Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/6IiyyS6D9i1IQ_2JMtwoiSRdpto.roa
File: 6IiyyS6D9i1IQ_2JMtwoiSRdpto.roa (raw, json)
Hash identifier: QoMvBfbqSCvWjQkauU6L8CmKnxq2rE7cPrrBrKkX3BE=
Subject key identifier: E8:88:B2:C9:2E:83:F6:2D:48:43:FD:89:32:DC:28:89:24:5D:A6:DA
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018BD788A06731CF7AC2A08A4F73BEAE37DA
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/6IiyyS6D9i1IQ_2JMtwoiSRdpto.roa
Signing time: Thu 16 Nov 2023 09:48:57 +0000
ROA not before: Thu 16 Nov 2023 09:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199191
IP address blocks: 87.246.27.0/24 maxlen: 24
87.246.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:88:a0:67:31:cf:7a:c2:a0:8a:4f:73:be:ae:37:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Nov 16 09:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e888b2c92e83f62d4843fd8932dc2889245da6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:da:0e:08:80:30:63:8f:21:88:8f:f6:c0:
aa:84:2d:42:f5:63:6b:76:be:2a:1d:67:8f:9c:d3:
38:ae:b5:58:0c:93:ac:9b:b9:bb:ce:1c:c4:13:e4:
b9:14:ed:cd:5f:9a:89:cf:b1:1c:eb:d6:52:f3:75:
ea:ca:4a:e7:34:88:92:3a:00:60:06:b2:1d:1f:96:
23:8c:09:9b:01:05:aa:4a:9c:98:9a:19:76:8e:bd:
ff:55:4c:5d:50:76:3e:05:d1:35:91:0f:c8:3a:da:
a9:a1:f1:69:b8:62:d2:f0:b7:98:0e:08:b1:2f:ff:
52:ed:08:f0:28:f3:70:0c:38:c7:7c:bd:3d:40:81:
6d:ab:2e:aa:58:41:b2:76:3f:ba:9d:04:96:e5:7d:
d5:89:0b:30:6d:06:10:b4:30:d5:4e:c9:42:0b:95:
7d:eb:e4:5a:ae:1c:2d:e4:9d:4f:50:41:73:63:71:
88:86:d1:4f:5e:25:e5:c0:98:26:e0:84:f3:d7:74:
59:f8:68:4b:1a:f0:f0:07:bc:0f:a7:1a:88:f6:5e:
11:07:62:0d:a7:80:1d:a7:50:53:4f:ea:3c:0b:98:
13:01:34:59:6a:a9:46:31:a8:d1:b6:66:6c:bc:f5:
56:fd:98:63:ea:59:f0:f5:bf:7b:2d:69:a7:a7:ac:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:B2:C9:2E:83:F6:2D:48:43:FD:89:32:DC:28:89:24:5D:A6:DA
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/6IiyyS6D9i1IQ_2JMtwoiSRdpto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.27.0/24
87.246.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bc:df:e8:38:e7:21:b8:77:21:07:59:86:d5:ee:c2:23:b5:
e3:57:ac:85:8f:6f:ee:f7:31:63:ce:11:ad:0d:cc:77:b5:b9:
56:d9:84:8d:bc:80:20:6e:c2:0a:da:12:fc:8d:c0:7d:fa:30:
0d:16:73:db:13:a8:69:8a:25:7b:47:d1:d0:a2:c4:5a:a0:7d:
8a:76:71:13:cf:4e:33:65:e4:1f:bd:e4:51:cb:f4:46:d9:5b:
de:ae:b3:02:17:4d:1d:d9:a4:96:75:5b:68:06:07:20:62:b4:
41:f0:42:86:a2:40:62:1a:47:02:99:76:d2:cb:47:8e:23:cd:
cf:55:67:11:4f:b8:af:ed:6a:b1:ca:06:ea:ae:c0:7c:2f:b9:
27:1c:ef:37:79:fb:dc:60:0f:1c:76:f7:f1:2f:c3:12:a1:2c:
dd:7b:bf:c3:61:34:90:6a:c5:b0:1e:c1:d3:30:f6:76:25:92:
19:93:f2:e8:c1:41:95:d4:2d:e5:dd:4d:ed:c5:f4:d6:1e:77:
bd:00:e3:1c:44:9d:3d:d2:87:d9:fd:90:5d:3f:05:f3:37:66:
df:d8:a2:32:52:f5:c9:03:27:ec:af:29:0f:20:f9:c7:a7:80:
b2:7b:50:45:26:76:e7:75:6b:ba:23:bd:83:3f:c9:40:f2:0b:
8f:4e:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:15:02 2024 by rpki-client on console-ams.rpki-client.org