Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ISrWYanVv52tUyeNCJyLbvaggMY.roa
File: ISrWYanVv52tUyeNCJyLbvaggMY.roa (raw, json)
Hash identifier: AC5LiFBqjYKm8YUW7wc539y2Grdr8zahHHxp8W6tnIA=
Subject key identifier: 21:2A:D6:61:A9:D5:BF:9D:AD:53:27:8D:08:9C:8B:6E:F6:A0:80:C6
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018AAE50DF30E4EF8DD068D6EB69D569A726
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ISrWYanVv52tUyeNCJyLbvaggMY.roa
Signing time: Tue 19 Sep 2023 16:40:50 +0000
ROA not before: Tue 19 Sep 2023 16:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
217.25.3.0/24 maxlen: 24
87.254.22.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:50:df:30:e4:ef:8d:d0:68:d6:eb:69:d5:69:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 19 16:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212ad661a9d5bf9dad53278d089c8b6ef6a080c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d7:a3:93:08:c2:4c:46:1c:09:c2:73:5b:a2:
97:ec:1f:4a:96:f8:94:ab:c2:43:be:66:28:37:13:
21:ab:c3:09:d5:40:77:63:0a:7e:1b:93:3c:7e:e1:
7a:e5:dc:39:dc:8f:d6:bb:78:35:73:59:57:38:3b:
f9:fa:e2:a0:8b:4e:5b:cd:1d:a0:c6:cb:34:57:93:
d2:30:01:ab:75:01:eb:09:f4:69:d2:da:70:37:98:
da:73:25:51:ef:cd:7c:53:ee:43:e1:7c:16:b2:27:
b9:fb:52:e7:4d:68:6c:e9:32:a6:f9:81:da:df:06:
76:09:ee:1b:de:c9:ca:7e:9c:aa:d6:0a:a8:0f:59:
ff:3c:e0:af:29:d3:1f:3c:61:1a:63:c8:44:17:6c:
16:1a:a8:5c:07:30:bf:95:3e:3d:8a:27:ca:ca:bd:
04:e0:3c:d4:f4:99:e8:5c:bb:58:4d:c3:8c:3d:e5:
f9:c0:ed:78:4b:ac:c6:b9:32:f0:14:4d:46:b3:28:
01:36:6e:2a:a6:4f:80:43:09:16:79:ca:2c:bb:21:
ec:b7:e3:d9:77:24:fc:39:2d:e4:28:e7:03:78:ba:
1d:6e:b9:d3:48:8a:ae:01:6d:68:a7:c4:35:79:32:
56:00:ce:85:ec:b2:d2:7b:3d:74:38:46:d9:73:7a:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:D6:61:A9:D5:BF:9D:AD:53:27:8D:08:9C:8B:6E:F6:A0:80:C6
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ISrWYanVv52tUyeNCJyLbvaggMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/24
87.254.17.0-87.254.19.255
87.254.22.0/24
185.210.168.0/22
217.25.3.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8f:af:9c:32:1a:af:df:ae:17:14:c5:87:df:f2:20:df:9d:
3f:bc:eb:c0:4b:8e:bc:c1:7b:da:af:2d:aa:59:65:f9:de:36:
13:b9:d1:cc:09:0d:02:fb:49:c9:16:62:6b:d1:3c:ff:12:66:
c5:26:4f:ea:6b:47:e6:93:0c:e5:9d:f5:dc:4e:6b:55:81:8e:
2b:33:bb:09:2b:75:64:83:2a:55:b8:eb:b1:16:c3:8a:98:88:
46:34:ac:64:7a:36:97:45:6c:19:47:92:17:a3:52:32:79:57:
87:ec:99:b2:fb:cb:bc:aa:26:0b:9e:e6:28:f9:dd:80:07:82:
67:71:c4:99:03:f1:4d:34:58:70:97:a5:1e:be:48:48:73:af:
8f:2f:70:58:19:86:22:3e:6f:93:68:1b:17:12:a4:c2:d1:42:
d8:41:bc:59:08:91:ce:20:0b:88:6e:8b:fc:cb:6d:0f:7d:96:
f1:c6:25:a2:e2:50:3b:ee:a7:b0:ec:41:7a:ea:eb:10:0b:d3:
cc:55:54:9e:c5:80:36:09:97:22:de:88:7c:b2:c8:c9:85:e3:
20:4b:df:35:22:79:b3:90:b8:30:d4:2a:ff:16:d0:99:f0:e5:
78:cd:79:19:e9:96:f3:19:f2:07:9a:ee:19:ac:77:84:80:46:
47:98:45:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 24 17:54:42 2023 by rpki-client on console-ams.rpki-client.org