Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1NoXqLkag2MNN3-raMfva0kBwws.roa
File: 1NoXqLkag2MNN3-raMfva0kBwws.roa (raw, json)
Hash identifier: /GFXwmaYhzp0fP7REnEZlQH3AHAiIhSKQGF3JKsfBbE=
Subject key identifier: D4:DA:17:A8:B9:1A:83:63:0D:37:7F:AB:68:C7:EF:6B:49:01:C3:0B
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188C35C942F05EB00C479E5E9804ADC3CF1
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1NoXqLkag2MNN3-raMfva0kBwws.roa
Signing time: Fri 16 Jun 2023 08:40:04 +0000
ROA not before: Fri 16 Jun 2023 08:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:5c:94:2f:05:eb:00:c4:79:e5:e9:80:4a:dc:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 16 08:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4da17a8b91a83630d377fab68c7ef6b4901c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:75:be:32:8f:16:95:c3:c6:4c:51:70:83:
99:d2:a7:38:85:76:ac:cf:54:aa:8a:72:28:19:15:
ee:78:42:a1:14:ed:55:e2:46:07:06:c1:14:33:0c:
4b:1b:ff:fd:ea:f6:25:81:4f:7d:cf:17:5e:3b:96:
8e:b4:dd:a5:57:8e:dd:8e:9b:b4:d5:df:fb:73:02:
30:ac:f8:76:09:44:2e:eb:08:87:a4:83:88:85:10:
27:06:38:54:8c:4a:fa:94:ab:64:35:77:f9:bb:3e:
f7:8a:89:fc:6d:c1:8e:7a:8c:8f:1a:b7:00:b0:73:
1a:82:df:91:c4:01:a8:9b:e0:06:f1:8b:f2:92:c3:
d7:35:a1:da:8e:f3:c5:1c:06:f2:22:fc:b1:5a:4b:
c3:f8:35:6e:b9:70:bc:b4:c4:21:a7:df:f0:36:65:
9e:d0:c8:66:5e:14:06:07:87:f2:69:df:87:4c:ee:
90:83:47:85:2a:6c:17:88:3c:63:c8:39:b4:54:3b:
0e:70:a4:17:3f:13:40:23:72:e2:4b:ff:e8:5a:c5:
68:87:4c:64:fa:df:b0:4b:83:0a:51:74:72:ef:52:
f8:05:11:70:98:86:0a:32:65:d9:e1:fa:27:67:75:
f1:fa:02:71:07:e1:19:4f:be:d4:f9:60:e3:a7:53:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:17:A8:B9:1A:83:63:0D:37:7F:AB:68:C7:EF:6B:49:01:C3:0B
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1NoXqLkag2MNN3-raMfva0kBwws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
87.254.10.0/24
87.254.17.0-87.254.18.255
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:39:7d:ac:b2:c9:9a:a2:5d:c3:1b:6a:fe:c3:9f:21:5b:80:
9f:e7:b1:ba:05:81:de:fa:5c:d7:34:7d:83:7f:27:8c:26:ed:
a2:e7:29:23:a5:51:25:87:18:b3:c2:f0:59:54:86:33:3e:c2:
6f:4c:ae:06:d2:95:50:27:1a:da:42:3d:6e:0c:8d:84:4d:8b:
95:74:52:78:79:e9:ca:79:8d:c0:dc:12:3c:73:66:4d:92:fa:
ac:0a:de:3c:43:fa:05:cd:18:e4:67:6d:f0:92:84:55:c7:6d:
dd:b3:3d:93:ce:c9:50:3b:99:65:87:4b:42:3f:20:8e:fd:23:
58:c5:ad:76:0e:72:ac:4c:e4:ad:50:0f:09:d4:fe:28:3e:38:
fe:cf:31:bc:77:1a:cb:fb:18:55:72:26:38:66:ec:e6:c0:db:
18:19:7f:69:bd:86:8d:b8:26:89:a9:30:fd:f7:26:8a:51:23:
ee:44:5e:fa:cd:af:c9:9f:5d:a9:c6:85:e7:8d:02:b0:55:38:
7e:ab:2c:95:96:0b:2a:30:63:79:93:14:a4:1c:77:ac:04:8b:
8b:e4:20:ec:5e:cd:24:0a:59:59:2a:f7:dc:33:eb:98:a3:22:
40:05:5e:bd:a8:47:f6:fd:cb:59:e9:34:a3:88:66:1e:61:5c:
a5:b4:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org