Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/E6dKsvhofQiKOxFEtnIadBTYNJ4.roa
File: E6dKsvhofQiKOxFEtnIadBTYNJ4.roa (raw, json)
Hash identifier: hHohVNrDgUamMh21wBDOOCm8Bt8Fo4zQzPZ5HCq64SY=
Subject key identifier: 13:A7:4A:B2:F8:68:7D:08:8A:3B:11:44:B6:72:1A:74:14:D8:34:9E
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018E7B120FF5B06A1B8C7E905532D3AE0D5F
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/E6dKsvhofQiKOxFEtnIadBTYNJ4.roa
Signing time: Tue 26 Mar 2024 14:02:45 +0000
ROA not before: Tue 26 Mar 2024 14:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.254.17.0/24 maxlen: 24
87.254.23.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 08:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:12:0f:f5:b0:6a:1b:8c:7e:90:55:32:d3:ae:0d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Mar 26 14:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a74ab2f8687d088a3b1144b6721a7414d8349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:5d:f0:e3:a5:53:e7:f6:59:b1:48:d5:ad:
be:dd:89:2b:93:11:71:44:31:78:6f:d2:da:54:3a:
34:48:9b:ed:1d:a8:62:85:a1:96:eb:cb:eb:b9:25:
64:f4:91:e1:f5:53:2d:fb:4a:7b:e6:0d:2c:f3:d6:
56:11:f0:c7:7a:9f:8a:5a:f0:34:63:49:a3:67:a7:
fc:2e:31:a1:5e:08:99:8c:8c:0f:6f:2f:ed:66:bd:
5b:40:6b:61:5c:6c:1a:81:37:4b:fa:79:fe:28:e4:
d8:ed:c9:4f:bc:92:3e:02:e3:32:8a:89:b5:af:22:
93:0b:a0:26:1f:3f:53:92:d9:da:ad:26:63:36:52:
5d:74:55:46:6e:5e:bb:d3:a3:29:2e:f8:6f:2b:80:
39:75:e0:a2:50:78:fd:86:28:ad:6a:8d:53:69:39:
c8:14:8e:c2:e8:15:f2:11:1d:00:1e:b7:a8:74:9c:
d9:f7:31:59:38:09:58:d4:30:c6:51:87:d9:b1:c9:
34:94:0c:53:c1:8a:58:f1:44:2a:fe:e2:2c:3f:68:
6f:80:a6:4b:a1:b5:36:6c:6e:3f:78:e6:a5:12:51:
96:1a:49:ff:5f:ca:1c:b7:8d:23:2b:da:46:e0:6c:
1e:1c:36:12:41:a1:4a:0e:fc:0a:52:eb:bd:72:26:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:4A:B2:F8:68:7D:08:8A:3B:11:44:B6:72:1A:74:14:D8:34:9E
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/E6dKsvhofQiKOxFEtnIadBTYNJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.17.0/24
87.254.23.0/24
185.210.168.0/23
Signature Algorithm: sha256WithRSAEncryption
11:39:35:de:9a:76:5a:f2:0b:96:ba:df:04:ea:4b:5b:92:e6:
5c:f4:91:7f:b5:03:93:83:61:e0:3c:90:76:12:35:a8:1e:df:
f9:d9:d0:56:b5:5c:82:b2:33:39:ec:7e:71:70:4c:36:5e:4d:
83:b9:2a:6b:48:4e:72:85:bf:48:68:cf:44:37:4c:15:8c:60:
45:cf:8b:2d:f9:0f:db:c9:1c:12:1c:ee:95:b1:89:d9:0c:a7:
8c:58:93:e2:cd:77:46:52:60:1f:ba:56:70:8d:30:fd:49:04:
40:54:2a:b9:71:d5:9b:86:4b:e6:0e:ab:c8:e4:70:70:bf:34:
6a:8d:fd:2e:1b:c2:ce:fb:2f:0c:04:cc:56:82:2b:3b:cd:ea:
0d:88:50:23:48:61:09:1a:2e:25:a8:73:71:b5:44:84:bc:de:
b4:19:cf:f7:4f:20:0a:b7:c0:2c:28:45:8b:9b:dc:87:77:7b:
38:7e:bb:52:74:ef:58:b3:20:e4:ab:d7:06:23:5d:c3:2e:9c:
f8:8f:2b:ce:91:4f:74:4a:15:07:a6:39:cc:63:16:34:12:8d:
51:79:3c:24:e5:9e:33:0b:99:6d:7f:5b:64:33:be:3d:b0:8c:
96:8f:58:9d:f3:fc:35:fa:5f:b5:63:0f:a5:07:7b:09:20:c9:
3d:9e:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 13:22:59 2024 by rpki-client on console-ams.rpki-client.org