Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/t2Ppjan02fwrfPQjhRCWuUnoQ64.roa
File: t2Ppjan02fwrfPQjhRCWuUnoQ64.roa (raw, json)
Hash identifier: wmaZNMpzkVXgPNy8VciC5VCK90bZlIvU0hv9kaPLXcY=
Subject key identifier: B7:63:E9:8D:A9:F4:D9:FC:2B:7C:F4:23:85:10:96:B9:49:E8:43:AE
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018746180F7909AF4A3CC812E769F0F86B4B
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/t2Ppjan02fwrfPQjhRCWuUnoQ64.roa
Signing time: Mon 03 Apr 2023 07:49:54 +0000
ROA not before: Mon 03 Apr 2023 07:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.31.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:18:0f:79:09:af:4a:3c:c8:12:e7:69:f0:f8:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 3 07:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b763e98da9f4d9fc2b7cf423851096b949e843ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:6a:0c:80:0b:7c:83:1d:b9:62:e1:ff:08:
7f:1f:a1:7a:8b:12:52:18:59:32:df:5a:9e:4d:14:
1e:24:e0:b1:9b:5a:60:9d:40:ed:1c:b8:d6:d4:58:
b3:ed:b3:d8:43:ef:37:6c:3e:f6:da:e3:c9:1a:aa:
95:02:6c:c9:8f:42:78:39:15:c8:f9:fd:b9:17:16:
61:6c:d8:58:74:9f:1f:32:c4:6f:77:5a:84:95:5c:
e4:5f:b2:6e:6d:4d:0f:03:5d:d5:94:fb:6e:bb:52:
84:8c:4f:af:5b:f1:98:2f:ae:d3:26:e0:37:e8:b6:
06:19:e7:8b:48:34:3b:fe:46:9b:9d:0c:f5:67:b9:
0c:68:98:ee:3f:5f:39:a0:6c:86:19:ef:88:3c:dd:
2f:b0:ad:1d:e9:d2:af:21:40:4b:27:85:35:c3:9f:
7f:ba:0b:9b:8b:b3:c4:9d:7a:cf:6b:cc:24:c0:c7:
e4:1c:73:35:fb:6a:6a:2d:18:62:55:02:48:50:a6:
52:9c:f4:d9:f8:4a:23:d2:8d:91:ba:ee:3e:15:29:
aa:64:b6:21:48:e0:d1:ec:c0:df:65:94:96:c4:9c:
47:80:40:3b:f1:e5:48:8c:3d:aa:50:58:54:4c:00:
f3:ef:77:9a:f0:b8:76:e6:77:5e:24:47:56:50:fd:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:E9:8D:A9:F4:D9:FC:2B:7C:F4:23:85:10:96:B9:49:E8:43:AE
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/t2Ppjan02fwrfPQjhRCWuUnoQ64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:32:58:86:99:08:77:bf:b3:5b:a7:28:e0:2f:e2:21:8a:
56:cc:c1:60:2c:ef:d8:d6:30:31:bb:36:6a:49:42:dc:fc:d6:
88:e8:ea:7d:46:f2:36:e6:d7:6c:59:9e:08:23:d0:db:04:db:
da:c2:69:0f:75:45:34:b0:53:da:aa:76:38:2d:00:67:57:4e:
01:bd:9c:cf:7c:1e:77:c3:d3:01:ee:8a:77:51:5a:ad:9c:d7:
83:b4:de:55:ac:07:ba:0d:8d:15:e0:0e:1e:44:57:92:a2:87:
78:2c:6f:9c:a4:be:c3:4c:b4:77:2c:33:8f:eb:03:5e:34:dd:
7d:63:4d:a8:32:3f:58:fe:fe:c8:f2:4e:6a:32:57:ba:de:57:
ea:3b:91:14:e4:7b:02:11:16:0f:a7:ab:82:dd:e4:60:25:9c:
e7:71:37:c4:56:4f:b6:0e:54:0f:a0:9f:29:85:21:8f:11:07:
6c:73:dc:f5:80:c2:a0:be:ca:ca:78:5c:88:6c:43:f2:a2:62:
ee:1b:cd:1d:7c:81:e4:26:83:99:0c:be:d6:6c:d4:2d:c3:94:
5f:2b:e0:cf:84:b7:af:36:8d:2d:f4:c1:35:4a:f3:94:ff:63:
fd:db:1f:c7:d1:1e:55:19:f9:52:e9:95:35:58:19:d1:0b:f8:
88:0e:6d:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdGGA95Ca9KPMgS52nw+GtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNDAzMDc0OTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzYzZTk4ZGE5ZjRkOWZjMmI3Y2Y0MjM4NTEwOTZiOTQ5ZTg0M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUZqDIALfIMduWLh/wh/H6F6ixJS
GFky31qeTRQeJOCxm1pgnUDtHLjW1Fiz7bPYQ+83bD722uPJGqqVAmzJj0J4ORXI
+f25FxZhbNhYdJ8fMsRvd1qElVzkX7JubU0PA13VlPtuu1KEjE+vW/GYL67TJuA3
6LYGGeeLSDQ7/kabnQz1Z7kMaJjuP185oGyGGe+IPN0vsK0d6dKvIUBLJ4U1w59/
ugubi7PEnXrPa8wkwMfkHHM1+2pqLRhiVQJIUKZSnPTZ+Eoj0o2Ruu4+FSmqZLYh
SODR7MDfZZSWxJxHgEA78eVIjD2qUFhUTADz73ea8Lh25ndeJEdWUP2GkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLdj6Y2p9Nn8K3z0I4UQlrlJ6EOuMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvdDJQcGphbjAyZndyZlBRamhSQ1d1VW5vUTY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/4JAwQA
V/4fMA0GCSqGSIb3DQEBCwUAA4IBAQB6TTJYhpkId7+zW6co4C/iIYpWzMFgLO/Y
1jAxuzZqSULc/NaI6Op9RvI25tdsWZ4II9DbBNvawmkPdUU0sFPaqnY4LQBnV04B
vZzPfB53w9MB7op3UVqtnNeDtN5VrAe6DY0V4A4eRFeSood4LG+cpL7DTLR3LDOP
6wNeNN19Y02oMj9Y/v7I8k5qMle63lfqO5EU5HsCERYPp6uC3eRgJZzncTfEVk+2
DlQPoJ8phSGPEQdsc9z1gMKgvsrKeFyIbEPyomLuG80dfIHkJoOZDL7WbNQtw5Rf
K+DPhLevNo0t9ME1SvOU/2P92x/H0R5VGflS6ZU1WBnRC/iIDm0I
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org