Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/8GyQiYDmi6M1OPTrY_WFUX8leVg.roa
File: 8GyQiYDmi6M1OPTrY_WFUX8leVg.roa (raw, json)
Hash identifier: gM/HJ+QBXloUOsKTnn8YhYWT/PMtmrzBOOFP7l52eEE=
Subject key identifier: F0:6C:90:89:80:E6:8B:A3:35:38:F4:EB:63:F5:85:51:7F:25:79:58
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01859AFC80DF12E33324886C9968EE2ECB30
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/8GyQiYDmi6M1OPTrY_WFUX8leVg.roa
Signing time: Tue 10 Jan 2023 09:21:57 +0000
ROA not before: Tue 10 Jan 2023 09:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
87.254.11.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 21:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:fc:80:df:12:e3:33:24:88:6c:99:68:ee:2e:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 10 09:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f06c908980e68ba33538f4eb63f585517f257958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:a3:ed:4f:fb:ad:54:bc:2c:2f:b0:cb:fe:
3a:20:d8:09:7a:36:2b:3f:15:6c:cf:85:38:22:ee:
ee:1f:93:7c:f0:22:9f:b9:f3:d0:bb:04:0b:d0:74:
f0:97:aa:f5:69:7b:b5:64:a5:51:64:87:1b:fb:ce:
86:8a:4d:de:eb:f2:3a:db:68:bb:3a:0c:00:a5:50:
5e:ec:09:ec:78:8a:3a:5a:66:ff:60:bd:95:82:8a:
a0:29:c1:2f:dd:51:a5:a6:56:07:25:a4:e1:e6:68:
7b:a6:ee:d8:ce:04:a0:31:d9:85:5c:4b:11:f7:af:
75:0a:71:05:6b:f2:ea:72:41:08:a1:32:77:0b:87:
be:3c:59:21:71:c7:5b:2d:50:3f:74:d0:cd:1f:a1:
40:bd:1f:22:1f:a0:09:13:eb:b3:20:74:fe:23:0c:
81:09:ef:7a:3b:b2:d3:6c:0c:14:2e:74:01:4d:7c:
6b:cf:42:4b:40:70:e2:aa:f2:b0:bc:bb:7b:9b:8c:
bb:a3:cd:33:86:d6:54:2f:49:d2:b3:26:78:13:a3:
ad:49:98:5f:76:36:cc:94:bf:bb:a2:1c:9d:1f:5a:
e6:50:1f:4e:d4:59:ad:ff:40:cf:65:f3:df:f0:ae:
05:88:a8:2c:7e:6c:4e:33:b0:aa:af:a9:f5:05:7a:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:90:89:80:E6:8B:A3:35:38:F4:EB:63:F5:85:51:7F:25:79:58
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/8GyQiYDmi6M1OPTrY_WFUX8leVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.9.0/24
87.254.11.0/24
87.254.16.0-87.254.18.255
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:47:21:a9:f3:61:cc:80:0e:a7:92:62:70:05:4d:b2:a1:1c:
f2:25:38:bd:af:62:26:9b:6f:d3:17:24:7e:f5:ef:1a:68:1a:
40:63:97:26:ee:39:ea:10:0f:dd:bc:ed:61:7d:67:88:14:b0:
1b:e4:aa:60:4f:ba:9c:a4:02:4a:be:2c:d9:9c:42:35:27:ba:
90:dc:b6:7e:a4:20:8c:ee:1e:cb:e5:17:9b:8b:db:62:e9:fa:
32:b4:4b:67:24:f9:34:32:45:92:e7:76:96:ff:d7:d8:d9:76:
f3:73:5f:88:97:60:e7:55:d1:e2:2d:d3:d9:95:d0:8a:a7:d3:
3d:28:6f:07:ab:52:b4:cf:90:42:cb:17:a6:fd:3e:16:a8:5d:
b9:f5:fd:42:35:22:13:b8:ea:71:7e:26:51:be:d7:ee:91:3b:
61:55:68:ee:96:f2:8b:73:26:84:00:0b:05:37:dc:08:d5:3b:
ac:c5:32:be:3c:89:8f:c7:c6:8b:2b:64:0b:b2:35:21:97:2b:
2b:27:1b:16:8e:ac:ad:73:af:ff:4e:b6:57:43:24:aa:95:d0:
30:10:45:5d:22:aa:2d:2c:45:ee:3b:17:38:9d:af:55:e6:53:
a8:71:64:37:3c:eb:c1:61:60:d2:9b:7c:10:57:5e:74:b6:0d:
8b:99:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:21 2024 by rpki-client on console-ams.rpki-client.org