Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa
File: SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa (raw, json)
Hash identifier: am44GqZ0leLUCyqlaaGyen6nJ5HWYIwr981GE1w4nqo=
Subject key identifier: 4B:19:41:03:61:FE:74:EA:C5:81:59:43:C3:95:EC:8C:8A:CE:F8:03
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018570707A57197A280069208CFA530FB4FC
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 07:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7a:57:19:7a:28:00:69:20:8c:fa:53:0f:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b19410361fe74eac5815943c395ec8c8acef803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:9d:ff:57:ac:94:80:19:d3:75:a2:b6:c8:
a8:3e:ca:07:92:7c:45:af:b0:6d:1e:d5:cd:64:67:
fb:c6:0b:c3:b6:1d:5a:4c:1f:62:00:22:f4:6c:f6:
27:07:e3:59:e0:df:d6:e0:9f:0a:ea:ad:b2:ae:c6:
cd:1e:a4:98:db:e3:79:7c:ba:a7:13:a5:42:d6:ca:
4f:ca:4f:61:25:ac:05:fe:39:fd:68:0e:ea:fd:69:
47:dd:a7:ab:34:af:f8:c5:0c:ff:c2:65:57:6d:ae:
2f:ae:0e:b7:4d:f7:53:86:58:88:bc:22:da:06:99:
ed:d4:ec:53:47:fd:72:11:1a:a1:57:35:b5:b8:f1:
f8:12:5c:34:75:db:65:84:40:ef:37:58:03:35:94:
82:cd:24:ea:17:35:8c:3a:22:ff:45:a5:d9:f3:60:
45:3a:1c:6e:f5:a7:61:dd:c0:d7:04:00:c2:2d:12:
1f:6b:a5:cc:dd:4e:eb:94:ab:4f:99:e7:e2:78:38:
c7:2a:99:2c:fe:7e:70:29:76:10:05:9d:86:94:f7:
d5:85:76:bd:68:d4:dd:1c:8c:be:e0:4b:25:fb:39:
f8:35:b2:a6:fb:03:5b:d9:7a:5b:8b:49:6a:41:e8:
a4:50:7a:d8:09:32:84:58:e8:ae:a5:a3:4f:56:f9:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:41:03:61:FE:74:EA:C5:81:59:43:C3:95:EC:8C:8A:CE:F8:03
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8e:18:03:3e:86:be:98:71:eb:64:db:e2:93:fa:76:a3:1f:
5d:dd:65:8b:f2:36:7b:39:88:08:02:0c:fe:ca:ed:7a:18:52:
60:81:2c:aa:74:2d:d7:53:dd:f0:48:0f:ac:78:38:f7:03:71:
31:8c:f0:10:de:6f:4b:62:a0:39:1d:19:4d:59:30:04:90:07:
8e:fa:56:36:50:60:ce:ca:1d:6e:c8:e5:f7:62:ed:46:38:68:
a3:cb:71:e3:b4:8b:80:f9:de:7c:ef:25:d7:b1:5f:9b:3f:4a:
99:c0:30:ec:99:6a:8b:90:ce:0b:fc:01:12:e9:c5:6c:75:b6:
a7:4f:e7:b9:5a:03:f2:97:22:20:71:93:47:ce:7c:d0:3b:26:
15:c4:d9:69:60:d1:b5:67:f3:40:d4:ae:a6:2a:f8:42:a9:36:
12:4e:0e:72:d0:97:39:13:88:4f:f1:64:d2:de:19:19:42:2d:
16:df:32:a9:69:a5:85:70:d2:3f:58:c1:dc:38:62:d5:4a:76:
0d:60:b9:2c:49:a8:58:1c:3c:20:e3:98:a1:a0:d8:1c:21:06:
9b:94:9a:85:bb:3a:d1:be:ff:17:36:0c:85:e9:75:78:60:4f:
2a:be:1f:ff:ad:17:94:dd:44:c6:31:4a:b4:71:e8:95:de:24:
40:a0:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org