Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/3uLal_7z2c7OmSCXDsIjYC5TzXE.roa
File: 3uLal_7z2c7OmSCXDsIjYC5TzXE.roa (raw, json)
Hash identifier: KyWt9x28DgGNMOPi4sauT+2OTUMsxFeRXcdV+y4MlQA=
Subject key identifier: DE:E2:DA:97:FE:F3:D9:CE:CE:99:20:97:0E:C2:23:60:2E:53:CD:71
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01904A7B04F514AFA0E7FE9D549E7A9E1ADD
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/3uLal_7z2c7OmSCXDsIjYC5TzXE.roa
Signing time: Mon 24 Jun 2024 13:41:34 +0000
ROA not before: Mon 24 Jun 2024 13:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.254.23.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
217.25.4.0/24 maxlen: 24
217.25.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 09:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:7b:04:f5:14:af:a0:e7:fe:9d:54:9e:7a:9e:1a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 24 13:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dee2da97fef3d9cece9920970ec223602e53cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:27:1a:7f:60:38:29:75:a1:a0:1d:d2:4b:
bc:bb:25:b2:63:3f:32:86:44:6e:8a:98:cb:b4:cb:
ae:82:c9:9d:cd:68:f2:02:13:93:a5:3a:a4:aa:63:
7f:e2:90:0e:f4:e9:0f:cf:75:64:4e:eb:86:c7:44:
74:11:93:3c:7c:4b:16:c5:7f:0c:02:4e:6d:e9:6c:
c4:55:fc:c9:69:76:0f:14:f5:20:b5:d0:ca:df:f7:
82:99:e2:d2:22:b8:43:28:12:e5:d0:20:4d:57:bb:
65:c4:64:c0:a3:d1:66:8b:c3:c6:95:80:2a:6b:92:
ef:48:68:36:49:d3:89:71:39:1c:af:aa:d6:45:2c:
07:c4:a3:c7:e8:d1:a7:d5:91:64:f1:09:ff:7a:52:
45:fa:f8:7c:88:92:aa:fd:03:e2:f8:02:88:bd:27:
80:29:b9:eb:a7:59:6f:3f:46:60:ce:b3:6c:d6:84:
e1:f9:6b:cd:cd:e7:e0:3a:9f:19:4a:40:1a:7b:34:
da:87:03:7c:0d:60:27:4a:42:d8:88:28:24:23:b5:
aa:0b:52:39:86:68:72:bc:89:38:72:61:44:61:5e:
f7:0a:97:08:73:a7:d8:cd:4e:26:e7:a5:5b:79:47:
09:32:c5:91:5c:09:65:e0:c9:28:71:a6:a2:cc:57:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:DA:97:FE:F3:D9:CE:CE:99:20:97:0E:C2:23:60:2E:53:CD:71
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/3uLal_7z2c7OmSCXDsIjYC5TzXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
185.210.168.0/23
217.25.4.0/24
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3b:2f:d7:09:1b:be:12:22:81:b7:aa:0d:32:66:c3:d1:bf:
59:f9:e5:af:24:dc:b8:d1:54:a9:8e:6e:63:c3:e0:6e:cd:dd:
a6:9a:d0:50:d1:ea:4f:46:59:59:89:c4:e0:1d:e5:c5:92:5c:
e5:fd:d9:f0:0b:32:f1:14:39:98:8b:00:6d:0b:a0:36:fb:52:
97:a7:0a:fb:4f:01:89:c3:eb:0d:19:57:96:0d:95:49:25:70:
b3:b0:01:6c:90:7c:d7:90:79:98:66:bc:d2:16:d5:40:06:09:
f5:40:ab:c8:4c:2b:d3:e0:be:7b:e7:4d:fa:e0:fe:90:1b:79:
b7:6c:d9:59:12:df:f4:65:91:a7:4e:50:cd:d0:db:a0:bd:02:
b3:93:60:25:f2:e0:52:cd:99:89:ed:fb:b1:5e:2f:1e:ec:5d:
0b:c3:5f:22:07:24:65:bf:5e:31:10:a2:18:35:f5:32:53:07:
c0:b5:9e:e9:6e:21:cf:46:bd:97:da:71:c6:7c:31:99:a0:2a:
91:7b:5d:a1:fa:fa:01:0a:6e:25:46:86:03:7f:f7:54:4f:c1:
38:fd:07:9b:d1:8f:f2:85:be:92:1c:5e:9d:28:21:3d:ca:5c:
9c:bb:3b:8b:ce:64:96:20:4e:5d:db:5d:4f:64:86:9a:17:16:
80:a8:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:44:32 2024 by rpki-client on console-fra.rpki-client.org