Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/39ncGFSN_TEr-FUVcE0RBkMqBDw.roa
File: 39ncGFSN_TEr-FUVcE0RBkMqBDw.roa (raw, json)
Hash identifier: yWmb4GLkBnTBYZv+5VNAjc0FimRwVZr3qTenZNonvhU=
Subject key identifier: DF:D9:DC:18:54:8D:FD:31:2B:F8:55:15:70:4D:11:06:43:2A:04:3C
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018BAA7A37358E5539E80B749A3AF7102FB8
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/39ncGFSN_TEr-FUVcE0RBkMqBDw.roa
Signing time: Tue 07 Nov 2023 15:50:17 +0000
ROA not before: Tue 07 Nov 2023 15:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:7a:37:35:8e:55:39:e8:0b:74:9a:3a:f7:10:2f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Nov 7 15:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfd9dc18548dfd312bf85515704d1106432a043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:92:33:6c:67:dc:bf:92:f6:65:be:81:e0:
aa:49:41:b6:69:a7:69:e7:27:df:bb:71:af:17:87:
76:8e:4c:99:c2:36:61:6d:d8:7d:e9:bd:f7:b0:2a:
cb:b8:6b:94:d9:b1:6a:9e:46:54:7d:32:d2:b7:7a:
81:6c:e6:ac:dc:d0:a2:1e:c1:48:99:91:db:f0:35:
29:22:b0:39:b5:12:69:11:69:bd:0d:a9:5f:ce:07:
be:61:5a:e2:c6:aa:f2:86:cf:e8:ec:c9:ee:80:fb:
f5:48:62:6c:9b:d3:68:10:49:27:24:38:e1:d3:92:
36:0c:bd:09:78:e6:17:a8:68:b8:0d:6f:53:c0:e8:
f7:e4:08:3b:3e:0f:f6:0d:70:36:44:7e:cb:61:c4:
7e:0a:d3:9c:68:66:f5:b0:76:fb:82:9c:11:47:88:
66:5a:be:d1:a8:c3:aa:a7:ef:32:2d:3e:8a:86:2f:
c7:0d:18:41:2e:36:f1:33:07:e5:7d:18:46:bd:8f:
6c:0f:be:1c:74:f0:09:ac:8d:2a:01:36:6a:06:50:
1f:26:b3:e2:79:f3:34:19:99:64:5f:74:c1:58:60:
5b:01:2d:ee:d9:e7:70:09:d9:ee:5d:24:d0:e1:13:
98:91:71:31:ac:df:94:12:df:08:74:70:1c:86:a6:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:DC:18:54:8D:FD:31:2B:F8:55:15:70:4D:11:06:43:2A:04:3C
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/39ncGFSN_TEr-FUVcE0RBkMqBDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:7a:85:01:9c:5f:0f:75:4a:da:95:5b:73:2e:76:0c:43:00:
11:7b:8b:9a:1e:b2:ea:f1:95:6d:30:bb:11:c2:7a:39:04:5a:
23:33:86:5d:3d:56:65:e3:05:93:8a:1c:d5:2a:cc:92:f0:70:
a1:e3:2e:62:fe:62:a2:1d:e6:46:4e:b5:4a:a7:90:c4:e1:3b:
f0:a9:d8:6a:59:e8:bb:a2:f3:f7:94:b1:75:58:cf:03:87:b7:
1c:d4:f3:bc:56:f1:01:c9:b6:43:63:08:a2:c7:de:c5:04:38:
c3:87:d9:93:49:f5:ca:c5:50:08:d1:5e:fd:0b:70:c3:7a:ac:
41:7c:d6:dd:ea:a0:58:09:7e:9d:6a:d8:a5:d4:52:fa:cc:43:
e1:5b:7a:6a:ec:3c:99:b8:8c:8b:1f:de:c2:3b:60:2d:08:20:
49:60:60:ec:b8:80:d9:c3:8f:b1:69:cb:08:1b:6e:d0:54:7b:
2e:47:ca:75:94:cd:b1:c0:89:0e:92:06:c0:3c:2f:f1:45:42:
e7:b7:d0:9f:16:d2:c3:1c:fc:54:c6:3e:60:eb:62:03:32:e6:
a7:76:40:36:df:f7:2b:da:d5:a1:42:66:92:eb:e2:1f:52:f1:
a5:9d:12:0c:e9:65:81:b5:03:81:af:7c:31:a1:d0:94:e2:e6:
0b:1b:45:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuqejc1jlU56At0mjr3EC+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMxMTA3MTU1MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmQ5ZGMxODU0OGRmZDMxMmJmODU1MTU3MDRkMTEwNjQzMmEwNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk32SM2xn3L+S9mW+geCqSUG2aadp
5yffu3GvF4d2jkyZwjZhbdh96b33sCrLuGuU2bFqnkZUfTLSt3qBbOas3NCiHsFI
mZHb8DUpIrA5tRJpEWm9Dalfzge+YVrixqryhs/o7MnugPv1SGJsm9NoEEknJDjh
05I2DL0JeOYXqGi4DW9TwOj35Ag7Pg/2DXA2RH7LYcR+CtOcaGb1sHb7gpwRR4hm
Wr7RqMOqp+8yLT6Khi/HDRhBLjbxMwflfRhGvY9sD74cdPAJrI0qATZqBlAfJrPi
efM0GZlkX3TBWGBbAS3u2edwCdnuXSTQ4ROYkXExrN+UEt8IdHAchqZhNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN/Z3BhUjf0xK/hVFXBNEQZDKgQ8MB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvMzluY0dGU05fVEVyLUZVVmNFMFJCa01xQkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/4JAwQB
V/4SMA0GCSqGSIb3DQEBCwUAA4IBAQAqeoUBnF8PdUralVtzLnYMQwARe4uaHrLq
8ZVtMLsRwno5BFojM4ZdPVZl4wWTihzVKsyS8HCh4y5i/mKiHeZGTrVKp5DE4Tvw
qdhqWei7ovP3lLF1WM8Dh7cc1PO8VvEBybZDYwiix97FBDjDh9mTSfXKxVAI0V79
C3DDeqxBfNbd6qBYCX6datil1FL6zEPhW3pq7DyZuIyLH97CO2AtCCBJYGDsuIDZ
w4+xacsIG27QVHsuR8p1lM2xwIkOkgbAPC/xRULnt9CfFtLDHPxUxj5g62IDMuan
dkA23/cr2tWhQmaS6+IfUvGlnRIM6WWBtQOBr3wxodCU4uYLG0V6
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:47 2024 by rpki-client on console-fra.rpki-client.org