Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Cqki02xkgdpjnpA3XM68FKNNx_4.roa
File: Cqki02xkgdpjnpA3XM68FKNNx_4.roa (raw, json)
Hash identifier: b4lymM+zYt96Bno/yckyBcp8nnKYfuREUKFTW68Vk8w=
Subject key identifier: 0A:A9:22:D3:6C:64:81:DA:63:9E:90:37:5C:CE:BC:14:A3:4D:C7:FE
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188A5532F7B1EEEE9EE139BACF6739B3717
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Cqki02xkgdpjnpA3XM68FKNNx_4.roa
Signing time: Sat 10 Jun 2023 12:41:12 +0000
ROA not before: Sat 10 Jun 2023 12:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a5:53:2f:7b:1e:ee:e9:ee:13:9b:ac:f6:73:9b:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 10 12:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa922d36c6481da639e90375ccebc14a34dc7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:09:62:a0:30:07:e7:ae:a5:3f:cd:27:85:
38:cb:28:19:af:b4:f9:36:d9:95:e9:5b:fd:91:30:
79:50:7d:4c:dc:8b:03:ab:e2:1d:53:23:dc:c1:b0:
12:1b:11:36:9b:1f:7b:7e:94:96:ff:c9:e8:42:c8:
47:1d:ce:34:3b:1d:af:53:5b:71:bb:89:17:7a:97:
9b:26:35:6a:4f:22:67:09:ab:1a:a4:cd:9f:af:5f:
ab:49:c1:d1:c1:03:a8:fc:80:29:3d:e8:a2:16:55:
5d:ed:4d:74:01:93:13:66:30:0b:06:ef:1f:c3:cb:
6a:20:f4:71:a8:76:2f:79:c2:e2:5d:82:f5:31:24:
67:90:26:09:9b:af:92:f4:4d:70:39:9d:34:4e:fe:
01:c0:d8:a4:d6:2f:8d:25:da:74:7f:82:50:20:54:
f8:f6:74:73:31:aa:5e:77:f5:42:03:0f:2f:24:5d:
85:39:5d:3b:93:e7:04:c6:02:32:43:3c:2f:11:55:
11:4c:d9:48:28:45:3b:de:9b:2d:2f:87:11:e7:5d:
91:fa:47:e3:fb:59:58:40:8c:23:0b:59:19:22:c8:
c7:ca:f7:23:04:ea:71:04:b3:46:af:13:e1:07:60:
a5:c2:a8:81:34:e2:56:f8:b8:3e:30:6a:fe:40:97:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A9:22:D3:6C:64:81:DA:63:9E:90:37:5C:CE:BC:14:A3:4D:C7:FE
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Cqki02xkgdpjnpA3XM68FKNNx_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
87.254.18.0/24
185.210.170.0/23
Signature Algorithm: sha256WithRSAEncryption
13:0f:a2:ce:db:27:6b:4a:de:4b:fc:53:22:8b:7a:05:60:3e:
ee:67:c3:20:59:7b:cd:c5:1e:68:e6:94:a1:17:39:9a:d1:81:
ad:00:5e:23:19:d1:43:98:f4:eb:fd:10:38:f5:7f:ce:e3:0c:
42:d2:2d:1d:06:4e:10:71:71:ee:d1:bf:cb:b5:73:7c:ef:d8:
07:26:bc:f0:9a:7c:44:8c:18:04:16:42:5d:e9:ed:9b:d8:dc:
51:63:d6:d6:ff:35:fd:07:7a:0a:fb:99:bc:a4:3e:6c:f5:8c:
f3:7d:9d:1c:1e:64:cc:47:29:92:dd:72:45:d6:ca:71:89:1d:
91:ae:64:aa:d9:cc:66:0c:79:8a:a0:e6:c4:95:52:0f:c8:5c:
5f:8d:8a:32:f2:bc:9b:17:88:6e:94:b7:d3:dc:3d:97:16:a6:
6d:fc:a8:a3:fc:38:c2:30:f6:c6:d7:a7:34:1a:5f:9c:de:0b:
03:5d:00:04:30:42:bd:fc:32:c4:a2:d5:bf:25:ce:cb:f3:15:
7d:f9:c2:b1:50:4b:3a:19:cd:c7:ab:25:04:84:41:6d:87:0b:
06:5a:6a:ce:27:c6:ee:c7:d1:1e:5e:5b:d3:c6:cf:0c:e7:d4:
ce:f4:a9:8f:f3:0a:dd:7f:1f:52:ac:86:ae:ec:05:bd:3c:f3:
35:bb:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org