Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/KH6IbRrzW_5KvlnGc2et33L078E.roa
File: KH6IbRrzW_5KvlnGc2et33L078E.roa (raw, json)
Hash identifier: IxlLQvE6ImwzjDXvX75u2lK0SIVC2Hp9gTfd5Xi0CUE=
Subject key identifier: 28:7E:88:6D:1A:F3:5B:FE:4A:BE:59:C6:73:67:AD:DF:72:F4:EF:C1
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0192421C619BCC27E5596B1AB1C0B83451CA
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/KH6IbRrzW_5KvlnGc2et33L078E.roa
Signing time: Mon 30 Sep 2024 08:46:49 +0000
ROA not before: Mon 30 Sep 2024 08:46:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 87.246.8.0/24 maxlen: 24
87.246.9.0/24 maxlen: 24
87.246.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 06:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:1c:61:9b:cc:27:e5:59:6b:1a:b1:c0:b8:34:51:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 30 08:46:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287e886d1af35bfe4abe59c67367addf72f4efc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:29:59:88:7b:e3:61:10:f7:4d:16:95:95:
45:2f:7b:86:df:7c:7b:03:a2:0d:21:f2:47:b5:ff:
16:b3:8f:26:9d:37:59:e2:b9:39:3e:db:3c:fd:4b:
5f:d7:41:e2:bd:32:b4:2c:eb:6d:51:d1:e0:76:ab:
f7:d9:38:0f:e6:32:c1:be:41:7b:d8:55:b0:06:f4:
87:ee:af:0a:a2:8d:58:71:df:d7:a3:91:63:58:68:
21:99:f5:ef:c4:12:b2:61:63:9a:3f:67:44:18:37:
77:6f:de:40:ba:31:e3:84:e7:ab:62:e7:c6:a1:25:
df:f8:01:b6:a8:ba:ac:34:6b:33:9a:31:98:ef:ea:
cf:07:5d:6f:e0:be:66:8b:a9:97:93:a0:a7:7f:89:
39:2f:43:35:db:b6:9c:a9:4a:fb:5e:b7:a1:f7:02:
c9:0e:88:d9:fc:8b:f1:e7:54:4c:0b:16:18:bd:81:
15:f0:ac:33:f1:bb:4d:73:e8:39:a5:53:72:32:dc:
f8:78:9e:17:61:17:b1:6a:60:bc:20:ee:5e:d5:79:
34:85:a4:04:37:6d:0f:b2:86:b8:97:95:35:49:21:
cc:18:57:ed:79:a5:40:97:54:f9:58:af:e4:90:4e:
c9:21:f9:e0:3e:cc:b5:b7:65:de:5d:77:41:a4:fa:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7E:88:6D:1A:F3:5B:FE:4A:BE:59:C6:73:67:AD:DF:72:F4:EF:C1
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/KH6IbRrzW_5KvlnGc2et33L078E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.8.0-87.246.10.255
Signature Algorithm: sha256WithRSAEncryption
82:f9:90:7d:fd:0d:6a:5f:3d:62:5b:4e:9d:7c:46:0b:5e:c1:
60:92:79:42:e5:20:05:0b:46:9f:01:f7:c9:0a:f4:06:73:fa:
b9:e5:e8:22:f4:c2:ba:77:33:40:0c:6b:43:cd:48:dd:d8:00:
9c:92:86:73:6b:2f:9f:c3:78:df:f0:18:04:b7:e8:6b:16:92:
42:c7:4e:88:2a:1d:11:36:54:45:00:26:d7:19:a9:41:43:e9:
41:83:e2:e9:e8:89:4a:17:c0:4f:f5:2d:6a:ca:1c:2f:60:dc:
15:38:94:83:10:3c:0b:bb:d9:ec:d2:91:f7:25:58:cb:a0:ba:
ab:61:4f:2a:41:09:89:60:5c:60:38:21:a2:01:aa:18:0c:8a:
5a:d4:39:ab:d1:ec:1f:2a:e8:f7:93:57:1a:66:a0:99:39:22:
59:86:a4:01:84:8f:f6:02:44:29:92:39:fb:d3:f7:b7:dc:8d:
7f:2e:e1:02:3a:72:cf:3f:ce:75:fb:e4:da:5f:49:75:08:6b:
d8:79:e1:37:8c:65:06:57:9e:74:41:a2:81:44:68:37:c7:da:
4e:36:78:48:4b:1f:7b:cf:a4:60:2b:92:15:2e:4f:8c:cb:f0:
de:ff:14:84:89:0e:40:37:ab:b0:44:63:33:42:06:e1:de:23:
94:e9:63:1c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJCHGGbzCflWWsascC4NFHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjQwOTMwMDg0NjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODdlODg2ZDFhZjM1YmZlNGFiZTU5YzY3MzY3YWRkZjcyZjRlZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkIpWYh742EQ900WlZVFL3uG33x7
A6INIfJHtf8Ws48mnTdZ4rk5Pts8/Utf10HivTK0LOttUdHgdqv32TgP5jLBvkF7
2FWwBvSH7q8Koo1Ycd/Xo5FjWGghmfXvxBKyYWOaP2dEGDd3b95AujHjhOerYufG
oSXf+AG2qLqsNGszmjGY7+rPB11v4L5mi6mXk6Cnf4k5L0M127acqUr7Xreh9wLJ
DojZ/Ivx51RMCxYYvYEV8Kwz8btNc+g5pVNyMtz4eJ4XYRexamC8IO5e1Xk0haQE
N20Psoa4l5U1SSHMGFfteaVAl1T5WK/kkE7JIfngPsy1t2XeXXdBpPpa8wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCh+iG0a81v+Sr5ZxnNnrd9y9O/BMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvS0g2SWJScnpXXzVLdmxuR2MyZXQzM0wwNzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANX9ggD
BABX9gowDQYJKoZIhvcNAQELBQADggEBAIL5kH39DWpfPWJbTp18RgtewWCSeULl
IAULRp8B98kK9AZz+rnl6CL0wrp3M0AMa0PNSN3YAJyShnNrL5/DeN/wGAS36GsW
kkLHTogqHRE2VEUAJtcZqUFD6UGD4unoiUoXwE/1LWrKHC9g3BU4lIMQPAu72ezS
kfclWMuguqthTypBCYlgXGA4IaIBqhgMilrUOavR7B8q6PeTVxpmoJk5IlmGpAGE
j/YCRCmSOfvT97fcjX8u4QI6cs8/znX75NpfSXUIa9h54TeMZQZXnnRBooFEaDfH
2k42eEhLH3vPpGArkhUuT4zL8N7/FISJDkA3q7BEYzNCBuHeI5TpYxw=
-----END CERTIFICATE-----
Generated at Tue Oct 22 08:30:05 2024 by rpki-client on console-fra.rpki-client.org