Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GsYpGY1mP9xJ9nC4x64Ejnr1K5E.roa
File: GsYpGY1mP9xJ9nC4x64Ejnr1K5E.roa (raw, json)
Hash identifier: GacjeL4EsL2ua8o7xVYypKzv4i4pANsTa8vSt/89Bkg=
Subject key identifier: 1A:C6:29:19:8D:66:3F:DC:49:F6:70:B8:C7:AE:04:8E:7A:F5:2B:91
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01891ADDE8412F42EAA3E7A1011E8B186C0C
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GsYpGY1mP9xJ9nC4x64Ejnr1K5E.roa
Signing time: Mon 03 Jul 2023 08:28:17 +0000
ROA not before: Mon 03 Jul 2023 08:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.31.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 16:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:dd:e8:41:2f:42:ea:a3:e7:a1:01:1e:8b:18:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 3 08:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ac629198d663fdc49f670b8c7ae048e7af52b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:fa:fe:bc:ed:37:d5:16:7f:da:c9:80:6e:
5a:d4:de:1b:a0:6f:45:c4:7c:64:c4:19:94:89:55:
23:0a:be:c5:e4:78:fb:62:a0:57:18:5b:ff:06:ad:
94:8d:31:7e:37:77:c1:43:92:22:4a:45:8c:7b:a2:
b9:a6:b0:99:5b:45:61:fc:c1:50:6c:6f:36:71:ed:
e5:c6:37:7c:08:a1:a8:4b:42:24:78:42:52:bf:c9:
1f:e6:f3:a2:54:8b:39:e9:64:1f:d8:5d:07:d8:ab:
cf:5e:f4:e7:a4:cb:75:b5:a8:98:7b:57:04:89:31:
f2:7c:bd:bc:df:7c:57:83:0c:ad:e2:4b:e2:60:c6:
ca:61:d3:1e:b2:2d:2f:60:80:d7:6d:6e:fc:64:b1:
5d:89:2a:a0:69:8d:83:18:23:57:3d:8b:28:9f:39:
ec:1f:6f:5d:cc:c1:b7:5a:05:48:ac:c3:f2:97:53:
50:3a:4d:c5:6b:3d:7f:e4:3f:14:be:29:90:89:10:
5a:d9:1f:43:15:e1:2a:96:9b:cf:90:d1:5d:cc:54:
f0:22:e4:52:97:e2:23:92:24:25:3b:6b:a5:78:c7:
4e:e8:66:a2:ef:5c:dd:ed:7c:7c:37:14:aa:8b:1a:
a4:23:e4:0f:d0:08:3c:02:2f:1e:bd:8f:9d:18:75:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:29:19:8D:66:3F:DC:49:F6:70:B8:C7:AE:04:8E:7A:F5:2B:91
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GsYpGY1mP9xJ9nC4x64Ejnr1K5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ac:29:ae:32:b1:0e:22:40:fd:0c:f7:98:0a:78:6d:96:a8:
87:96:f3:8f:c6:4d:2f:f8:b2:7e:e3:84:bb:09:2e:19:e5:0f:
b2:01:7b:c6:75:be:67:c7:e3:16:69:94:6e:fa:65:32:dd:af:
fb:ce:3f:2e:fc:20:2d:c2:9f:5a:cc:69:92:47:21:72:00:47:
c6:29:ca:3b:0c:43:67:c2:b1:b5:d8:ed:f0:45:c4:7c:fa:0f:
ce:f1:1d:c4:f0:7a:02:30:ea:aa:bd:27:6a:78:75:ed:e1:59:
a8:cf:90:5a:55:27:7f:5b:7e:cc:0f:e0:d6:d4:92:28:c6:8f:
c3:9f:69:b4:e8:ab:01:fe:68:e7:58:0d:84:2b:23:7b:47:63:
c1:80:04:b0:c2:1b:c9:7e:d2:08:7b:da:57:a4:f6:da:ca:39:
23:63:ef:ba:d7:5d:22:e4:3c:eb:91:11:9d:7c:83:8f:30:ac:
c9:31:f3:39:41:f2:33:38:47:57:96:67:20:a0:42:22:bc:a1:
54:df:1f:91:39:d8:14:50:d1:05:e7:b2:ad:84:ad:a2:0b:ef:
35:34:2d:18:70:35:72:5b:93:51:08:e8:9a:fa:43:5d:8a:09:
46:6e:23:bc:a8:d9:93:ab:d2:e2:d6:b9:0c:9a:5e:90:62:8a:
40:b1:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:21 2024 by rpki-client on console-ams.rpki-client.org