Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/lhqEiRF7HHlrvnguv9joeA_Zj3Y.roa
File: lhqEiRF7HHlrvnguv9joeA_Zj3Y.roa (raw, json)
Hash identifier: yfMQZrSz/ABYtK+mp5qsDEjAYDJpCWT5hhnEKqFWpHo=
Subject key identifier: 96:1A:84:89:11:7B:1C:79:6B:BE:78:2E:BF:D8:E8:78:0F:D9:8F:76
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0186BC36E9FF9B678E2AEF4EAC2E4B12FB0B
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/lhqEiRF7HHlrvnguv9joeA_Zj3Y.roa
Signing time: Tue 07 Mar 2023 13:16:00 +0000
ROA not before: Tue 07 Mar 2023 13:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 87.254.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:36:e9:ff:9b:67:8e:2a:ef:4e:ac:2e:4b:12:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Mar 7 13:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=961a8489117b1c796bbe782ebfd8e8780fd98f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:aa:d7:10:91:8e:a6:0c:4a:8a:43:bc:6a:
3b:6e:59:2f:c4:9e:fc:69:97:f3:07:c4:4a:13:a5:
31:73:de:5b:61:b4:2d:68:2d:92:49:c4:55:02:bb:
b0:e5:f0:1a:23:19:37:b6:f8:49:f8:d0:f2:5b:c4:
c5:1c:85:27:93:46:b6:1f:bf:b2:84:fc:f1:b6:20:
cc:b7:dc:50:c8:4b:97:e4:8f:c2:ae:33:99:1f:8a:
52:8d:35:f1:29:46:c3:07:62:72:cb:cc:68:6d:50:
88:86:d3:63:8c:b9:62:19:46:35:14:fe:24:71:b6:
fe:e5:57:78:82:49:c7:67:88:3d:be:5e:4d:68:0d:
ed:2a:37:1c:27:1f:7e:8b:e7:45:bf:88:2d:cb:0b:
c0:fb:b3:5a:44:27:ef:ad:aa:5e:b8:7d:bc:71:a7:
3e:79:32:79:6c:e3:c8:ff:0c:fe:6e:cb:89:bf:ab:
24:14:47:18:91:c9:bd:fa:9d:51:71:06:a8:e2:ee:
4f:cd:2d:14:45:70:30:61:b4:9c:19:2f:2e:f1:d3:
10:2b:84:ee:d4:72:34:fb:08:7a:98:9e:b3:b3:7b:
9e:f0:cb:ff:ea:6e:ac:11:33:5b:d2:c4:09:67:ed:
7e:08:ac:38:8d:ef:aa:4e:5a:f2:64:63:08:f1:3d:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:84:89:11:7B:1C:79:6B:BE:78:2E:BF:D8:E8:78:0F:D9:8F:76
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/lhqEiRF7HHlrvnguv9joeA_Zj3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
79:59:2d:34:0d:e4:3e:99:43:5e:0f:22:67:f0:85:d6:66:73:
94:03:c2:b4:dd:d2:83:a5:52:29:5c:eb:79:49:9b:22:66:c5:
e7:c1:eb:69:71:a6:67:12:ee:8b:f7:6b:b0:7a:4c:2b:54:26:
20:70:1d:bb:d2:e7:66:69:a6:ab:8e:29:c4:ed:e3:a3:be:34:
d7:d1:a4:51:f4:7e:b9:69:0f:e7:5f:2f:42:ec:5e:ab:af:88:
f8:0b:21:62:d0:f8:ed:cf:fe:c5:41:b3:c5:c6:05:e2:9c:fc:
c5:18:bb:2e:63:73:e3:5d:aa:43:02:44:c9:c9:89:d6:fb:48:
92:78:48:6f:a4:46:f6:c8:81:00:6d:da:66:bb:4b:bd:94:f8:
32:38:32:cc:82:84:e0:78:6d:af:bc:9d:78:99:43:ea:10:9f:
8b:d7:62:36:d4:1f:b2:19:88:11:3e:ba:f1:c3:5b:c2:19:82:
51:80:6a:2f:87:a1:cc:a0:8c:5f:a2:47:c5:49:6c:3d:01:7f:
7e:54:62:32:05:80:2c:c6:9f:0d:3f:cd:45:25:9d:76:d6:6a:
4d:7d:bd:69:ff:ef:da:48:d6:2a:52:84:82:b6:ac:5a:7e:b5:
ac:22:1a:27:98:ca:ed:f7:c7:71:64:07:01:03:14:8a:1f:0d:
5d:93:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 19:01:36 2023 by rpki-client on console-ams.rpki-client.org