Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/7OYzKswIuVZuTkAW9DWGBZK9QKk.roa
File: 7OYzKswIuVZuTkAW9DWGBZK9QKk.roa (raw, json)
Hash identifier: wvQPwtOuKz69V5QI5rIlfbZM1lrg5nmVIRLFkmulXRI=
Subject key identifier: EC:E6:33:2A:CC:08:B9:56:6E:4E:40:16:F4:35:86:05:92:BD:40:A9
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 018571B0BB608B9A623B11642EE5F98DE332
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/7OYzKswIuVZuTkAW9DWGBZK9QKk.roa
Signing time: Mon 02 Jan 2023 08:54:45 +0000
ROA not before: Mon 02 Jan 2023 08:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210161
IP address blocks: 87.101.84.0/22 maxlen: 22
87.101.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:bb:60:8b:9a:62:3b:11:64:2e:e5:f9:8d:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jan 2 08:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ece6332acc08b9566e4e4016f435860592bd40a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:20:8a:31:1e:af:1e:fd:ea:da:64:f5:d5:
8c:df:2d:d8:a6:88:f3:a5:e7:bc:ae:6c:c9:ef:98:
62:0e:9d:05:3e:a3:67:83:37:63:e7:c7:5b:64:24:
3e:fc:24:5b:9e:54:1e:de:64:f6:cf:47:cb:9f:2a:
03:bb:b7:98:aa:a4:5a:f3:4d:ea:5e:8d:af:ce:a3:
62:b6:32:58:7d:f2:be:53:7f:e1:fd:c9:0a:59:dc:
cc:89:10:6a:1e:e7:9e:a8:6d:17:04:38:6d:53:ba:
1c:3c:ba:0c:f5:3a:2c:0f:f6:23:65:61:1f:fb:5d:
8b:7e:64:94:f5:83:47:2b:5c:17:7b:cf:03:99:c5:
4f:1b:82:19:48:76:55:01:77:18:c1:d9:e6:57:fd:
ae:40:b9:c9:75:43:e5:4e:4b:9e:7f:cf:c3:37:6d:
a4:08:9c:9d:78:25:95:39:bd:91:ee:02:0b:19:34:
67:bd:92:3e:91:7c:f9:a0:5e:b1:bf:61:6a:85:80:
de:f9:8f:e0:33:17:f2:93:1f:0b:08:7f:32:14:f1:
fb:d3:2a:ed:99:63:d6:a2:4b:e8:ac:d3:8b:5f:e7:
14:8b:a8:31:8a:be:68:24:37:fb:55:32:a8:2b:40:
37:03:e2:c2:b2:6e:cf:7d:36:ee:ab:bc:8f:08:9c:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:33:2A:CC:08:B9:56:6E:4E:40:16:F4:35:86:05:92:BD:40:A9
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/7OYzKswIuVZuTkAW9DWGBZK9QKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:cd:c1:9c:d7:16:69:f6:5e:fd:77:36:b6:b3:d5:fd:ea:31:
1c:31:fd:d3:66:54:9b:3e:87:7d:34:32:e9:4f:31:0e:ef:06:
a6:6a:6d:52:65:c6:90:c3:b2:5d:81:03:90:b3:4e:6c:e7:81:
68:57:f3:14:1e:04:0f:28:20:f2:31:7b:a0:c8:77:52:4c:a0:
98:8f:8a:16:01:e8:08:52:60:90:f9:df:6d:ab:23:ea:7a:c1:
b2:4e:e9:c2:1d:7a:20:aa:97:9d:b5:9a:14:9e:f7:07:55:5b:
3a:26:cf:9f:0f:f0:f3:fe:bf:5b:f7:eb:5e:53:b8:c7:c5:13:
ee:ba:f3:28:bd:67:cb:5f:90:3c:98:9c:7d:fa:2b:aa:65:63:
a9:a3:35:e6:f4:0e:0f:da:15:44:85:6e:1b:fa:53:21:a4:e7:
1f:01:34:1d:fd:bf:58:b1:28:4b:c0:4b:41:44:6c:92:d6:50:
50:7c:ae:3b:dc:29:5b:d8:80:98:24:8a:6b:c4:59:65:97:b8:
d3:f3:98:1b:6e:7e:13:dd:83:f3:ba:c2:9d:e0:ef:df:f0:ef:
07:de:8b:9f:bd:bb:97:27:2a:31:d8:ec:e8:16:d1:8d:59:42:
1c:0c:1c:8c:d2:8e:80:55:4f:68:04:1d:67:e5:7f:b0:a0:4a:
ce:47:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:34 2024 by rpki-client on console-ams.rpki-client.org