:b8:36:3e:68:ec:f9:16:f1:
b0:bc:e2:1a:ff:f2:2e:5a:76:a9:f7:ba:83:f0:2a:
3a:d2:ca:83:0d:d0:8b:5b:77:94:80:e8:ea:29:2b:
f5:37:d6:87:21:6a:ec:b1:f0:27:c2:8b:fb:a2:06:
3a:01:71:38:8b:32:78:c7:1f:64:bb:1e:5b:ab:af:
3a:06:52:7f:c6:06:7d:52:d2:cd:67:ee:a6:ba:12:
84:c3:3b:64:b9:cc:cf:6e:ab:62:a0:4a:98:47:4c:
7c:dc:ea:25:3d:25:1b:b9:20:6a:2e:e8:31:ae:03:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:7B:55:3F:0E:EC:0E:7C:B8:1D:47:BE:25:4A:1D:89:C1:9B:73
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dT17VT8O7A58uB1HviVKHYnBm3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e3:4a:96:e8:04:4a:bb:4e:c1:b7:db:1b:07:1f:5e:fa:75:
54:08:6a:ab:89:9a:e6:2d:ff:ef:eb:29:81:33:6b:13:c2:85:
8e:73:e7:84:94:cb:d3:94:14:dc:56:26:79:4c:a7:f3:8c:b2:
8f:84:53:bc:e3:48:1c:a6:aa:8c:21:a2:19:a3:2a:0f:01:a8:
31:63:fc:79:92:54:a7:53:37:80:35:68:47:11:be:04:e2:7b:
98:75:33:66:91:98:cb:2f:5d:4b:fb:43:dd:37:2a:20:5b:ff:
6c:78:93:ed:a5:e5:f8:6f:83:86:8c:16:2e:68:c8:88:53:cd:
f3:67:24:fc:92:ba:3b:3d:70:95:9f:53:e9:3d:7d:8b:ce:bc:
ab:75:fa:13:d3:2e:50:a3:ab:b0:f5:c1:2e:6c:70:00:ac:dc:
b0:c5:06:c6:b0:93:33:bc:02:3d:be:87:bf:e2:be:b7:f8:58:
b7:1a:ac:fa:a0:bc:92:7e:92:49:f5:62:d5:e6:ec:69:54:b7:
a8:96:a9:a9:11:c5:aa:17:67:b2:54:d6:db:d6:59:e6:9e:9e:
8f:56:b4:da:37:ad:5c:61:ba:c6:c6:28:3c:0f:5d:7f:d9:3b:
6c:9d:df:f1:01:f0:ff:3e:9b:22:9e:27:57:bc:89:ee:61:55:
2a:3c:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org