Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6cOtVE9pLf1Wz1mh2FTuyU36fSc.roa
File: 6cOtVE9pLf1Wz1mh2FTuyU36fSc.roa (raw, json)
Hash identifier: XSsbZgvryRLHelWaOY+BT/G0tMzODgwquDKeQIc0XnA=
Subject key identifier: E9:C3:AD:54:4F:69:2D:FD:56:CF:59:A1:D8:54:EE:C9:4D:FA:7D:27
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018570707B70858CE8DF5A598DD190BBBC3B
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6cOtVE9pLf1Wz1mh2FTuyU36fSc.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207645
IP address blocks: 87.254.0.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7b:70:85:8c:e8:df:5a:59:8d:d1:90:bb:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c3ad544f692dfd56cf59a1d854eec94dfa7d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:39:fa:61:31:7b:55:b9:83:b7:6e:fb:c1:
78:ee:2b:5d:c9:0c:78:e3:48:2d:c2:0d:c1:61:b3:
0e:5e:4b:3e:85:ac:78:40:2a:09:ae:ac:3a:ac:6c:
a5:7a:31:33:02:d1:42:31:d9:ac:93:88:0f:7e:02:
36:f6:18:6a:b6:14:0a:4c:a8:25:49:18:40:8a:eb:
9c:4a:6b:bc:e4:bf:bc:df:4e:fb:14:23:49:da:c2:
63:f8:2b:d4:f3:d7:17:3c:1b:0e:98:ca:2b:c7:2d:
50:84:58:28:05:bf:48:a7:fa:3d:03:27:15:34:f2:
36:81:92:9e:09:58:ed:62:db:b1:ba:53:66:f8:83:
b4:52:eb:37:e6:92:72:1f:fa:b9:db:72:f3:a6:bc:
b3:95:90:58:63:c3:b1:60:cc:0f:98:70:a9:07:3c:
77:4e:75:87:5f:1e:c2:a1:e3:4a:fb:c0:3a:50:bb:
20:06:20:ae:10:26:ee:79:00:1d:de:10:a5:71:b7:
88:37:1a:ea:cb:b7:dc:55:38:e2:c7:30:de:1d:db:
a1:03:a4:e6:ef:f0:0c:86:9d:3f:46:fe:54:c3:7f:
86:5d:28:f4:43:cf:a8:42:0f:1d:1f:3e:77:b5:68:
70:97:bc:61:0e:66:40:84:08:d4:ef:be:b1:ec:39:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:AD:54:4F:69:2D:FD:56:CF:59:A1:D8:54:EE:C9:4D:FA:7D:27
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6cOtVE9pLf1Wz1mh2FTuyU36fSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.0.0/23
Signature Algorithm: sha256WithRSAEncryption
62:42:56:23:4f:5c:d6:04:b5:19:05:6f:7a:80:0d:b9:ed:2a:
2f:b0:fc:b7:ad:50:97:f4:1f:fc:53:f9:6d:62:f9:78:78:f5:
34:ed:44:e7:c4:bd:2d:61:4b:37:60:ec:cc:e2:d6:dd:35:23:
6b:dc:c1:1f:98:ba:11:97:3d:f9:bd:74:e6:5d:a1:ad:00:9d:
26:e1:c9:89:8b:6b:16:36:2e:28:e5:94:26:07:e4:2b:3c:8d:
cf:f7:35:78:8c:13:96:f3:5e:aa:02:f0:c0:be:c9:d8:d5:64:
4c:c0:d9:90:1a:70:58:62:23:68:4a:c9:bc:cf:61:25:a2:7a:
61:78:ec:8b:da:85:08:7b:2f:87:00:d8:b3:ad:17:5b:10:a7:
12:5a:8e:21:55:31:5a:2e:3e:90:de:af:93:d3:b5:ee:5c:1c:
69:c3:58:a1:6f:60:1d:3d:b9:33:d0:42:36:eb:e3:16:a0:f6:
6a:dd:ba:6b:4c:9c:c4:1e:92:92:88:4e:26:d0:7e:41:0c:f0:
6e:e4:3c:a4:95:40:cb:e0:78:aa:7b:65:ed:fb:5b:ae:22:4f:
d0:0b:90:05:62:a7:d3:fb:3b:9a:a5:cb:26:f5:0f:3b:68:22:
7f:a2:e1:4c:ce:48:5d:da:c5:89:07:48:b6:4b:86:c4:c1:97:
74:e9:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:47 2024 by rpki-client on console-fra.rpki-client.org