Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/b6kYiMzHfZUD-C5aaDD7YRWbXH8.roa
File: b6kYiMzHfZUD-C5aaDD7YRWbXH8.roa (raw, json)
Hash identifier: dMS7IBcq4nxo5zKhjKXC2FrRQlUyGPEvbOa0cIa1lHs=
Subject key identifier: 6F:A9:18:88:CC:C7:7D:95:03:F8:2E:5A:68:30:FB:61:15:9B:5C:7F
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0189119531A61A1F8A94EF3FE778E954C074
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/b6kYiMzHfZUD-C5aaDD7YRWbXH8.roa
Signing time: Sat 01 Jul 2023 13:12:17 +0000
ROA not before: Sat 01 Jul 2023 13:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 87.254.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:95:31:a6:1a:1f:8a:94:ef:3f:e7:78:e9:54:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 1 13:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa91888ccc77d9503f82e5a6830fb61159b5c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:3a:1c:57:25:99:e8:9a:bb:44:56:5a:50:
c8:6a:a5:af:df:bf:12:73:1b:9d:33:51:64:48:55:
72:ea:86:6c:76:97:51:eb:5c:86:86:2c:f0:19:56:
96:d8:aa:25:6d:c3:88:31:d0:c7:e8:f5:4d:8c:6c:
10:eb:7a:21:1c:30:13:6b:e1:fd:5c:ee:f7:cc:14:
99:ea:e9:8e:77:79:77:35:50:38:aa:29:41:33:28:
72:b8:7e:e7:e1:0a:a6:a9:a6:8b:d7:72:5e:af:25:
b6:ce:e4:79:8d:7e:7b:db:bc:a9:dc:7f:6f:90:f9:
c7:4d:87:af:79:ea:bc:bf:9d:90:40:8e:fc:68:16:
95:67:c9:d3:aa:3c:29:4d:e3:04:16:13:e8:bd:45:
57:40:5b:78:fb:97:f0:06:a6:0d:b5:e5:de:50:4b:
33:33:df:61:09:4e:97:e3:a7:34:f7:6f:28:d3:49:
b8:91:7e:4c:d4:1c:ec:e1:f7:8c:ef:28:29:d4:a0:
0e:75:a9:39:bb:e9:71:75:2a:79:79:97:ce:3a:3a:
45:30:7c:f5:4f:c0:6a:e5:5d:00:3e:fd:00:4a:9c:
f5:f6:f6:c9:6d:2c:4a:ff:2e:f5:52:26:64:5b:73:
81:40:7c:16:9e:61:09:72:10:a5:8c:c5:4e:49:e6:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A9:18:88:CC:C7:7D:95:03:F8:2E:5A:68:30:FB:61:15:9B:5C:7F
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/b6kYiMzHfZUD-C5aaDD7YRWbXH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
Signature Algorithm: sha256WithRSAEncryption
86:93:df:20:93:d0:c9:c4:00:02:73:98:ba:51:57:a1:aa:ac:
25:cc:59:1e:9d:ea:2d:ec:6a:9f:7d:e0:8d:52:4b:56:72:dc:
58:82:1b:47:60:61:33:bc:fa:6e:7d:17:57:25:58:5c:08:fc:
85:64:fd:5f:c9:b8:96:c5:f8:23:49:da:0d:00:a0:f1:06:ed:
c5:54:c7:f6:13:4c:cc:06:5a:81:b7:1d:6a:e4:a3:6c:9a:45:
8d:af:c8:c9:82:0e:73:15:ca:6c:4f:79:9e:22:69:7d:0d:e7:
5a:59:03:a2:20:de:5f:91:7a:a1:91:1c:e0:45:75:7c:9e:c8:
fb:6a:5e:f7:99:c9:44:d1:d8:00:31:c3:e5:cb:da:b2:4e:9c:
c4:da:f3:8b:3c:1b:f9:f3:31:e4:84:a1:f1:a9:fb:a3:38:98:
86:ec:df:09:19:06:16:9c:c8:47:f3:0e:1e:40:0e:6d:6f:4c:
8d:bd:06:76:55:d4:a5:c5:9c:a8:a5:91:0d:7f:f4:ab:a8:67:
3d:1b:ff:b1:ee:67:09:a0:c8:3e:29:9d:2e:5d:12:23:1c:79:
47:b0:96:5c:b6:de:b2:56:cb:94:6b:5e:fc:37:48:27:0f:34:
25:95:6a:32:58:49:23:e6:2a:7b:56:e8:f2:41:ee:10:4a:45:
1b:27:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 10:55:30 2023 by rpki-client on console-fra.rpki-client.org