Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/9_CvnL9wN32pv1uBxAD6LRSvUJk.roa
File: 9_CvnL9wN32pv1uBxAD6LRSvUJk.roa (raw, json)
Hash identifier: AzLSoWFKfW9FJG1tUeDOSM7YT4HuUzeLMvkxv0+xv5Q=
Subject key identifier: F7:F0:AF:9C:BF:70:37:7D:A9:BF:5B:81:C4:00:FA:2D:14:AF:50:99
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0185707075A94AEAFB86A2FEB8F79F1E9199
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/9_CvnL9wN32pv1uBxAD6LRSvUJk.roa
Signing time: Mon 02 Jan 2023 03:04:56 +0000
ROA not before: Mon 02 Jan 2023 03:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 87.254.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:75:a9:4a:ea:fb:86:a2:fe:b8:f7:9f:1e:91:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f0af9cbf70377da9bf5b81c400fa2d14af5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:d3:eb:b9:0b:1d:77:5e:60:cf:a8:00:94:
69:1e:1b:2f:90:9d:cd:de:c0:3d:df:16:48:15:48:
14:ee:01:8d:26:b9:90:ab:04:ba:92:67:35:22:80:
5b:42:df:9e:8e:a7:ac:f6:db:b5:83:fa:d2:ed:d7:
bb:3f:ed:f2:54:f6:b8:6c:c0:02:11:50:14:8f:99:
d8:b1:da:f8:21:6b:1a:34:59:4c:38:04:48:45:1b:
dc:ee:dd:9a:fd:9c:f4:15:ac:32:ff:66:a8:5c:4f:
7b:6b:6c:f3:2a:e9:b8:7e:33:b9:77:02:65:8c:2a:
5e:73:3f:61:54:95:82:70:29:68:8f:d8:f7:c7:70:
e6:54:ad:0a:e0:7d:ff:a2:92:9a:6e:a8:ac:cf:86:
85:81:81:8b:ea:2c:83:bd:5a:4b:d4:cb:6a:e4:17:
83:54:5d:3d:eb:d2:67:88:f2:d6:de:48:99:0c:2f:
b0:f8:1c:9c:95:25:5a:62:e5:21:87:38:eb:11:68:
cc:0c:ab:3a:4d:0e:e8:6d:e1:76:e9:30:68:c0:18:
e0:9a:dc:71:9f:53:34:42:ff:d6:9e:91:d6:5d:9a:
cc:ab:3f:7b:8f:92:3b:fd:3c:ef:ec:3a:a9:2d:07:
49:9a:49:e6:28:ec:30:b3:a9:1f:cd:f8:a2:d3:e8:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:AF:9C:BF:70:37:7D:A9:BF:5B:81:C4:00:FA:2D:14:AF:50:99
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/9_CvnL9wN32pv1uBxAD6LRSvUJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.22.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a4:6b:a6:ff:28:fa:c6:2e:52:6e:91:c3:cf:e5:cf:6a:3e:
23:2a:5e:62:b0:6c:19:2a:e8:89:4e:0c:2b:b2:47:dd:22:27:
ee:82:d1:f8:f7:ff:91:9d:2b:c4:a7:31:b6:cb:29:7e:92:13:
bd:83:65:7f:ff:88:f5:66:6d:32:78:3b:9a:4d:b7:71:de:86:
da:6d:4a:8a:24:61:b3:2d:11:5e:5c:79:cf:6c:c3:d1:a2:62:
f3:cf:f8:67:ec:f3:3b:d3:3d:96:4a:55:1c:ea:d3:4d:00:1f:
08:e8:8a:36:30:47:0e:73:a0:e2:1f:bc:cb:bd:60:73:78:9b:
88:a7:f8:a5:ea:8e:61:7c:55:bc:eb:8b:49:2f:15:7f:af:f9:
a4:5e:8a:41:65:33:ad:5e:2a:69:23:25:3f:8e:6a:6c:51:23:
d9:50:59:f9:49:6c:b9:bb:ef:42:dd:bf:f8:1c:8f:11:8b:cb:
96:15:f0:fa:88:b8:18:5d:5b:e6:97:05:a5:4f:f7:97:5c:60:
2c:65:49:90:88:f2:68:77:b5:bd:dd:43:a5:d5:26:47:bb:f2:
9a:61:03:fc:a8:2c:12:c5:10:99:87:69:04:10:8e:b4:c9:99:
ee:bb:d2:dc:a6:c8:57:65:9e:72:d2:88:24:86:f7:d6:1a:05:
da:a2:fa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org