Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Ru8iflFUJDlVPRqatwpuOFetWw8.roa
File: Ru8iflFUJDlVPRqatwpuOFetWw8.roa (raw, json)
Hash identifier: mtdEvCa0vx53BlpTQVD95wmuowltYdUtxl5mobdD7D0=
Subject key identifier: 46:EF:22:7E:51:54:24:39:55:3D:1A:9A:B7:0A:6E:38:57:AD:5B:0F
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01862DE1FA64220E650895C146575168B06F
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Ru8iflFUJDlVPRqatwpuOFetWw8.roa
Signing time: Tue 07 Feb 2023 21:57:09 +0000
ROA not before: Tue 07 Feb 2023 21:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:e1:fa:64:22:0e:65:08:95:c1:46:57:51:68:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Feb 7 21:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46ef227e51542439553d1a9ab70a6e3857ad5b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:41:6e:e4:20:41:34:d0:49:b8:7c:00:40:
fc:b7:de:8d:22:4b:86:ba:46:0f:a4:6c:30:13:e3:
d4:48:d6:6c:21:cf:2f:a1:f5:08:de:2d:01:49:76:
3b:7f:75:58:fb:7f:24:ad:d7:d5:6c:a5:39:88:8b:
b9:3c:34:05:ef:93:d4:13:b7:03:a9:3f:2a:f0:9b:
a0:83:2a:c6:b8:67:0d:d8:f9:ef:78:00:4e:85:c9:
73:07:e7:02:21:0d:c2:e3:2b:6e:5a:14:21:a1:79:
42:35:f3:49:bb:76:13:cc:4d:fe:91:ea:a6:eb:85:
84:23:a9:0f:6b:a1:29:99:3d:a5:68:a6:e8:69:90:
29:0a:3c:12:e0:4f:43:3c:32:4b:53:b8:89:9a:65:
54:c4:8c:d8:a9:bb:c4:a6:dc:31:8a:13:64:e2:a1:
ea:f0:fd:11:b2:ab:fd:49:4f:65:6c:c9:27:1b:0a:
96:d4:60:bf:30:a5:72:21:e5:0c:16:85:76:d4:2a:
fc:36:59:0c:ed:ee:1d:b5:af:96:60:f1:13:1c:c3:
35:19:1c:2a:b8:ac:7d:5e:33:d4:31:63:e3:1d:f8:
20:e7:56:39:4a:93:6a:76:b1:b6:0d:71:63:81:9e:
88:33:03:ee:08:82:3a:46:57:4c:a5:bb:53:fc:0e:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:22:7E:51:54:24:39:55:3D:1A:9A:B7:0A:6E:38:57:AD:5B:0F
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Ru8iflFUJDlVPRqatwpuOFetWw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ef:e9:c5:ec:6f:25:0b:83:07:26:92:fa:36:38:e3:8e:8f:
4c:74:a2:d2:e0:87:ae:5a:67:36:79:c5:fe:7e:0b:77:76:69:
83:04:bc:1c:3b:96:f0:4d:de:01:58:c3:c4:c6:21:f9:5c:69:
12:c6:c7:97:da:d3:cc:fd:c1:11:d0:e3:be:7a:13:e4:05:ac:
85:bc:cb:91:42:51:d8:4f:8f:b6:bd:6f:6a:33:b1:1f:12:0e:
d7:d3:f2:f6:97:57:4e:e1:82:97:b9:3c:fd:a9:03:00:c4:75:
7f:3a:7b:5b:27:6d:47:90:33:41:5b:8d:4a:7c:d1:88:fb:48:
f6:e1:10:c7:1d:a0:96:c9:16:0c:44:50:a4:95:30:e6:d0:96:
08:c7:1f:77:3d:34:39:db:37:25:00:09:b3:78:4b:86:f2:15:
f5:cd:8c:ae:3f:ec:f3:bf:1b:28:98:f1:d5:d7:0c:eb:82:47:
9a:ae:32:c4:75:29:7a:f8:91:14:ef:1d:8a:c4:63:e8:f6:f7:
e8:81:9f:c6:57:aa:a9:9d:86:68:8d:c3:98:57:af:40:a5:05:
70:29:6d:b9:dd:71:1e:12:f1:8c:9b:69:d5:37:96:2d:da:d2:
42:c7:ad:82:b7:50:38:29:a3:88:c1:c3:9c:c4:41:49:f5:21:
4c:c5:39:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYt4fpkIg5lCJXBRldRaLBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwMjA3MjE1NzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmVmMjI3ZTUxNTQyNDM5NTUzZDFhOWFiNzBhNmUzODU3YWQ1YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKBBbuQgQTTQSbh8AED8t96NIkuG
ukYPpGwwE+PUSNZsIc8vofUI3i0BSXY7f3VY+38krdfVbKU5iIu5PDQF75PUE7cD
qT8q8JuggyrGuGcN2PnveABOhclzB+cCIQ3C4ytuWhQhoXlCNfNJu3YTzE3+keqm
64WEI6kPa6EpmT2laKboaZApCjwS4E9DPDJLU7iJmmVUxIzYqbvEptwxihNk4qHq
8P0Rsqv9SU9lbMknGwqW1GC/MKVyIeUMFoV21Cr8NlkM7e4dta+WYPETHMM1GRwq
uKx9XjPUMWPjHfgg51Y5SpNqdrG2DXFjgZ6IMwPuCII6RldMpbtT/A6WZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbvIn5RVCQ5VT0amrcKbjhXrVsPMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvUnU4aWZsRlVKRGxWUFJxYXR3cHVPRmV0V3c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4TMA0G
CSqGSIb3DQEBCwUAA4IBAQBb7+nF7G8lC4MHJpL6Njjjjo9MdKLS4IeuWmc2ecX+
fgt3dmmDBLwcO5bwTd4BWMPExiH5XGkSxseX2tPM/cER0OO+ehPkBayFvMuRQlHY
T4+2vW9qM7EfEg7X0/L2l1dO4YKXuTz9qQMAxHV/OntbJ21HkDNBW41KfNGI+0j2
4RDHHaCWyRYMRFCklTDm0JYIxx93PTQ52zclAAmzeEuG8hX1zYyuP+zzvxsomPHV
1wzrgkearjLEdSl6+JEU7x2KxGPo9vfogZ/GV6qpnYZojcOYV69ApQVwKW253XEe
EvGMm2nVN5Yt2tJCx62Ct1A4KaOIwcOcxEFJ9SFMxTlA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org