Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/3tbpG5i4paarepslA9R0NHWVGm0.roa
File: 3tbpG5i4paarepslA9R0NHWVGm0.roa (raw, json)
Hash identifier: WNdkEIaeEvCmuDahFujFQ7rTzDiTQ8eort+ZTIl35PY=
Subject key identifier: DE:D6:E9:1B:98:B8:A5:A6:AB:7A:9B:25:03:D4:74:34:75:95:1A:6D
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018C2519DF3596A571EEB4BCBF1401BA5813
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/3tbpG5i4paarepslA9R0NHWVGm0.roa
Signing time: Fri 01 Dec 2023 11:18:21 +0000
ROA not before: Fri 01 Dec 2023 11:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199614
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:19:df:35:96:a5:71:ee:b4:bc:bf:14:01:ba:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Dec 1 11:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ded6e91b98b8a5a6ab7a9b2503d4743475951a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:9c:45:18:78:15:ff:9c:9c:0c:59:b5:6b:
9c:ae:09:21:ec:72:36:1b:2d:82:79:28:56:61:4c:
ab:03:e5:35:56:29:5f:9a:83:b5:a0:66:1d:81:30:
69:d9:1d:ef:34:4d:56:8f:1d:f6:f0:13:83:64:4e:
d8:8c:97:6c:63:25:e5:f5:bb:99:d3:39:2a:71:55:
f3:a0:62:3f:90:6b:4f:91:73:82:f8:ef:48:ed:5d:
e6:d7:ba:4e:3c:7e:03:e5:56:da:a5:28:ef:38:c6:
26:99:cc:9f:96:f1:71:be:20:6d:6e:32:ba:0e:11:
30:e6:f9:25:0b:8f:fd:df:aa:29:01:89:7e:09:53:
08:7b:a0:46:44:87:fc:b4:9d:53:22:9b:8b:f4:d6:
ae:22:7f:60:01:72:a4:ef:84:c4:89:89:d0:33:92:
e7:35:f0:a3:09:bc:27:ed:8e:72:a1:ba:b6:dc:31:
85:60:79:09:a4:4d:3f:1c:9f:09:1f:3d:a2:f8:aa:
a2:c2:71:2e:b8:74:fa:e8:b7:63:b0:96:53:d0:e4:
53:4b:e0:c3:ec:ab:54:75:9e:89:fb:76:f7:b7:5d:
df:b1:a8:28:40:4a:f6:ba:3f:f3:0a:89:71:f8:13:
a3:83:a4:77:12:a2:7e:00:68:95:db:6f:40:2d:e5:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:E9:1B:98:B8:A5:A6:AB:7A:9B:25:03:D4:74:34:75:95:1A:6D
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/3tbpG5i4paarepslA9R0NHWVGm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.12.0/23
Signature Algorithm: sha256WithRSAEncryption
03:06:7d:a9:28:17:79:69:38:1d:51:ee:2b:3d:f7:ec:2c:5e:
be:f7:b8:02:58:9f:24:73:a4:d0:87:45:37:88:4d:26:b7:b7:
89:f7:4f:a3:2d:3d:a8:bd:c1:9c:fd:71:ce:ba:46:23:2e:ae:
8d:41:ce:af:80:09:2d:7e:55:5b:8c:44:d2:29:ef:a7:ac:d6:
16:c3:9d:bc:80:18:88:2d:36:ce:a7:47:ba:c9:a4:92:ee:27:
90:3b:45:80:af:8a:d2:8d:13:67:a0:4f:12:23:02:c6:73:c8:
d8:9f:d7:32:0e:57:6f:82:29:d8:5a:60:3d:4d:9c:d9:75:86:
96:ef:68:bf:11:2b:40:0f:32:36:d5:69:1a:02:f8:af:79:17:
25:ab:7d:66:2f:57:70:bd:f5:9a:8b:49:0b:62:ef:0c:0f:aa:
c5:18:7a:b9:ca:03:7f:ed:50:b8:f8:0c:1e:f4:ec:e4:1a:f2:
cc:7d:d1:72:be:67:0f:f5:6c:fd:fc:7e:25:e8:8a:cc:8a:13:
f8:2f:dd:a9:d1:5b:86:91:e2:88:22:fb:ac:75:21:64:86:4a:
ae:c0:c9:4e:ae:1e:e3:ac:a2:8b:47:e3:7b:16:db:9c:4b:0e:
1d:7d:74:bb:54:ee:db:16:75:ee:15:44:f3:92:57:a9:49:1e:
93:60:01:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwlGd81lqVx7rS8vxQBulgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMxMjAxMTExODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWQ2ZTkxYjk4YjhhNWE2YWI3YTliMjUwM2Q0NzQzNDc1OTUxYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfGcRRh4Ff+cnAxZtWucrgkh7HI2
Gy2CeShWYUyrA+U1VilfmoO1oGYdgTBp2R3vNE1Wjx328BODZE7YjJdsYyXl9buZ
0zkqcVXzoGI/kGtPkXOC+O9I7V3m17pOPH4D5VbapSjvOMYmmcyflvFxviBtbjK6
DhEw5vklC4/936opAYl+CVMIe6BGRIf8tJ1TIpuL9NauIn9gAXKk74TEiYnQM5Ln
NfCjCbwn7Y5yobq23DGFYHkJpE0/HJ8JHz2i+KqiwnEuuHT66LdjsJZT0ORTS+DD
7KtUdZ6J+3b3t13fsagoQEr2uj/zColx+BOjg6R3EqJ+AGiV229ALeVLLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN7W6RuYuKWmq3qbJQPUdDR1lRptMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvM3RicEc1aTRwYWFyZXBzbEE5UjBOSFdWR20wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/4CAwQB
V/4MMA0GCSqGSIb3DQEBCwUAA4IBAQADBn2pKBd5aTgdUe4rPffsLF6+97gCWJ8k
c6TQh0U3iE0mt7eJ90+jLT2ovcGc/XHOukYjLq6NQc6vgAktflVbjETSKe+nrNYW
w528gBiILTbOp0e6yaSS7ieQO0WAr4rSjRNnoE8SIwLGc8jYn9cyDldvginYWmA9
TZzZdYaW72i/EStADzI21WkaAviveRclq31mL1dwvfWai0kLYu8MD6rFGHq5ygN/
7VC4+Awe9OzkGvLMfdFyvmcP9Wz9/H4l6IrMihP4L92p0VuGkeKIIvusdSFkhkqu
wMlOrh7jrKKLR+N7FtucSw4dfXS7VO7bFnXuFUTzklepSR6TYAFn
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:47 2024 by rpki-client on console-fra.rpki-client.org