Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/FxIEhXn4dhYnns_jgVyWfkwmWhI.roa
File: FxIEhXn4dhYnns_jgVyWfkwmWhI.roa (raw, json)
Hash identifier: jdkd8PZU9MPbA/52z5S2wL17vZ4ngk9xNbIr5ZmjriA=
Subject key identifier: 17:12:04:85:79:F8:76:16:27:9E:CF:E3:81:5C:96:7E:4C:26:5A:12
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01891CA1D8F9D164AD60FF7F46EC666CC80A
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/FxIEhXn4dhYnns_jgVyWfkwmWhI.roa
Signing time: Mon 03 Jul 2023 16:41:56 +0000
ROA not before: Mon 03 Jul 2023 16:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:a1:d8:f9:d1:64:ad:60:ff:7f:46:ec:66:6c:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 3 16:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1712048579f87616279ecfe3815c967e4c265a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:e9:51:3a:c4:04:5b:c7:75:b2:f8:60:11:
fd:76:9d:bb:b7:e7:6b:42:fa:e7:cd:8b:9d:99:8b:
77:70:3c:c9:43:a7:99:d2:f7:50:2f:40:89:62:6c:
fa:7c:a0:f2:09:4d:40:d4:b9:19:a8:6f:b1:88:0f:
b4:24:6e:7f:36:bf:60:c4:92:62:e5:20:c5:ab:ac:
e3:31:54:8d:3e:c1:3b:a3:86:27:14:ea:74:7f:74:
0a:15:16:e9:5e:d2:36:32:2d:5a:e1:46:04:b7:05:
5b:14:5c:b6:d7:4d:16:4e:61:d7:d0:80:54:56:c2:
da:71:18:45:cd:73:6b:d6:b5:a3:3e:ff:34:51:84:
67:6e:d9:42:cd:6e:25:91:c1:81:2a:d4:e7:77:be:
37:ba:41:a6:4b:36:39:3e:47:19:57:3a:9a:24:7b:
b5:31:fe:b7:59:54:ae:e5:d6:4d:e5:11:03:96:86:
76:31:e3:9e:54:f4:c5:0c:6d:d1:6a:cf:17:89:3f:
3c:9f:46:9f:c6:5c:9a:22:55:11:dc:52:d9:a7:6e:
a2:39:fb:50:c2:c9:38:18:fe:07:75:f1:b5:10:64:
66:17:a1:4d:7e:b6:6b:d2:b5:79:f7:8d:70:d2:6f:
fb:ce:3e:a8:b5:8a:6f:2a:41:d1:4a:a4:f0:5a:6f:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:04:85:79:F8:76:16:27:9E:CF:E3:81:5C:96:7E:4C:26:5A:12
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/FxIEhXn4dhYnns_jgVyWfkwmWhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
87.254.17.0/24
87.254.19.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:95:3e:a9:d2:fd:c1:5f:66:03:55:c7:a8:a4:4a:a1:b8:18:
a4:0d:b8:26:93:02:10:be:1f:bf:c9:c5:2c:88:15:15:94:ea:
06:24:5f:c1:72:11:b3:1a:4f:50:1b:93:32:ee:16:69:7d:93:
06:26:a7:65:de:90:38:b2:af:61:08:97:3e:e2:bc:c2:de:a0:
3b:44:f5:ca:7e:5e:f7:9e:9c:c3:d8:25:a5:f7:72:81:e2:94:
bf:da:b3:35:da:2e:3f:55:7e:d6:ac:c9:9b:f3:eb:76:2f:e0:
85:71:05:36:9c:68:fd:88:2e:9d:0f:42:57:2a:2b:9a:5f:b8:
97:ea:94:ab:54:ef:cf:79:6d:7f:fa:bf:06:5d:aa:84:67:9f:
a0:fc:2c:cf:56:ba:d2:a1:37:9e:97:e7:ee:86:4c:37:06:82:
37:aa:45:27:21:3e:7c:56:2a:ea:4a:87:2c:9a:fa:b8:0c:da:
b5:1e:05:7b:9d:cb:cb:38:e5:43:31:81:de:4f:34:de:f1:e6:
ce:76:f4:49:92:ad:f5:1b:34:f0:f5:1b:67:06:16:f1:97:90:
fb:06:61:be:6d:ff:28:a3:fe:2c:a5:62:b1:87:07:36:33:47:
3e:5d:de:e5:b7:c5:da:94:09:2e:d5:04:1a:60:51:83:32:98:
cc:e1:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org