Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/wQCw9YEZ5h71dPL2UcQAt4dto7Q.roa
File: wQCw9YEZ5h71dPL2UcQAt4dto7Q.roa (raw, json)
Hash identifier: YBP99JS74voAvEXF5aIytTDZkcdIE+I0vBMY+AFVX2I=
Subject key identifier: C1:00:B0:F5:81:19:E6:1E:F5:74:F2:F6:51:C4:00:B7:87:6D:A3:B4
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018756AC4236F667593FC9591E3E3E172C45
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/wQCw9YEZ5h71dPL2UcQAt4dto7Q.roa
Signing time: Thu 06 Apr 2023 13:05:42 +0000
ROA not before: Thu 06 Apr 2023 13:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 87.254.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:ac:42:36:f6:67:59:3f:c9:59:1e:3e:3e:17:2c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 6 13:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c100b0f58119e61ef574f2f651c400b7876da3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:b8:49:c5:d4:4b:bb:12:3b:a3:ed:50:26:
0a:93:c8:0e:38:65:99:f3:6c:1c:ac:bf:de:0d:80:
f6:ee:e5:0c:88:3c:51:00:64:3b:a4:fa:ce:01:72:
bd:49:ea:41:ac:a3:29:e9:70:0f:f4:e7:50:ca:01:
e4:e6:c9:5c:67:05:32:ce:32:45:d5:ef:bd:5f:d0:
1c:89:db:3f:6f:90:e2:85:0e:57:ad:e6:75:99:27:
7d:be:2d:e5:a3:9a:a4:7f:53:21:4a:dd:88:c1:b1:
bf:48:31:8d:2a:7e:17:d4:6c:5a:bd:38:02:63:e5:
2a:50:62:b2:12:6c:90:d6:88:f3:e1:e8:c3:96:5c:
b3:b0:4b:9c:39:d9:85:ad:b6:08:c0:bf:c6:f7:63:
aa:b9:68:4d:35:e8:bc:95:fa:07:39:f5:9e:ee:b5:
a4:1a:e4:27:b4:98:c6:69:dd:56:c5:19:87:1d:0b:
b1:ae:1d:84:58:5d:e1:3b:f1:9a:1b:8a:05:27:91:
78:8a:c9:8b:5d:16:fa:18:72:9b:ce:17:f8:36:6b:
69:0f:3f:67:20:05:e9:16:4c:11:1d:64:cd:53:0c:
85:85:92:02:63:ab:69:bf:c9:12:0d:7f:1c:7e:4c:
7c:4f:c9:bb:78:f4:7c:05:17:fa:ab:02:5a:bf:02:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:00:B0:F5:81:19:E6:1E:F5:74:F2:F6:51:C4:00:B7:87:6D:A3:B4
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/wQCw9YEZ5h71dPL2UcQAt4dto7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5f:c7:52:04:b0:32:ea:50:d6:4d:9b:e4:a6:84:78:a4:3f:
42:97:65:f1:ba:37:fe:64:8a:7a:3b:6e:3e:93:ae:ca:6c:97:
53:70:5c:5c:73:12:c0:89:ef:86:5c:8f:0c:d8:2d:d0:f5:6c:
f3:53:63:30:b3:91:45:de:c9:1c:ec:91:4b:66:ab:2d:af:3f:
bd:df:4e:c5:7f:d8:e2:fb:df:17:72:14:dd:f1:1a:00:ae:25:
11:93:25:6d:b6:1f:62:c5:e9:57:c9:ed:af:1c:f1:78:aa:10:
13:d6:0e:86:88:c5:f1:72:57:ff:5d:e5:8b:db:2a:6c:e7:b7:
c3:d4:19:1f:6f:68:96:e3:5f:88:1b:e1:16:b0:f1:fa:54:e0:
bb:62:93:25:10:59:78:60:c8:88:7e:6f:09:83:00:94:65:14:
4d:dc:4f:e8:6a:a4:af:e8:39:4b:9b:fb:96:00:33:c5:f1:52:
74:67:3e:33:5d:85:3b:86:54:4d:f0:b2:cd:e5:2c:d9:6d:19:
e1:20:93:c9:48:c6:59:4d:41:c4:fc:ab:2f:6a:6f:d0:82:c3:
47:c0:0f:79:5f:4f:56:76:cd:6f:5b:87:4f:38:b0:76:f7:a7:
25:6c:eb:09:c0:a6:b5:43:bd:06:1a:b3:0d:ff:3b:25:b4:28:
ad:f1:13:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdWrEI29mdZP8lZHj4+FyxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNDA2MTMwNTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTAwYjBmNTgxMTllNjFlZjU3NGYyZjY1MWM0MDBiNzg3NmRhM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniO4ScXUS7sSO6PtUCYKk8gOOGWZ
82wcrL/eDYD27uUMiDxRAGQ7pPrOAXK9SepBrKMp6XAP9OdQygHk5slcZwUyzjJF
1e+9X9Acids/b5DihQ5XreZ1mSd9vi3lo5qkf1MhSt2IwbG/SDGNKn4X1GxavTgC
Y+UqUGKyEmyQ1ojz4ejDllyzsEucOdmFrbYIwL/G92OquWhNNei8lfoHOfWe7rWk
GuQntJjGad1WxRmHHQuxrh2EWF3hO/GaG4oFJ5F4ismLXRb6GHKbzhf4NmtpDz9n
IAXpFkwRHWTNUwyFhZICY6tpv8kSDX8cfkx8T8m7ePR8BRf6qwJavwKNiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEAsPWBGeYe9XTy9lHEALeHbaO0MB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvd1FDdzlZRVo1aDcxZFBMMlVjUUF0NGR0bzdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4XMA0G
CSqGSIb3DQEBCwUAA4IBAQCeX8dSBLAy6lDWTZvkpoR4pD9Cl2Xxujf+ZIp6O24+
k67KbJdTcFxccxLAie+GXI8M2C3Q9WzzU2Mws5FF3skc7JFLZqstrz+9307Ff9ji
+98XchTd8RoAriURkyVtth9ixelXye2vHPF4qhAT1g6GiMXxclf/XeWL2yps57fD
1Bkfb2iW41+IG+EWsPH6VOC7YpMlEFl4YMiIfm8JgwCUZRRN3E/oaqSv6DlLm/uW
ADPF8VJ0Zz4zXYU7hlRN8LLN5SzZbRnhIJPJSMZZTUHE/Ksvam/QgsNHwA95X09W
ds1vW4dPOLB296clbOsJwKa1Q70GGrMN/zsltCit8RM4
Generated at Tue Oct 3 19:01:36 2023 by rpki-client on console-ams.rpki-client.org