Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1GhRfqIrDCiLLq3Ne5L30EiQ-l8.roa
File: 1GhRfqIrDCiLLq3Ne5L30EiQ-l8.roa (raw, json)
Hash identifier: gSX5qWv6W9HawMF8ZPpzS6o4dn0Kb54QAo5rzthH2JU=
Subject key identifier: D4:68:51:7E:A2:2B:0C:28:8B:2E:AD:CD:7B:92:F7:D0:48:90:FA:5F
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01883FEB9A340E0339A1FB32E862F3A18109
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1GhRfqIrDCiLLq3Ne5L30EiQ-l8.roa
Signing time: Sun 21 May 2023 20:06:25 +0000
ROA not before: Sun 21 May 2023 20:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.11.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:eb:9a:34:0e:03:39:a1:fb:32:e8:62:f3:a1:81:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 21 20:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d468517ea22b0c288b2eadcd7b92f7d04890fa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:c0:ba:a7:f7:f8:2e:43:cb:2d:bd:03:e4:
03:f4:ee:e3:ab:d6:57:82:4f:34:fb:63:7e:a3:62:
f1:03:11:b8:f1:85:1f:95:45:04:86:d4:61:1a:9a:
70:cb:fe:09:37:55:de:e3:d6:f7:49:e1:44:f9:90:
56:70:42:21:e6:92:10:6c:3d:c5:4b:bf:12:ba:21:
73:5a:b9:98:d9:2d:2b:42:14:3c:1c:a9:27:68:07:
30:41:49:e0:22:b6:e0:fd:79:5e:8d:10:94:4c:d9:
db:e2:e7:f2:8f:a8:3b:e8:6d:68:9b:ce:85:80:8b:
7f:c3:86:c1:17:a0:8a:d0:d3:69:fb:f6:5f:88:05:
76:c8:3b:2f:92:98:ac:a8:ee:7d:ce:a4:b8:4b:33:
77:2c:cc:03:3e:c1:18:42:35:85:68:59:6e:82:12:
23:01:31:18:bf:80:6d:fc:15:72:c1:1e:0c:79:84:
6e:21:6f:db:63:c1:75:ba:30:6a:f3:3e:c4:45:7c:
ad:41:1e:19:99:3e:82:29:ee:ec:55:d0:66:81:79:
c4:e1:bd:16:14:ab:21:00:56:2c:c1:9b:fa:70:83:
30:49:e9:2e:33:ff:0d:4f:18:2d:21:01:8f:44:b9:
45:3b:df:db:8f:d7:e6:b3:09:69:ea:ff:92:f4:1f:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:51:7E:A2:2B:0C:28:8B:2E:AD:CD:7B:92:F7:D0:48:90:FA:5F
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1GhRfqIrDCiLLq3Ne5L30EiQ-l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
87.254.16.0-87.254.18.255
185.210.168.0/22
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:56:24:8c:ec:a1:ff:e7:c5:7c:da:76:22:d1:48:6e:86:35:
92:bb:fc:34:43:02:7a:8c:3a:3f:2a:9b:a2:a3:fb:ad:76:2a:
e5:aa:ff:0f:26:c5:45:83:e0:97:30:cb:1f:92:1e:4e:c5:9d:
cf:22:5d:b8:c5:ea:c1:65:49:d5:b7:fc:b9:8c:1f:0a:43:e8:
af:22:43:c8:32:31:f9:b1:f7:ed:97:b5:61:a8:56:11:41:70:
c2:92:40:d2:87:08:0f:72:6a:4a:8d:35:00:20:b8:6d:44:7b:
5b:4d:38:bf:3f:29:35:d9:96:72:55:34:3a:77:cb:30:3c:f1:
be:76:7e:52:86:83:47:3e:e9:89:02:31:71:e9:49:10:86:32:
62:ae:a8:33:57:b2:65:b1:ec:c0:ba:21:c0:57:46:fe:bf:68:
42:57:a3:7e:b6:9c:39:d3:a4:aa:29:ee:67:bf:13:a9:94:42:
fc:8f:94:93:d0:38:39:7a:49:69:0f:21:42:bb:bc:68:78:b3:
68:1d:4f:7d:c6:02:40:2c:ff:f5:e8:0b:8d:81:d0:8b:67:67:
ba:cf:99:20:f8:f2:ad:58:74:0a:eb:ee:f4:84:80:ac:a5:95:
1d:57:8f:fe:14:41:4a:49:ba:28:0b:1f:38:b8:de:69:bb:d2:
a5:22:33:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org