Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/JcsUgojx6ciiAPOtSUz9zfF2RNk.roa
File: JcsUgojx6ciiAPOtSUz9zfF2RNk.roa (raw, json)
Hash identifier: SkeCdkZYcjuleAu6Mgcm37IAzRDLfpBjrAtOm9aXGmU=
Subject key identifier: 25:CB:14:82:88:F1:E9:C8:A2:00:F3:AD:49:4C:FD:CD:F1:76:44:D9
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0187DBA7B3BF04A8CEA1EBDA3F4CA87885BB
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/JcsUgojx6ciiAPOtSUz9zfF2RNk.roa
Signing time: Tue 02 May 2023 08:50:13 +0000
ROA not before: Tue 02 May 2023 08:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20915
IP address blocks: 87.254.25.0/24 maxlen: 24
87.254.0.0/19 maxlen: 19
217.25.0.0/20 maxlen: 20
2a00:eac0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:a7:b3:bf:04:a8:ce:a1:eb:da:3f:4c:a8:78:85:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 2 08:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cb148288f1e9c8a200f3ad494cfdcdf17644d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:14:da:3a:af:02:18:35:40:58:18:74:05:
1a:a4:a2:c6:84:8b:73:c9:1d:be:d3:a9:00:6c:91:
d9:d0:d1:fc:35:64:b4:40:38:39:88:3d:73:29:54:
e9:7e:39:c7:c5:b7:21:3e:e1:6c:cf:34:6f:76:15:
43:6b:29:9a:cb:88:6e:7e:45:3a:0e:15:2f:19:49:
8d:c1:b0:31:5b:17:b7:a8:93:a5:36:15:0a:72:f3:
9a:c0:f3:56:ff:5f:16:92:c7:56:b2:3c:22:ce:40:
3a:4f:82:9c:d1:7d:c6:96:33:61:0d:80:52:35:89:
37:ee:3d:68:df:36:e0:56:14:7e:a3:44:83:ec:9a:
7b:06:02:80:71:98:67:1d:c4:e7:1f:c4:ac:1a:37:
8b:e8:cf:09:06:54:d8:bb:82:6e:ae:00:f1:55:88:
f1:82:c1:bc:00:e7:5f:4c:3f:9e:1b:c6:42:2a:31:
fd:51:9e:59:0c:c0:8e:4f:2c:2d:96:5e:e2:42:c8:
53:e4:c2:69:d3:f0:bc:8a:75:e2:06:75:e4:e0:96:
45:6d:93:13:59:b0:a5:69:88:15:f6:c7:53:66:f7:
53:de:f5:52:e6:3c:c2:4e:08:97:18:f9:1e:47:95:
ff:a3:93:a3:a5:3f:e5:c7:20:29:4d:cf:41:b1:cc:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:14:82:88:F1:E9:C8:A2:00:F3:AD:49:4C:FD:CD:F1:76:44:D9
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/JcsUgojx6ciiAPOtSUz9zfF2RNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.0.0/19
217.25.0.0/20
IPv6:
2a00:eac0::/32
Signature Algorithm: sha256WithRSAEncryption
99:b7:7a:c9:ff:69:80:c5:a3:8d:36:d0:71:d8:ff:a2:7e:47:
e9:8c:45:37:27:87:af:46:8c:64:fe:dc:5f:d5:63:4a:e2:ed:
97:74:8c:8f:5f:3d:76:0a:72:2c:ed:4d:dd:a7:52:66:6e:3f:
b1:4e:c7:9f:3f:46:2a:0c:ae:d4:e9:65:17:57:29:03:a6:f7:
b5:f0:9d:e5:5e:db:bf:b4:8d:2f:cd:0b:78:61:8e:84:ea:ca:
e4:c4:37:54:55:04:4b:25:d4:8e:3a:35:81:18:8a:60:4f:69:
6c:25:b4:ca:ac:4a:1a:db:eb:32:81:ec:a6:9a:8b:bf:e7:82:
ed:ad:2b:09:d9:8e:ef:b6:b8:54:44:11:d2:4b:dd:46:51:9f:
3e:b2:b9:27:7d:b1:aa:f1:8e:0c:00:1b:35:7d:40:ac:74:79:
2f:ca:d8:04:20:f6:74:71:29:c8:09:5c:52:e2:2f:38:24:c3:
c2:b8:6f:e5:d2:bd:53:bb:bc:73:a7:67:30:dd:7f:0e:f2:db:
32:5e:76:48:fd:50:64:62:f6:ca:c3:a5:0f:1b:92:4a:26:4f:
1c:e4:a1:f2:ee:07:ac:31:c6:b1:24:0f:f6:84:d0:ba:f1:5e:
2c:dd:f5:9f:c3:05:74:83:81:15:2c:c2:d2:70:df:c7:23:96:
b7:8c:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:47 2024 by rpki-client on console-fra.rpki-client.org