Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/q6cowyMD6adN_gVO-8PCVs_R-78.roa
File: q6cowyMD6adN_gVO-8PCVs_R-78.roa (raw, json)
Hash identifier: y80LMJjhgypAL3hmtU97swctM2S2xyeBRRPYv6JHHA4=
Subject key identifier: AB:A7:28:C3:23:03:E9:A7:4D:FE:05:4E:FB:C3:C2:56:CF:D1:FB:BF
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D2841C09161338098028956F01D9
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/q6cowyMD6adN_gVO-8PCVs_R-78.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57523
IP address blocks: 87.247.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d2:84:1c:09:16:13:38:09:80:28:95:6f:01:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba728c32303e9a74dfe054efbc3c256cfd1fbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:c5:9a:6f:e7:e9:a9:68:90:0b:08:8e:44:
44:91:8e:d5:4e:77:94:c7:d6:06:ae:7b:74:8f:0f:
9c:cf:0c:df:eb:ba:f4:c8:14:fd:3a:5c:a2:0e:97:
fb:14:1f:41:76:67:2e:e2:f8:ee:ae:a3:b9:5e:84:
31:c4:ae:32:b5:cb:e4:a2:e9:07:79:cb:e9:c9:07:
9f:4f:30:79:e0:fd:62:f0:d4:b4:dd:a2:cf:6a:7b:
70:10:ee:b6:60:a9:da:07:9d:26:4a:62:b6:dd:64:
73:11:67:4b:d3:4e:ed:9e:ff:e5:43:27:24:69:c2:
5f:62:45:fc:95:bf:ff:f1:f4:af:26:76:5b:29:58:
d4:4e:7d:9d:b0:91:e3:2d:d9:1e:a0:70:7f:2c:f5:
5b:10:00:4a:2c:9e:9d:8f:4a:20:68:cb:c4:d6:43:
91:a4:b5:c4:95:de:d9:07:a0:fc:c5:3f:71:0e:44:
18:b0:28:f6:fc:c9:9a:fd:60:3a:57:c5:b1:4e:14:
0a:73:0a:76:6d:0e:ae:b5:9c:be:a3:6b:81:ff:84:
89:e1:3b:13:32:e0:23:05:6a:af:b0:fa:15:2e:04:
08:13:c2:47:98:01:5b:11:5b:4e:ca:4c:78:79:ff:
97:c2:19:11:8b:b5:b5:62:b7:15:a8:9e:08:82:c7:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:28:C3:23:03:E9:A7:4D:FE:05:4E:FB:C3:C2:56:CF:D1:FB:BF
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/q6cowyMD6adN_gVO-8PCVs_R-78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.158.0/23
Signature Algorithm: sha256WithRSAEncryption
28:43:17:09:b9:0f:2a:20:06:2c:3a:b8:06:3e:58:b7:29:ab:
86:c3:d2:e3:ad:31:4a:cf:48:c1:73:ae:94:a5:78:31:b7:3b:
55:99:c4:70:8a:f1:64:65:be:67:83:71:e9:c6:cb:82:d0:3c:
0f:54:04:b6:72:63:0e:ca:83:9b:1a:54:0c:87:f1:47:14:fc:
bd:da:0c:46:79:7e:bf:aa:c0:b4:9d:d2:7f:dc:b0:19:5d:ef:
8d:27:12:60:a6:96:41:22:34:bd:29:c7:cf:6f:a2:78:c4:b7:
37:48:1e:41:34:21:4c:e2:08:d0:35:79:e9:7c:e8:39:9c:bf:
6f:0b:27:d5:fb:d7:f7:e3:4b:49:4a:db:42:c5:d0:ed:58:c9:
e7:74:35:f3:c3:e6:14:1e:14:0a:a6:86:16:0a:be:43:0b:4b:
45:71:26:eb:af:84:dc:3e:cb:5e:3e:2d:c9:d6:2b:36:f0:33:
72:0f:ea:43:b8:c9:73:d0:71:84:55:77:d8:35:36:83:54:e6:
e0:f4:a1:59:0c:cd:52:54:08:c2:fb:d1:21:35:fc:29:66:84:
e5:db:f6:10:d4:96:c1:25:7e:9a:0d:42:ad:6e:18:f5:39:ca:
46:4a:1e:71:dd:0b:1e:51:32:bd:37:85:59:1f:8d:da:2d:0b:
ba:4b:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:38 2025 by rpki-client