Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Iny9d1AoWaDvE58oQAsSSvNp8fo.roa
File: Iny9d1AoWaDvE58oQAsSSvNp8fo.roa (raw, json)
Hash identifier: uLbpypgMbVdYPXKHZhmlMYkZCo445gyukXKJEkosFPk=
Subject key identifier: 22:7C:BD:77:50:28:59:A0:EF:13:9F:28:40:0B:12:4A:F3:69:F1:FA
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01891195310B9A01C7B1857D6263D312F6F0
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Iny9d1AoWaDvE58oQAsSSvNp8fo.roa
Signing time: Sat 01 Jul 2023 13:12:17 +0000
ROA not before: Sat 01 Jul 2023 13:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jul 2023 13:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:95:31:0b:9a:01:c7:b1:85:7d:62:63:d3:12:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 1 13:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=227cbd77502859a0ef139f28400b124af369f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:8a:f5:42:ea:23:bc:f7:6c:c8:72:3e:0b:
71:86:1d:b1:23:d8:8c:5b:b2:54:9d:62:d2:f7:44:
ca:31:54:b4:34:10:14:d9:6a:f6:72:a4:10:f8:a5:
fe:23:cb:fb:44:5a:8a:c5:ad:53:82:03:59:d9:65:
e2:0c:71:db:9b:20:ac:a8:e9:22:8c:4c:62:bf:d9:
36:7a:88:30:75:5b:75:e7:b9:c7:49:04:13:5d:d1:
5e:48:ea:11:aa:bd:2c:8c:c7:bf:0d:a4:94:f1:a1:
a7:35:b0:1a:d6:73:e4:aa:ab:98:d8:3b:80:80:e5:
c6:2f:ec:e4:f4:05:4d:e9:1b:2f:69:bd:fc:d4:3b:
af:6a:48:24:35:23:e1:0c:c4:09:af:a7:89:a1:c0:
1b:d9:0a:ba:8e:f6:06:6f:96:ba:bc:51:00:4b:2c:
e3:d6:d9:4c:e8:58:f3:63:71:3b:d2:4c:4d:38:02:
dc:21:a7:cf:3b:f3:4f:fc:be:76:83:39:fc:da:f3:
f4:87:8f:71:00:55:97:80:9b:5f:3b:1d:89:23:0b:
b0:0c:31:56:de:3a:36:4b:81:aa:c4:3d:16:4b:21:
9f:d6:f1:4e:fa:3d:d7:ce:71:0c:79:d7:6b:ff:19:
d5:a0:12:35:cf:23:11:26:ad:7e:01:55:65:70:66:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:BD:77:50:28:59:A0:EF:13:9F:28:40:0B:12:4A:F3:69:F1:FA
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Iny9d1AoWaDvE58oQAsSSvNp8fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
87.254.10.0/24
87.254.17.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:5a:4c:69:6a:28:6d:01:8c:f2:e0:52:9e:9a:be:40:6a:c6:
f6:7f:03:33:81:53:ad:d3:a5:e8:56:54:26:c4:cc:77:21:2d:
37:e7:8b:8c:80:37:24:65:0e:c7:53:a6:43:54:99:df:d0:d3:
df:96:53:77:2f:b5:ab:e9:a5:a6:bd:17:9b:e6:13:87:f1:eb:
20:80:35:d6:7d:8c:2a:46:63:95:52:74:8d:4e:e7:85:88:ff:
d9:13:99:94:93:ed:64:3a:fd:6f:8f:e8:df:9d:52:b8:67:cd:
ca:52:41:e4:b1:36:ca:5f:fd:c9:cf:23:2f:19:4b:ae:21:77:
8a:ad:ef:39:54:42:ea:88:37:9e:bf:d4:44:a2:3c:39:87:fc:
d0:d1:15:45:69:77:55:13:d1:38:17:8e:18:31:6c:23:b8:36:
71:29:10:89:48:83:2a:64:ef:a2:76:34:39:23:2b:56:fb:ad:
e4:6b:1b:9a:46:8c:a0:91:83:36:a1:08:dd:31:03:3f:cd:ce:
84:47:82:5d:14:9f:f5:9e:f5:13:45:de:dc:9e:fb:dd:8b:4d:
bd:54:5b:73:c0:b3:33:34:e7:d6:54:98:88:22:95:1c:2b:c9:
7b:fe:1a:3f:ef:8f:d0:f1:60:43:c4:27:d6:98:cb:88:0e:38:
a4:e7:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:21 2024 by rpki-client on console-ams.rpki-client.org