Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/NHDPkBCGkeYw0PEz_19WosXLe5Q.roa
File: NHDPkBCGkeYw0PEz_19WosXLe5Q.roa (raw, json)
Hash identifier: Rv6py8VZMbHLV1QKnCccjfyQdWjR7tkQ79BjrWAx3Qk=
Subject key identifier: 34:70:CF:90:10:86:91:E6:30:D0:F1:33:FF:5F:56:A2:C5:CB:7B:94
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018570707CF62E3AC064D0A48E62CEF44FDB
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/NHDPkBCGkeYw0PEz_19WosXLe5Q.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 87.254.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7c:f6:2e:3a:c0:64:d0:a4:8e:62:ce:f4:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3470cf90108691e630d0f133ff5f56a2c5cb7b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:6c:2f:22:66:ce:6c:fc:ad:c8:ad:c2:13:
df:6c:de:9b:ee:6e:92:2b:51:d2:6d:33:df:8d:c8:
a2:ed:88:92:50:c0:1b:99:00:58:04:6a:58:0f:6c:
4c:91:24:25:59:08:f7:1b:cb:e3:df:2d:ea:92:7c:
ae:a2:cc:4f:71:c3:fc:50:29:3f:90:99:ce:41:39:
70:55:cb:22:0e:52:0b:87:35:bc:ee:5e:44:56:5e:
fa:ef:57:16:50:9e:36:72:b4:45:69:e2:25:1b:9a:
e1:e3:2c:10:52:9b:af:2d:3d:88:f3:c0:20:23:17:
41:dc:0e:3f:d3:97:50:75:69:31:5a:11:40:cc:f0:
c2:7e:25:b1:3d:9c:06:44:b5:cc:0f:0d:7c:22:a8:
1a:3f:f8:ba:ce:e1:6b:18:8e:66:54:e2:c3:57:0d:
29:0b:4d:51:41:20:b1:c4:9f:03:e0:f6:32:92:3d:
b7:9b:a4:6d:c3:e7:22:ac:64:48:c0:2c:49:96:32:
d1:fb:9a:1b:a1:ab:0d:63:06:cc:69:8f:a2:11:6e:
84:c2:d3:b5:cd:06:2c:77:f3:fa:62:9f:89:33:54:
b4:32:ea:51:c9:74:0f:5a:66:58:b2:c5:10:c5:39:
bd:fa:e7:42:01:fb:03:5f:e0:7c:32:47:16:8a:49:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:CF:90:10:86:91:E6:30:D0:F1:33:FF:5F:56:A2:C5:CB:7B:94
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/NHDPkBCGkeYw0PEz_19WosXLe5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.12.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f0:c3:e5:bd:44:f4:ff:56:66:60:2b:f3:41:ce:7a:84:ed:
88:8f:e2:33:5f:7c:a1:d4:05:76:03:84:2a:30:b2:da:83:21:
ef:16:56:f0:c2:46:86:c5:bb:1e:2d:e3:8c:ae:84:e4:f7:67:
88:8d:2f:09:0c:94:40:73:4a:34:25:98:e5:84:56:fa:6b:86:
02:bc:97:e0:1c:95:d0:bc:e1:ff:bd:6e:4f:4c:32:e6:23:d9:
2a:f1:15:d1:15:d7:8f:a2:07:a1:32:36:bb:73:74:1e:41:88:
78:7c:0a:85:cc:0c:9a:c7:a9:18:6a:fc:b4:40:4d:d5:87:f0:
a7:51:c1:c4:0f:8c:48:8b:ee:c3:d7:a2:33:dd:2e:0e:6a:77:
45:c8:ff:78:ad:7f:25:aa:c4:cf:c2:d1:4c:82:b2:0f:0a:cf:
47:90:fe:26:52:1f:a4:ea:bb:d1:d3:7e:a4:6e:b6:a6:d7:ff:
79:97:0d:76:e1:57:6f:0f:e3:4b:77:c7:11:b3:11:27:f4:9c:
b0:ec:d0:d0:6b:74:da:33:cc:ce:b2:4a:1f:bd:d7:95:6d:b2:
0b:d1:3d:79:ef:a1:73:9b:eb:cc:51:41:1d:86:d0:b0:82:75:
23:7d:7b:b4:9e:66:60:13:da:b4:ec:36:6a:02:c6:9b:e0:a1:
b5:42:0f:ec
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 24 17:53:55 2023 by rpki-client on console-fra.rpki-client.org