Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GCc91Xmzaig0MnKn2Y3cSHOc9WI.roa
File: GCc91Xmzaig0MnKn2Y3cSHOc9WI.roa (raw, json)
Hash identifier: 9U7cOwq203T7rj0XNviTUvs6wXzLJuscpzUbPUMGV50=
Subject key identifier: 18:27:3D:D5:79:B3:6A:28:34:32:72:A7:D9:8D:DC:48:73:9C:F5:62
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018756AC41643B108428B252FAD83B808EF1
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GCc91Xmzaig0MnKn2Y3cSHOc9WI.roa
Signing time: Thu 06 Apr 2023 13:05:42 +0000
ROA not before: Thu 06 Apr 2023 13:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:ac:41:64:3b:10:84:28:b2:52:fa:d8:3b:80:8e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 6 13:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18273dd579b36a28343272a7d98ddc48739cf562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:a6:12:6a:3b:b7:e9:f0:10:51:b9:a3:5e:
48:f9:53:e3:08:d8:61:b4:1f:f0:f7:65:8d:2b:38:
36:8e:26:d3:55:e2:d1:e7:b2:3e:c2:2a:92:18:8e:
3e:6d:d5:af:47:f1:17:8e:0e:8c:b7:9f:de:6b:3b:
a2:8c:24:a4:4d:df:e5:a4:45:ab:9e:23:ff:55:79:
1f:80:b0:58:eb:89:fd:1d:c1:f8:57:c9:15:bc:52:
5b:35:fe:2a:15:26:80:0e:a9:8d:9e:38:60:2e:34:
30:08:ec:90:6a:c6:f2:49:de:d3:70:07:dd:28:76:
82:5b:4f:6b:55:68:0d:de:b8:ef:25:1c:dc:3b:54:
a1:e2:52:dd:f0:fd:a5:20:f9:e9:87:e1:c3:36:59:
6e:01:05:fa:76:18:ed:eb:6f:d5:2a:db:45:db:fe:
af:78:59:08:e7:cd:75:60:37:fd:c7:09:06:8f:fa:
26:9d:66:97:4e:d1:54:eb:82:f5:eb:ef:2b:b3:33:
b8:09:d0:cc:a4:92:60:9f:36:f0:b3:97:9f:7d:03:
9e:87:4c:c7:4b:2d:1e:a2:97:ea:ef:70:fc:df:96:
0b:79:b9:12:12:83:4b:9c:dc:1b:f2:15:d6:43:d4:
65:0c:70:dd:4c:44:55:a2:8f:8a:99:1f:37:68:c2:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:3D:D5:79:B3:6A:28:34:32:72:A7:D9:8D:DC:48:73:9C:F5:62
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GCc91Xmzaig0MnKn2Y3cSHOc9WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6e:5a:5b:ae:2a:8d:0f:e2:3e:50:c7:81:97:f2:98:25:3f:
91:30:63:79:2f:d2:4d:75:85:5a:77:4b:f9:68:d1:0c:b6:42:
19:90:d3:b3:34:2b:f6:04:79:3a:97:c2:06:39:ea:89:b4:03:
1c:14:89:a6:09:35:ba:e0:b1:e7:39:22:16:e8:b6:d2:45:de:
d1:73:2c:f1:7c:08:c8:19:c6:e3:b9:41:94:a5:37:55:c7:90:
53:cf:bc:30:a4:a4:4a:3b:09:64:cd:64:f8:31:a9:70:f4:7a:
47:ff:6e:3b:67:c9:aa:cc:17:bc:97:68:b8:20:40:49:df:a6:
5c:72:69:7d:3a:77:13:b3:78:42:cd:1f:49:24:65:dd:93:ca:
9f:5c:75:91:a0:3e:69:6e:89:35:41:7c:13:20:59:5e:16:ae:
e9:2b:ae:9c:50:55:ef:43:2a:90:93:53:9d:b9:64:73:d8:d7:
7a:b1:d5:f9:9f:3d:f5:a1:a3:30:35:ad:f6:31:be:d6:d1:d9:
2c:9b:96:77:cd:ef:87:20:48:7a:a1:38:9b:4d:93:bc:38:d2:
20:de:f8:d4:49:05:f5:08:ac:1f:04:d3:ca:59:ea:be:b9:93:
ac:c7:99:e3:90:89:a4:fb:32:bf:5a:a1:33:b5:05:6a:27:4f:
4d:6e:3b:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdWrEFkOxCEKLJS+tg7gI7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNDA2MTMwNTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODI3M2RkNTc5YjM2YTI4MzQzMjcyYTdkOThkZGM0ODczOWNmNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstymEmo7t+nwEFG5o15I+VPjCNhh
tB/w92WNKzg2jibTVeLR57I+wiqSGI4+bdWvR/EXjg6Mt5/eazuijCSkTd/lpEWr
niP/VXkfgLBY64n9HcH4V8kVvFJbNf4qFSaADqmNnjhgLjQwCOyQasbySd7TcAfd
KHaCW09rVWgN3rjvJRzcO1Sh4lLd8P2lIPnph+HDNlluAQX6dhjt62/VKttF2/6v
eFkI5811YDf9xwkGj/omnWaXTtFU64L16+8rszO4CdDMpJJgnzbws5effQOeh0zH
Sy0eopfq73D835YLebkSEoNLnNwb8hXWQ9RlDHDdTERVoo+KmR83aMLKBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgnPdV5s2ooNDJyp9mN3EhznPViMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvR0NjOTFYbXphaWcwTW5LbjJZM2NTSE9jOVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4KMA0G
CSqGSIb3DQEBCwUAA4IBAQCHblpbriqND+I+UMeBl/KYJT+RMGN5L9JNdYVad0v5
aNEMtkIZkNOzNCv2BHk6l8IGOeqJtAMcFImmCTW64LHnOSIW6LbSRd7RcyzxfAjI
GcbjuUGUpTdVx5BTz7wwpKRKOwlkzWT4Malw9HpH/247Z8mqzBe8l2i4IEBJ36Zc
cml9OncTs3hCzR9JJGXdk8qfXHWRoD5pbok1QXwTIFleFq7pK66cUFXvQyqQk1Od
uWRz2Nd6sdX5nz31oaMwNa32Mb7W0dksm5Z3ze+HIEh6oTibTZO8ONIg3vjUSQX1
CKwfBNPKWeq+uZOsx5njkImk+zK/WqEztQVqJ09NbjtO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org