Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/vLLIYQiPv2ZQiX7jjPYN6258jgo.roa
File: vLLIYQiPv2ZQiX7jjPYN6258jgo.roa (raw, json)
Hash identifier: axxAc87JKmTOgYEI/nofT97wdjGT+Ox1EtwkSjV33Pk=
Subject key identifier: BC:B2:C8:61:08:8F:BF:66:50:89:7E:E3:8C:F6:0D:EB:6E:7C:8E:0A
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188AB7E77B0A1F67B4408543A6CC36AF0D0
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/vLLIYQiPv2ZQiX7jjPYN6258jgo.roa
Signing time: Sun 11 Jun 2023 17:26:12 +0000
ROA not before: Sun 11 Jun 2023 17:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.31.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ab:7e:77:b0:a1:f6:7b:44:08:54:3a:6c:c3:6a:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 11 17:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb2c861088fbf6650897ee38cf60deb6e7c8e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:03:11:8a:26:92:79:e1:75:eb:d3:7d:ed:
3d:d0:de:5e:67:38:2c:80:36:62:70:1c:54:45:1b:
2d:94:d9:50:63:07:d5:5f:fd:3f:ed:91:ac:1c:9b:
c3:d8:b6:2d:c3:ec:2f:3b:57:4a:39:0b:de:51:48:
a9:62:90:55:64:a0:07:f3:8f:b9:2f:65:7e:5b:9a:
5d:0b:1d:b4:9c:ee:6e:05:70:5d:d1:9b:8a:6a:ba:
87:4d:02:80:5f:1f:7b:c3:9c:db:6b:32:5e:e2:47:
95:19:c3:4c:6a:02:fc:43:60:25:1e:90:a8:27:ac:
67:1c:7e:a1:42:10:43:fa:65:76:1b:27:a3:75:70:
82:0a:df:cd:3a:d3:9e:e7:f8:ce:84:43:c0:2f:a4:
26:2d:be:da:2b:43:15:8f:ce:61:d3:59:3f:ce:ae:
55:e1:9c:37:5e:df:07:a7:30:a7:c2:6d:de:43:da:
d2:53:9c:59:e9:19:c2:b8:e2:80:46:26:3b:8b:48:
3d:cd:00:39:4b:fa:14:01:38:bb:08:1c:38:3c:59:
29:42:97:7d:60:ba:34:43:82:aa:d3:54:de:c4:33:
3e:f4:1d:f6:9e:6f:a5:a7:9e:7a:c5:e6:e9:f8:dc:
ae:3c:46:82:2b:de:74:c5:b4:06:19:bd:b6:eb:fe:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:C8:61:08:8F:BF:66:50:89:7E:E3:8C:F6:0D:EB:6E:7C:8E:0A
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/vLLIYQiPv2ZQiX7jjPYN6258jgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f3:ee:94:9f:db:90:67:cd:37:20:30:90:8b:3d:4e:3f:18:
15:ad:7b:96:ca:ab:32:6f:6f:14:67:20:84:42:4a:50:71:48:
cf:73:3e:69:d5:a7:11:b4:38:59:e6:bd:da:2e:95:1c:79:3d:
dd:14:3e:8a:ad:11:a5:fe:17:49:a1:78:59:fb:16:53:2a:47:
90:17:9c:52:97:c7:8a:74:0d:de:21:18:46:ef:d9:83:88:ac:
6f:c2:53:12:af:99:a0:2a:c9:d7:19:f0:a5:b6:52:4e:fe:98:
74:35:3d:2f:0f:d6:15:b5:1c:8b:af:a8:39:82:0f:d5:3b:24:
e6:10:35:a6:40:80:f0:87:fd:20:5e:2b:8b:d1:67:1f:a8:93:
99:82:70:ef:cd:c5:30:fc:08:18:9c:ea:de:80:94:5f:6e:07:
dc:c8:95:ff:47:03:f7:e7:6e:16:68:41:d3:bb:aa:e3:20:71:
d0:0e:70:e7:99:e2:98:2d:a2:ac:0d:c9:c0:14:ca:2f:36:be:
3f:b7:1f:3a:72:c9:e8:55:2e:a8:0f:59:30:c0:79:e5:d8:eb:
14:cf:eb:4e:08:fa:97:17:74:70:a2:b2:b7:5a:68:d8:9b:36:
0a:77:0e:99:81:2a:c4:62:89:f9:0d:00:e3:6e:16:d4:bc:2b:
63:3e:a2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:39 2023 by rpki-client on console-ams.rpki-client.org