Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6cUtFqnAAOl9cxqBI5kXKK7bRkA.roa
File: 6cUtFqnAAOl9cxqBI5kXKK7bRkA.roa (raw, json)
Hash identifier: rmdjPbxGYOIwMzQ34KllRoGYdxs0xjILJOnHx6yJFmk=
Subject key identifier: E9:C5:2D:16:A9:C0:00:E9:7D:73:1A:81:23:99:17:28:AE:DB:46:40
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01895A4FE3BFB7040786D322066789C3BF58
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6cUtFqnAAOl9cxqBI5kXKK7bRkA.roa
Signing time: Sat 15 Jul 2023 16:08:52 +0000
ROA not before: Sat 15 Jul 2023 16:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:4f:e3:bf:b7:04:07:86:d3:22:06:67:89:c3:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 15 16:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c52d16a9c000e97d731a8123991728aedb4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:f0:35:12:6a:56:c9:94:e4:e7:97:bb:83:
1f:bf:6c:50:01:79:c0:1d:de:df:4a:c3:47:16:64:
4a:3d:35:61:ec:3f:c9:c8:6e:9a:2c:70:4f:df:69:
44:f9:85:7d:77:76:28:d4:a2:28:85:fa:89:d4:62:
aa:5e:c6:3e:f2:79:e8:4d:5f:5c:89:9b:d2:8d:c3:
d0:11:72:e9:99:ef:f9:20:10:70:b8:bd:3e:7e:9e:
84:47:c3:9d:6d:36:20:5d:56:64:c2:ff:7b:20:da:
1e:fe:7d:72:52:b3:19:6b:1c:9f:e7:ea:d1:58:64:
05:9e:81:49:40:5f:03:c1:4c:85:3e:8b:91:0e:75:
25:b8:a6:12:0d:e4:10:86:4f:fd:71:38:eb:5a:d1:
a3:11:18:9b:8d:09:06:77:de:db:91:12:ab:6f:a5:
f6:73:a9:9e:5c:d6:f2:3f:3e:82:9b:86:fa:e0:92:
c9:2a:9f:01:19:2d:ba:99:fc:44:a0:30:10:ca:54:
be:42:f8:79:19:40:7f:b4:5a:7a:ad:a3:4e:fd:19:
8c:88:26:5b:d6:e9:36:82:a6:a9:12:48:0d:92:7a:
44:82:b3:3e:61:c9:10:35:1b:c1:f5:a8:83:da:93:
45:8c:1b:21:66:34:7b:fb:e5:cb:12:39:d3:e1:cc:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C5:2D:16:A9:C0:00:E9:7D:73:1A:81:23:99:17:28:AE:DB:46:40
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6cUtFqnAAOl9cxqBI5kXKK7bRkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:62:fd:ce:0c:7e:d5:d2:bf:27:87:9a:ba:49:45:49:35:da:
c8:33:7f:15:02:cb:25:01:20:27:ce:af:17:e7:f8:d1:e9:50:
3e:4a:e9:1a:7b:6b:47:1f:37:06:86:2f:35:4d:59:3a:dd:67:
ed:d5:45:b3:99:d7:bc:10:30:84:f5:28:36:d9:2a:69:ff:56:
ea:1c:b6:3d:26:49:f6:e3:89:c4:dd:d0:ae:2b:5f:34:3f:67:
e2:d1:17:98:a5:49:2d:95:6c:c3:7e:a6:b3:a9:bb:a3:08:fd:
16:8e:f5:f0:c0:ec:a1:55:1c:ae:d8:07:d8:93:7e:4a:45:c5:
45:50:d8:cb:4c:59:a0:a5:40:39:f4:3e:f6:6a:e8:bc:4e:10:
2d:07:8f:21:21:9c:de:69:a5:9d:28:41:ff:d8:d7:ca:20:21:
be:a7:a6:16:17:2e:12:c1:2f:78:b5:71:de:84:9c:1d:37:35:
9a:95:9c:c1:17:00:65:6e:b0:5b:2c:8d:30:51:94:3d:8e:3f:
0a:a0:e8:32:ec:7d:d4:c7:8b:ce:a2:6e:4b:50:87:36:03:b4:
14:a0:f8:c9:08:66:1c:1f:bd:ca:b0:cb:5a:a8:19:5a:cf:e6:
fc:66:93:0a:46:95:79:af:e2:8f:d7:a8:dd:00:5b:87:bc:bb:
26:04:34:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlaT+O/twQHhtMiBmeJw79YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwNzE1MTYwODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM1MmQxNmE5YzAwMGU5N2Q3MzFhODEyMzk5MTcyOGFlZGI0NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/rwNRJqVsmU5OeXu4Mfv2xQAXnA
Hd7fSsNHFmRKPTVh7D/JyG6aLHBP32lE+YV9d3Yo1KIohfqJ1GKqXsY+8nnoTV9c
iZvSjcPQEXLpme/5IBBwuL0+fp6ER8OdbTYgXVZkwv97INoe/n1yUrMZaxyf5+rR
WGQFnoFJQF8DwUyFPouRDnUluKYSDeQQhk/9cTjrWtGjERibjQkGd97bkRKrb6X2
c6meXNbyPz6Cm4b64JLJKp8BGS26mfxEoDAQylS+Qvh5GUB/tFp6raNO/RmMiCZb
1uk2gqapEkgNknpEgrM+YckQNRvB9aiD2pNFjBshZjR7++XLEjnT4cz7QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOnFLRapwADpfXMagSOZFyiu20ZAMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvNmNVdEZxbkFBT2w5Y3hxQkk1a1hLSzdiUmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iCAwQA
V/iFMA0GCSqGSIb3DQEBCwUAA4IBAQBtYv3ODH7V0r8nh5q6SUVJNdrIM38VAssl
ASAnzq8X5/jR6VA+Sukae2tHHzcGhi81TVk63Wft1UWzmde8EDCE9Sg22Spp/1bq
HLY9Jkn244nE3dCuK180P2fi0ReYpUktlWzDfqazqbujCP0WjvXwwOyhVRyu2AfY
k35KRcVFUNjLTFmgpUA59D72aui8ThAtB48hIZzeaaWdKEH/2NfKICG+p6YWFy4S
wS94tXHehJwdNzWalZzBFwBlbrBbLI0wUZQ9jj8KoOgy7H3Ux4vOom5LUIc2A7QU
oPjJCGYcH73KsMtaqBlaz+b8ZpMKRpV5r+KP16jdAFuHvLsmBDQq
-----END CERTIFICATE-----
Generated at Fri Jul 21 17:53:07 2023 by rpki-client on console-ams.rpki-client.org