Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Nm83dt3PB7kDDEJxdnrWcYspE4w.roa
File: Nm83dt3PB7kDDEJxdnrWcYspE4w.roa (raw, json)
Hash identifier: OlbHHjCnoHhEMr12Xj98kOBdzah3Yzgr4has6Qjs3BQ=
Subject key identifier: 36:6F:37:76:DD:CF:07:B9:03:0C:42:71:76:7A:D6:71:8B:29:13:8C
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01880A074BFE8C0AE2003A663D15B0DBDA00
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Nm83dt3PB7kDDEJxdnrWcYspE4w.roa
Signing time: Thu 11 May 2023 08:57:10 +0000
ROA not before: Thu 11 May 2023 08:57:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:07:4b:fe:8c:0a:e2:00:3a:66:3d:15:b0:db:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 11 08:57:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366f3776ddcf07b9030c4271767ad6718b29138c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:43:c0:7b:f6:f3:52:22:75:9e:85:ea:77:
66:a0:0b:59:db:14:a6:99:3b:94:10:db:2b:d0:eb:
a6:22:fd:27:11:1f:c6:8e:8f:b6:24:98:8b:32:e2:
10:b3:bb:30:9e:1b:e2:9a:ea:13:f3:ed:e2:09:cc:
3b:57:1c:65:cf:b3:6e:90:6a:5d:ae:43:e0:51:57:
ae:bf:11:96:ea:97:5f:12:47:5e:9b:be:56:0d:ca:
c0:60:9a:26:78:ca:a6:2a:44:4b:ca:3b:d1:ab:23:
2e:46:20:a0:4d:08:4c:24:ec:78:4a:d9:63:a0:5a:
04:73:12:dc:5a:37:7d:a5:91:57:22:5b:54:05:f9:
74:8f:e5:c0:f7:6b:e2:5b:9d:a6:80:ab:3b:e5:2b:
7c:12:44:cf:5f:29:7d:54:b8:12:eb:8c:5b:85:66:
ab:72:fb:54:f0:23:2b:33:8f:9d:85:6a:c3:82:e7:
d6:22:62:10:2a:ba:0b:06:ae:d6:a9:1c:d7:1c:a1:
f8:dd:5c:d5:e2:3f:bf:a6:54:4d:a4:be:f9:e0:53:
a3:d5:2a:7a:21:c2:15:5c:31:cb:a4:33:f9:4e:db:
1f:03:11:0e:55:57:1d:1a:87:b0:87:44:c5:7d:19:
52:6f:67:e4:48:0e:14:78:5f:a6:7d:3a:c2:50:2f:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:37:76:DD:CF:07:B9:03:0C:42:71:76:7A:D6:71:8B:29:13:8C
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Nm83dt3PB7kDDEJxdnrWcYspE4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/23
Signature Algorithm: sha256WithRSAEncryption
94:ea:d8:92:f7:1f:3a:e3:bd:11:2a:52:37:f4:47:5d:c2:ab:
1d:e0:bd:3d:a9:8a:1e:bb:c3:c9:72:7b:19:5f:3d:ce:72:e8:
e9:8b:55:f2:ff:fb:da:b4:3d:ca:f4:0c:7b:42:e2:cc:59:4a:
29:05:9d:2a:05:44:5f:d1:91:4c:78:18:03:95:c9:57:dd:9c:
e7:d0:a0:9f:1b:10:76:09:fb:e6:b7:55:04:16:cc:93:4a:2a:
02:e4:e0:64:6a:22:4a:36:5f:54:2d:ae:e7:52:63:c0:f4:a4:
dd:69:95:10:45:0e:70:d6:e9:79:a5:95:4e:de:fe:e0:37:a4:
ac:b4:4b:12:0e:af:a6:5b:24:ba:5c:58:bc:ff:a7:9c:82:89:
8c:9b:5f:4f:ca:ff:3c:2a:ee:f8:5b:2a:33:ca:a0:99:a7:47:
e6:a8:ce:54:4c:79:92:6c:b6:72:2a:29:de:30:62:9f:dd:2f:
84:0f:ea:44:7d:aa:86:1e:db:72:17:3a:d5:9a:8f:de:10:4c:
bc:52:0f:1a:e2:c0:54:1e:7b:8e:00:b9:bc:bf:22:53:05:c4:
d9:e0:bd:09:d8:af:26:8a:09:ac:ee:03:3f:17:f1:79:70:b1:
9d:46:14:ba:77:d5:54:0e:a3:30:a3:91:10:54:a5:c2:45:cb:
bd:25:0a:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgKB0v+jAriADpmPRWw29oAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNTExMDg1NzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjZmMzc3NmRkY2YwN2I5MDMwYzQyNzE3NjdhZDY3MThiMjkxMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppZDwHv281IidZ6F6ndmoAtZ2xSm
mTuUENsr0OumIv0nER/Gjo+2JJiLMuIQs7swnhvimuoT8+3iCcw7Vxxlz7NukGpd
rkPgUVeuvxGW6pdfEkdem75WDcrAYJomeMqmKkRLyjvRqyMuRiCgTQhMJOx4Stlj
oFoEcxLcWjd9pZFXIltUBfl0j+XA92viW52mgKs75St8EkTPXyl9VLgS64xbhWar
cvtU8CMrM4+dhWrDgufWImIQKroLBq7WqRzXHKH43VzV4j+/plRNpL754FOj1Sp6
IcIVXDHLpDP5TtsfAxEOVVcdGoewh0TFfRlSb2fkSA4UeF+mfTrCUC/eawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZvN3bdzwe5AwxCcXZ61nGLKROMMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvTm04M2R0M1BCN2tEREVKeGRucldjWXNwRTR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/4IMA0G
CSqGSIb3DQEBCwUAA4IBAQCU6tiS9x86470RKlI39Eddwqsd4L09qYoeu8PJcnsZ
Xz3Ocujpi1Xy//vatD3K9Ax7QuLMWUopBZ0qBURf0ZFMeBgDlclX3Zzn0KCfGxB2
Cfvmt1UEFsyTSioC5OBkaiJKNl9ULa7nUmPA9KTdaZUQRQ5w1ul5pZVO3v7gN6Ss
tEsSDq+mWyS6XFi8/6ecgomMm19Pyv88Ku74WyozyqCZp0fmqM5UTHmSbLZyKine
MGKf3S+ED+pEfaqGHttyFzrVmo/eEEy8Ug8a4sBUHnuOALm8vyJTBcTZ4L0J2K8m
igms7gM/F/F5cLGdRhS6d9VUDqMwo5EQVKXCRcu9JQpL
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org