Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RZGFpEE-_nkfT7iYVxtGFrCy980.roa
File: RZGFpEE-_nkfT7iYVxtGFrCy980.roa (raw, json)
Hash identifier: 9SOT8SKeqiaISwb94zXU5CBF7j6IESJUgefW9k5yDRM=
Subject key identifier: 45:91:85:A4:41:3E:FE:79:1F:4F:B8:98:57:1B:46:16:B0:B2:F7:CD
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0187FBC9A7FB36D0C891BF196FEFB8D6B75E
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RZGFpEE-_nkfT7iYVxtGFrCy980.roa
Signing time: Mon 08 May 2023 14:35:09 +0000
ROA not before: Mon 08 May 2023 14:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 64.137.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:c9:a7:fb:36:d0:c8:91:bf:19:6f:ef:b8:d6:b7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 8 14:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459185a4413efe791f4fb898571b4616b0b2f7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:96:a8:4d:eb:c4:05:77:b5:e6:d9:12:f9:
0a:33:7e:8a:51:ea:20:8e:ab:9d:b0:98:5f:ad:25:
e7:35:fc:39:8c:15:c8:28:c4:83:15:03:b5:82:10:
a7:8c:43:8c:77:42:f3:76:3e:a4:91:09:c1:d7:24:
e4:0e:b8:70:2f:13:2e:b8:06:5b:5c:f0:4e:08:0e:
24:ea:cb:24:88:92:15:42:d1:a1:d7:ac:e9:27:9e:
43:a5:8d:75:6d:c2:e6:a5:aa:a5:a3:7e:84:b6:4e:
b6:eb:29:1e:b3:fb:ea:75:9f:68:6d:52:a7:02:c8:
f5:a6:11:ee:c9:d8:37:26:fc:23:f6:0e:79:d4:78:
48:62:ab:03:38:02:2f:a6:30:79:d7:9d:af:bf:c4:
2a:32:b1:d3:af:f5:8d:36:59:74:bb:48:ea:36:78:
b0:ce:81:46:81:74:14:1e:eb:20:b5:d7:6c:cd:5b:
1b:3f:e3:0b:11:bd:c2:91:14:00:7c:10:63:16:d4:
9d:47:33:7f:84:d1:6a:9f:8a:11:48:b7:55:58:c7:
de:a4:01:2b:ad:e4:31:a2:43:bc:ff:b5:8e:79:d9:
1a:33:a5:3e:7a:84:f6:b7:81:a2:7d:73:ab:24:15:
21:b9:00:30:40:80:fd:7d:3b:77:81:0f:2a:88:cd:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:91:85:A4:41:3E:FE:79:1F:4F:B8:98:57:1B:46:16:B0:B2:F7:CD
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RZGFpEE-_nkfT7iYVxtGFrCy980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.87.0/24
Signature Algorithm: sha256WithRSAEncryption
36:25:89:40:a6:59:80:e2:08:d0:7b:1f:2a:9a:84:80:14:0d:
6b:5b:b1:87:20:e9:cd:79:6b:5a:25:fd:e7:30:aa:ef:b8:48:
9a:2a:0a:5d:30:f2:c3:f9:cb:7b:0a:2c:75:0b:ff:41:53:ea:
3d:7f:bc:6b:8e:97:ab:af:47:ac:15:c5:e7:d0:40:85:d8:f2:
23:01:cc:0c:c9:5a:bc:20:50:17:59:07:91:62:8f:a7:64:0e:
26:61:38:48:f8:9d:10:3b:30:84:b5:f7:04:0c:b2:33:ac:8e:
ca:fa:fb:bf:1e:22:77:c8:a4:5e:95:e1:37:3a:5b:09:14:1c:
60:4d:6f:04:65:f1:10:bb:c6:05:3c:c0:f9:06:38:2d:44:a6:
f7:81:cf:10:07:a9:5d:4b:6b:c5:a3:e0:1c:67:10:91:d7:00:
a9:ed:56:49:6c:d5:3b:d0:62:79:71:5a:15:ee:ea:e5:4f:0c:
2d:fe:82:8a:3b:94:c1:f5:b8:be:d7:51:f1:cc:89:4b:1b:05:
49:c7:eb:68:09:b6:e3:e5:dc:2a:40:bb:af:6a:24:fd:35:8c:
0b:0d:f7:1c:1f:cb:f0:0b:77:7c:86:43:5f:48:33:6f:fd:82:
74:f8:c7:05:95:34:dc:bb:3e:85:0e:3d:d6:e4:dd:9b:f0:ef:
90:03:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org