Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SzhTeOflVxCF1ImX7ReCMtVxTlc.roa
File: SzhTeOflVxCF1ImX7ReCMtVxTlc.roa (raw, json)
Hash identifier: nEPn/4BXJ+ZQR7fL1o5RsJonmz4gcXBu6kGbEhdEOtA=
Subject key identifier: 4B:38:53:78:E7:E5:57:10:85:D4:89:97:ED:17:82:32:D5:71:4E:57
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018746180FEBB55AA20EFA3F3FAC67D1EE8D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SzhTeOflVxCF1ImX7ReCMtVxTlc.roa
Signing time: Mon 03 Apr 2023 07:49:54 +0000
ROA not before: Mon 03 Apr 2023 07:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:18:0f:eb:b5:5a:a2:0e:fa:3f:3f:ac:67:d1:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 3 07:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b385378e7e5571085d48997ed178232d5714e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:f1:30:26:c3:df:ab:35:c1:74:9a:2e:fc:
e5:d8:3b:ae:94:3b:92:c6:a9:43:25:09:5a:55:a1:
ff:33:25:4e:c1:f5:6a:c7:b3:a9:c7:50:a5:cc:e5:
87:dc:8b:a2:4a:a9:1f:fa:62:3e:44:73:87:2b:fb:
ee:ba:5b:81:de:40:0d:20:7d:dc:2b:37:a6:b6:3f:
32:47:27:e2:76:22:a5:aa:94:4f:b5:00:ab:fb:0f:
73:a7:95:de:34:d1:79:73:be:2e:07:da:20:3e:ae:
4b:e3:79:55:ba:86:cd:2a:b5:f2:28:db:f4:a8:54:
bf:04:85:68:e5:30:ef:3f:4f:e0:a5:21:ea:ab:e4:
08:d9:f2:88:88:1c:03:62:1d:34:65:d4:51:2b:89:
51:ee:04:34:ca:9b:e4:fa:46:a6:c6:1f:72:15:61:
d7:38:0e:f5:3f:9c:f5:0f:e9:23:51:fa:48:47:d3:
48:c8:b4:3e:ba:65:6e:fe:81:e4:d7:8b:d3:8c:67:
cb:b5:e9:b0:43:1e:70:bd:4d:d3:80:2d:c0:c1:c2:
34:54:28:cf:0f:0e:8a:8b:7c:7e:31:5b:12:00:e6:
a2:ec:64:31:e3:b5:19:67:8e:2d:81:f6:df:68:87:
ef:bc:d5:90:05:e8:72:99:c1:a1:96:80:4b:89:0a:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:53:78:E7:E5:57:10:85:D4:89:97:ED:17:82:32:D5:71:4E:57
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SzhTeOflVxCF1ImX7ReCMtVxTlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:16:f2:d2:63:06:87:ff:72:ac:61:5a:be:b0:6d:c8:88:de:
18:3f:24:a3:11:65:50:cb:36:90:5f:6c:23:45:c7:37:92:8c:
c6:8c:40:ca:0f:62:db:90:a6:8c:11:2d:f9:66:9f:b0:80:cc:
a2:bd:9b:0d:d8:88:22:f7:80:f0:69:00:68:74:05:2f:b4:91:
b4:18:75:85:08:4c:53:55:c6:69:74:48:6d:04:f7:3b:54:6b:
b4:73:14:03:b8:51:cb:6b:5c:a0:cc:bf:c5:6d:f6:44:81:04:
f4:71:8f:a8:93:c2:5f:9e:38:cd:2e:74:dd:14:d4:ef:d4:fd:
a2:e4:4c:78:74:81:67:20:10:a3:31:8d:81:83:20:a7:64:60:
28:ee:76:40:4f:2a:be:41:74:d7:21:a0:a9:7e:15:ea:07:b0:
7a:ee:6a:ce:1a:c1:e3:0f:2c:d5:1e:ef:2b:2b:a1:a6:0d:4e:
a0:53:98:ae:d4:c3:df:3f:4a:4b:02:c2:2c:6c:3c:5f:39:b8:
25:3b:4e:ea:37:e0:f4:d8:d1:8a:4d:b4:3b:73:32:da:5e:a4:
bb:4e:8c:81:49:37:6a:93:ff:9b:b4:33:2a:c0:b5:19:ad:ff:
3f:37:b5:8b:fa:95:cb:09:8d:85:49:45:75:11:a3:b2:ac:a7:
60:30:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org