Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/CwvYSbY4PDZ1IOzv6bwM1ywawQk.roa
File: CwvYSbY4PDZ1IOzv6bwM1ywawQk.roa (raw, json)
Hash identifier: vQZ8WrAe7BWZZeoMgNQkFBTSXB93TwsxqCLqnyXofrc=
Subject key identifier: 0B:0B:D8:49:B6:38:3C:36:75:20:EC:EF:E9:BC:0C:D7:2C:1A:C1:09
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0187DBED6CCE77AC464E5F631A85AB638998
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/CwvYSbY4PDZ1IOzv6bwM1ywawQk.roa
Signing time: Tue 02 May 2023 10:06:22 +0000
ROA not before: Tue 02 May 2023 10:06:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:ed:6c:ce:77:ac:46:4e:5f:63:1a:85:ab:63:89:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 2 10:06:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0bd849b6383c367520ecefe9bc0cd72c1ac109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:ae:44:93:ff:bd:de:5a:86:d9:09:ae:26:
c9:23:66:f8:f6:8f:3f:7b:f2:4d:fa:cc:82:0f:e1:
91:ec:d0:e3:64:69:68:8c:54:d5:5f:ce:36:6c:f9:
7a:03:fc:2a:dc:31:7e:08:3c:c8:bc:6a:d8:4d:32:
55:3b:98:d5:a8:12:2b:c7:cb:ab:06:66:fa:b5:dc:
ac:27:fa:2d:4f:97:f7:e8:79:64:22:e2:20:62:39:
91:2a:1c:c8:44:26:63:13:45:aa:bf:84:fc:f7:12:
b8:4f:83:87:1f:d1:bc:b4:f4:ed:60:ff:09:e2:61:
55:ed:d6:03:8f:c9:49:21:ae:01:52:4b:c7:ec:ec:
7e:01:09:92:5e:ef:f2:0c:c4:4e:a3:59:51:1a:55:
d4:29:7b:64:5b:ed:1e:77:b2:0f:3f:48:ac:49:f4:
60:69:9f:2d:cc:25:d6:e5:04:a1:ea:1b:14:87:7e:
02:23:d5:c5:b3:e1:52:0d:d6:c3:9f:d1:6b:3b:c8:
1c:87:86:5b:16:e7:03:f7:5c:d6:80:0e:4b:2f:b4:
d6:1c:56:fe:24:1e:85:e3:77:13:7f:5c:1c:4f:1c:
ff:fe:15:34:58:72:98:39:26:4e:83:6c:aa:ba:79:
8e:ec:ff:8e:53:c9:cb:19:41:3c:5f:7b:cf:78:3f:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:D8:49:B6:38:3C:36:75:20:EC:EF:E9:BC:0C:D7:2C:1A:C1:09
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/CwvYSbY4PDZ1IOzv6bwM1ywawQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.8.0/24
87.254.10.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
15:5d:3f:53:11:59:9d:2a:e0:33:9d:6f:c3:b9:e7:36:21:6c:
14:e3:03:c4:a5:05:fa:4d:0b:3e:9f:a0:3b:e5:de:c4:51:fd:
08:9a:50:d3:a7:2f:d7:ef:12:3c:c1:66:97:a9:00:d3:a5:98:
b5:7b:5d:e1:fa:db:7f:d8:d9:ef:eb:81:bc:8e:96:27:0d:1e:
9a:d3:96:2c:94:cd:c4:64:6b:82:74:96:8d:5c:b0:e7:5d:1c:
09:aa:67:65:4a:0a:40:34:bb:bc:26:0e:cd:53:c2:8c:f3:af:
7c:1c:5c:60:f8:9f:21:06:f7:bd:ed:9c:00:53:98:ff:cc:4b:
f2:e6:8e:23:7e:5f:61:6a:bf:72:72:c1:d2:ac:35:38:43:bd:
50:cf:06:b1:b4:95:d3:84:2c:bf:ab:09:59:64:41:a2:ad:51:
c5:7b:c1:ce:1d:79:f3:37:0f:09:f1:f5:e2:e8:8c:32:d5:62:
c7:92:b7:50:0a:2d:14:73:bc:da:6c:63:6b:86:16:3e:2a:91:
24:73:1d:24:48:15:95:0c:01:9a:04:e1:e4:60:46:28:15:9f:
d3:11:f3:ed:12:1a:d7:4a:cf:8e:83:c4:ff:42:35:07:61:8f:
79:01:17:58:43:eb:76:bc:31:1c:28:af:fe:60:05:8e:ba:8f:
2b:e9:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org