Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/IojET3pruiz94Y6XIXyZ-Ifas98.roa
File: IojET3pruiz94Y6XIXyZ-Ifas98.roa (raw, json)
Hash identifier: p+kgrgWZfE3Y+bat7qAMKkQOhZFv50RSRmapbAum97k=
Subject key identifier: 22:88:C4:4F:7A:6B:BA:2C:FD:E1:8E:97:21:7C:99:F8:87:DA:B3:DF
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01883FEB99B6878694A95B3A2CA823380E7E
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/IojET3pruiz94Y6XIXyZ-Ifas98.roa
Signing time: Sun 21 May 2023 20:06:24 +0000
ROA not before: Sun 21 May 2023 20:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:eb:99:b6:87:86:94:a9:5b:3a:2c:a8:23:38:0e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 21 20:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2288c44f7a6bba2cfde18e97217c99f887dab3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:15:d5:bb:fc:ed:39:cd:de:35:fe:07:16:
c5:81:23:75:18:4f:8f:8c:d1:a6:cf:7d:a2:d7:ac:
c6:1c:4a:75:91:41:f9:48:88:b7:1d:75:43:94:81:
b4:1e:51:55:bf:4c:7a:65:5a:50:0e:c8:98:1d:0b:
0c:55:9f:a3:69:99:d8:bc:75:4d:2a:53:29:ca:14:
29:ae:b9:c0:db:08:4c:f4:e7:ac:d1:d3:23:e3:a6:
1b:28:17:a6:6c:05:fe:e2:c1:dd:33:56:d3:9b:4d:
c3:49:85:47:45:1d:e9:f2:23:d4:7e:19:76:9d:4e:
d6:e2:b9:44:d0:96:f9:21:d5:ef:52:ff:e5:a1:6d:
d0:01:92:02:6b:a3:5a:da:5c:c8:8f:c6:72:c5:76:
64:f7:b1:61:c5:f6:3b:24:2b:06:14:6f:2a:36:46:
5d:6b:da:a1:c4:f6:0f:6f:cc:a8:e9:f7:5d:8e:d9:
b4:74:98:a9:90:40:d3:33:66:5e:43:60:6e:45:76:
b4:41:aa:fe:2b:3c:ec:e8:34:fd:49:b6:b9:27:64:
85:0f:10:36:42:59:e8:73:5f:23:f3:fd:84:69:b0:
69:fb:94:d4:96:1d:26:a0:c9:55:3c:cf:38:4d:d5:
76:7a:7c:0b:77:ee:21:2b:f6:a2:0c:a9:6f:a1:77:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:C4:4F:7A:6B:BA:2C:FD:E1:8E:97:21:7C:99:F8:87:DA:B3:DF
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/IojET3pruiz94Y6XIXyZ-Ifas98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/24
87.254.19.0/24
185.210.170.0/23
Signature Algorithm: sha256WithRSAEncryption
25:83:fb:0e:06:fb:25:8f:5f:ab:d3:2a:49:b1:6f:f5:1a:26:
98:14:8a:a9:37:76:39:27:2d:c4:21:37:d1:5e:df:e8:6d:cd:
ac:b2:d6:2e:45:b6:22:b9:20:1a:82:2f:b1:ce:0c:93:91:21:
22:87:2c:ff:39:e6:1d:3e:47:5a:a3:c4:50:d1:12:28:2d:b2:
a5:2a:ae:62:e0:b5:eb:2c:9e:40:2f:bb:b6:e0:2d:32:e4:97:
40:3f:6b:48:64:05:31:13:85:b7:aa:d8:3f:3a:35:e7:2b:9d:
3b:52:1c:91:54:94:ab:72:dd:9b:25:4b:36:02:42:8f:3f:29:
2b:b7:43:c8:ee:37:20:f8:00:9d:67:bf:b1:0a:15:5f:1c:42:
94:3b:2b:39:f3:e2:e9:52:bf:ae:f3:1a:6e:cf:ca:b3:9f:46:
32:e0:5f:75:a3:1e:5f:7c:77:c7:e2:f5:9b:ae:66:40:e9:cf:
8d:e8:af:d2:4f:c9:bf:d7:67:cf:bb:29:e5:46:8a:e4:cf:87:
a5:a1:a6:bf:06:78:c5:bc:a8:00:61:66:a6:55:52:d9:31:38:
c5:e1:ca:35:21:22:39:1b:2f:a2:7e:6f:20:f7:27:c9:3d:ef:
a1:ee:cf:4d:ee:34:d2:af:95:29:f2:9f:c3:a3:9b:a2:06:21:
89:e7:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org