Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/JCKtH0uBThYX8pD6odluBSPc--I.roa
File: JCKtH0uBThYX8pD6odluBSPc--I.roa (raw, json)
Hash identifier: EMp3KYDBubFseC90ARg9jEcApNXhGHEY4UCxKel/7o8=
Subject key identifier: 24:22:AD:1F:4B:81:4E:16:17:F2:90:FA:A1:D9:6E:05:23:DC:FB:E2
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188AB7E7854B666695128E3A82D03AA0598
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/JCKtH0uBThYX8pD6odluBSPc--I.roa
Signing time: Sun 11 Jun 2023 17:26:12 +0000
ROA not before: Sun 11 Jun 2023 17:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ab:7e:78:54:b6:66:69:51:28:e3:a8:2d:03:aa:05:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 11 17:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2422ad1f4b814e1617f290faa1d96e0523dcfbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:29:64:48:47:5b:6b:cc:5c:ed:82:18:03:
7f:bc:2e:14:85:8e:3d:5b:4d:cc:b1:a7:eb:71:e6:
10:10:33:99:25:7b:97:c1:2b:59:79:cb:be:bb:f0:
fc:7d:12:8c:80:07:e7:6a:a2:06:2f:ae:9d:f7:4f:
80:44:7f:45:96:9a:80:cb:ca:53:5f:ae:dd:78:65:
47:f3:57:8b:d2:45:97:8e:14:ec:3e:dd:74:99:44:
e1:5b:dd:3f:86:a8:1a:df:30:3d:75:ee:16:2c:cc:
d3:63:4e:74:db:f8:99:79:62:8a:51:a1:19:df:7e:
86:c1:49:c5:86:10:d5:0f:41:7c:27:6f:13:c0:fa:
a2:05:1d:05:e1:11:0b:11:aa:e7:de:07:a7:ed:c6:
d3:45:7d:4c:9c:74:e6:62:1d:04:96:15:59:e2:bd:
78:f4:32:58:0e:86:ec:4c:32:1b:f0:22:68:a1:62:
4f:dc:3d:23:c3:0c:85:bd:ae:2b:cd:0e:11:9b:cf:
4b:46:83:3a:65:74:ab:35:1a:2a:d7:2c:60:55:27:
d6:a8:e0:5e:f6:40:1d:25:ec:72:cb:c1:99:c4:83:
16:b1:ef:c6:87:d2:f3:59:8f:04:9f:7e:39:ce:e1:
39:f2:aa:ee:26:f5:ec:05:69:27:a0:91:2b:24:ca:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:AD:1F:4B:81:4E:16:17:F2:90:FA:A1:D9:6E:05:23:DC:FB:E2
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/JCKtH0uBThYX8pD6odluBSPc--I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0e:34:3d:1b:c6:24:75:e0:6b:c7:1b:fb:84:81:fa:6a:73:
db:d8:1f:d9:9a:52:d6:94:c0:68:75:fb:43:e8:4d:31:d2:b3:
c3:6e:20:fc:98:7f:6c:75:4a:b1:1a:58:3e:96:b4:0c:60:8a:
8d:2d:5a:d5:8f:a9:32:18:4d:ee:e4:ec:cc:3c:96:63:3b:61:
1f:c6:83:a3:a5:64:94:10:51:1a:ff:99:ca:96:4c:27:74:5a:
ea:d1:f0:0a:e1:ee:91:f9:bb:03:c1:6b:53:a9:57:f8:69:32:
c0:76:b0:ca:08:ae:76:9e:d2:11:e4:fe:ef:dc:9a:3b:45:8d:
1d:ce:e6:d3:b6:a1:35:05:91:c7:d9:e7:de:74:6d:f7:1c:77:
f1:e6:c0:62:af:26:88:24:ba:df:d6:ee:5d:bf:ca:15:86:4f:
f2:9a:79:5f:42:05:da:54:ef:eb:4a:0a:e6:ab:c6:3b:ff:10:
a3:64:76:fe:f4:c3:19:67:99:d0:82:9c:b0:18:22:eb:ad:78:
6f:7c:90:f6:86:78:a6:54:9b:e3:bf:46:86:2e:88:5b:d4:fa:
32:d8:90:11:a6:50:b9:3d:80:df:0e:dd:4d:d2:fb:5d:cf:26:
f8:52:a3:41:38:01:6d:4f:87:6a:fe:99:11:23:64:47:22:6f:
89:5d:38:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org