Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/QBSpCHZ9Vel5d7DedKlvBYxuzbU.roa
File: QBSpCHZ9Vel5d7DedKlvBYxuzbU.roa (raw, json)
Hash identifier: 9j//S6pxO3LdcjH7LtxxFJgvjyo001egX2+ySH/g6o8=
Subject key identifier: 40:14:A9:08:76:7D:55:E9:79:77:B0:DE:74:A9:6F:05:8C:6E:CD:B5
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018B209E20F7EFCD946E6A9979625C9E9520
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/QBSpCHZ9Vel5d7DedKlvBYxuzbU.roa
Signing time: Wed 11 Oct 2023 21:21:55 +0000
ROA not before: Wed 11 Oct 2023 21:21:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 87.254.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:9e:20:f7:ef:cd:94:6e:6a:99:79:62:5c:9e:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Oct 11 21:21:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4014a908767d55e97977b0de74a96f058c6ecdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:b1:54:94:bb:6c:83:c1:d8:d8:b5:67:73:
81:4f:7f:b3:80:61:c9:83:e3:3f:13:a6:08:65:cb:
c4:b0:81:c2:43:37:a2:64:d1:cf:61:ec:a0:50:2e:
bd:ec:96:7c:e6:be:fa:71:22:f5:37:7b:e0:95:3f:
e8:e9:b0:87:7a:c4:64:a9:59:4c:24:38:7c:7e:ad:
9e:cd:11:14:4e:be:d6:87:b7:19:72:e1:0d:a2:37:
f0:f3:71:d2:24:ef:41:de:a0:09:d0:61:3a:23:0b:
e6:1e:6a:93:5c:30:fd:41:f0:dc:80:da:73:43:48:
e8:8f:49:e4:73:2e:0c:07:8a:71:b6:30:70:ea:58:
52:c0:7b:34:ad:1e:d8:06:74:b7:f3:c7:4a:c0:0a:
4e:2e:5e:29:1c:74:99:d4:a1:95:a3:cc:10:b2:2e:
39:f7:1d:bc:6d:40:5f:bf:dd:15:08:16:d8:02:a3:
da:d2:c9:9f:ec:8a:ee:09:e7:ae:a7:6c:43:6a:38:
82:f0:4a:3e:f8:ee:8d:44:4e:41:b8:46:c7:a9:b1:
a6:af:8e:03:38:2f:6d:63:48:48:fb:01:3d:20:3f:
88:59:f3:e1:f1:ac:31:bd:47:05:cf:69:1b:9e:a6:
f0:45:89:4c:81:db:3c:6b:12:7c:d0:2a:31:d0:da:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:A9:08:76:7D:55:E9:79:77:B0:DE:74:A9:6F:05:8C:6E:CD:B5
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/QBSpCHZ9Vel5d7DedKlvBYxuzbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9c:6f:c2:27:57:55:00:2e:66:45:6f:67:82:1f:e4:7a:a0:
c1:7a:9d:3c:08:78:ef:be:e0:d5:ee:ef:ea:1a:38:86:20:b0:
8d:f5:ec:c4:21:cd:52:83:24:c9:cb:a6:e7:18:d3:44:1f:a3:
de:9a:5a:bf:88:39:08:6b:a9:74:e9:28:4d:49:79:fc:66:b1:
e8:98:75:a7:16:93:68:cd:cb:b5:89:26:d2:8b:ac:e7:54:d5:
59:15:e1:88:14:c9:f5:1b:70:a8:54:22:c2:68:ac:66:2a:6a:
ff:b0:7a:37:68:2f:d6:2a:34:f3:ba:3e:45:6a:20:14:38:f2:
aa:16:04:cf:ef:e3:e8:49:37:24:16:70:2d:03:7b:36:3d:c8:
11:46:a3:43:56:40:9f:de:0a:f0:00:7e:f5:e2:d4:c9:3e:59:
ac:af:b7:84:bb:72:30:50:21:1e:80:32:03:1c:fd:ec:48:c4:
5a:89:2a:7d:fe:f1:02:a5:19:9c:5b:ac:f4:61:61:8f:87:ba:
4f:b7:c5:5e:fb:11:92:ca:ee:fd:a5:f2:61:4a:66:40:91:73:
22:44:a1:32:21:2e:f6:c9:c0:cd:f3:69:8a:b3:9b:de:20:10:
0d:92:57:38:9d:27:48:7c:ba:48:d5:d3:a4:39:83:d9:bd:fa:
e5:91:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 10:19:22 2023 by rpki-client on console-ams.rpki-client.org