Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Fk39A6_xcamATB_vomcPEbzpjwk.roa
File: Fk39A6_xcamATB_vomcPEbzpjwk.roa (raw, json)
Hash identifier: xyfl0VegKdC8PcNX8usEctMpjXNa5hK0vKIVpLCDLEM=
Subject key identifier: 16:4D:FD:03:AF:F1:71:A9:80:4C:1F:EF:A2:67:0F:11:BC:E9:8F:09
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018570707AF5D5D48229A5CEFA9D7EC87E3C
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Fk39A6_xcamATB_vomcPEbzpjwk.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 87.254.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7a:f5:d5:d4:82:29:a5:ce:fa:9d:7e:c8:7e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164dfd03aff171a9804c1fefa2670f11bce98f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:f9:ce:e5:0f:56:ac:07:4e:4b:56:cb:5e:
28:6b:f0:ea:d8:6e:46:64:36:ce:a9:1b:c5:71:10:
30:ac:fa:97:9f:f0:b1:0e:99:39:38:be:a7:96:81:
cb:61:5a:f6:e0:31:6b:14:0c:ff:97:da:66:08:24:
53:9f:f6:09:04:f5:59:fc:62:0e:56:06:fa:e1:43:
6b:a1:c5:59:b3:19:f0:0b:6a:2d:d8:c8:14:69:f3:
98:13:9a:d8:2e:d3:bd:5b:77:fc:8d:f3:f6:cb:4d:
50:c2:03:58:d5:9f:86:5e:48:3e:55:06:ad:63:7a:
d7:a1:fd:ef:3b:58:03:a6:3b:99:0a:7f:7c:70:a3:
0f:78:5e:8c:10:3d:8b:40:2d:25:67:9c:b0:c2:bb:
2d:a5:74:99:5c:0f:07:37:52:29:f1:c0:88:a6:c3:
1a:ad:db:cb:24:c7:fc:f8:f7:c6:6c:3e:a2:cd:a4:
54:a2:48:dd:16:49:cd:60:d5:4d:d3:83:05:d2:c1:
21:97:81:06:21:f6:77:cb:b4:fa:72:8a:62:ac:96:
8a:90:da:66:b7:31:6a:d0:00:15:c8:a5:76:1b:a1:
4c:ea:f2:cd:1d:b5:fe:cd:25:a2:91:57:72:9c:29:
7a:9a:26:dc:7b:b3:31:e0:1f:98:fd:b4:a3:31:be:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:FD:03:AF:F1:71:A9:80:4C:1F:EF:A2:67:0F:11:BC:E9:8F:09
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Fk39A6_xcamATB_vomcPEbzpjwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
40:68:27:e2:04:89:37:2c:e2:b2:ab:cc:3d:a3:18:c9:88:68:
84:d9:24:80:99:b7:e0:f4:13:74:28:11:3d:a2:c8:f0:5a:a1:
b1:86:39:05:33:ed:84:0f:be:22:d0:a6:39:69:5d:d2:a0:35:
73:84:38:aa:46:51:2a:77:f6:42:11:19:36:36:a2:f9:32:cb:
38:9d:ca:ad:8f:d1:15:ef:72:b5:00:f9:f1:69:10:1a:f8:3c:
c4:c5:7e:e2:b3:f7:29:95:28:33:f4:83:03:aa:97:0c:1f:79:
13:58:47:47:8e:95:59:b1:a5:ad:16:09:f3:66:da:fa:a0:f3:
b2:c7:45:01:1e:66:09:2f:6e:0f:6b:2f:f2:af:fe:50:89:c2:
df:8a:35:a8:12:66:3d:bb:f1:de:16:13:6b:8a:10:8a:10:2a:
24:ea:bb:d1:a4:c1:1c:c2:4f:73:fe:aa:c4:57:9b:8f:3f:e1:
d9:e9:b9:dd:a2:8c:e7:cb:a3:cb:ef:38:cc:ec:1c:8a:c9:84:
e3:ab:f2:3a:0b:71:a2:31:3d:58:dd:9e:0e:98:3e:d0:c6:26:
91:3b:14:cf:c2:2d:2c:74:20:44:70:cc:d3:95:e1:29:34:c8:
f7:dd:c9:ed:d9:8f:0a:4b:f5:89:00:f7:ed:2e:1e:48:fc:5c:
c2:3d:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org