Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/87b3PFj-8a3MWRD1nQmt22Nb6jk.roa
File: 87b3PFj-8a3MWRD1nQmt22Nb6jk.roa (raw, json)
Hash identifier: MCQXA5G7s4U/5Tn+N+7xRmp42D4mhfleFpF5H9WNNCs=
Subject key identifier: F3:B6:F7:3C:58:FE:F1:AD:CC:59:10:F5:9D:09:AD:DB:63:5B:EA:39
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 0185A65287C1FE3384057CF1D22494975375
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/87b3PFj-8a3MWRD1nQmt22Nb6jk.roa
Signing time: Thu 12 Jan 2023 14:11:44 +0000
ROA not before: Thu 12 Jan 2023 14:11:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200222
IP address blocks: 45.129.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:52:87:c1:fe:33:84:05:7c:f1:d2:24:94:97:53:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 12 14:11:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3b6f73c58fef1adcc5910f59d09addb635bea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:67:54:6f:dc:f9:54:a2:90:75:d6:2b:8c:
5d:58:c9:a3:0d:82:2b:9e:01:c8:15:bd:1a:19:e0:
d9:e3:99:c2:d7:a6:58:8f:27:20:5f:a9:32:f6:22:
57:fc:39:a1:a0:cf:6b:8f:2d:91:f1:7d:d2:43:ab:
9a:ba:08:9e:73:76:ca:59:54:f6:19:7c:9f:84:1e:
ca:53:69:34:20:e3:62:7d:46:fe:aa:31:8b:7b:98:
1a:d1:9b:7a:04:7b:d4:9b:ae:0e:e5:e2:38:cb:5b:
ac:a4:6e:1a:0e:9c:db:ee:81:34:7a:b5:97:49:41:
41:ca:a3:b8:3d:83:cd:e6:16:00:f1:b2:08:8a:11:
d4:b8:5d:46:f3:6b:ad:7a:17:3f:d6:c6:69:af:22:
4e:b4:6e:2f:32:6e:a3:ea:ed:8b:0e:a1:5d:c1:18:
06:96:7f:29:2f:da:24:ec:6b:e3:6f:a1:14:b4:82:
83:ef:54:d5:24:16:92:a4:00:82:34:b9:51:6e:07:
c5:66:5c:55:98:df:3c:82:02:04:1e:1c:b4:f8:c7:
cd:58:a6:3c:b5:7b:e9:b6:50:8b:60:32:8c:20:b1:
11:44:fe:70:a7:ea:89:25:43:8d:18:31:b2:09:27:
6d:a8:0a:87:97:62:59:a6:e8:60:65:36:e0:39:a9:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:F7:3C:58:FE:F1:AD:CC:59:10:F5:9D:09:AD:DB:63:5B:EA:39
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/87b3PFj-8a3MWRD1nQmt22Nb6jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:44:9c:b0:fe:87:b3:1b:8c:1e:c6:30:c4:a1:26:d9:92:4b:
c8:c3:4a:9e:4b:e5:10:c1:7b:a4:42:7f:1e:41:8b:ca:e1:f9:
3e:bc:48:11:f1:ce:b4:41:fc:68:bd:4c:37:6e:0a:d7:e1:7a:
35:47:08:b7:62:97:1a:0e:5b:f1:92:d9:20:c2:90:62:1b:ed:
fd:82:68:18:d6:2c:35:5e:e1:a1:db:41:4e:3b:3d:e0:d5:50:
cb:18:b8:0b:bd:88:31:b2:8d:c0:f9:7a:1a:71:3e:18:73:3f:
3a:28:81:ea:7e:75:78:f4:ec:09:d4:3e:9f:b5:a4:01:1a:f3:
8c:49:84:51:e8:f0:ca:f8:c7:18:da:70:b9:bb:bd:56:91:83:
a9:6e:a7:8e:77:e7:63:ce:89:70:1a:ac:68:a4:c8:7c:98:ff:
9a:57:44:4c:99:fd:b6:42:7b:27:a6:ce:36:1f:f0:02:83:2e:
9b:ca:82:b4:73:2a:85:ef:21:5e:31:a9:9c:aa:68:b6:fc:b1:
b7:a0:cf:10:d3:38:3f:3a:00:23:60:e6:8a:43:29:ef:f4:81:
02:53:3f:bd:1e:0f:60:0a:77:ce:02:6e:73:73:11:15:d5:d0:
29:d6:a4:99:eb:e0:5f:d4:ac:0a:0e:2d:11:9d:a8:6d:a6:aa:
2f:0b:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org