Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/NHjHHPiHX1U2QhOF0OS0smGAymg.roa
File: NHjHHPiHX1U2QhOF0OS0smGAymg.roa (raw, json)
Hash identifier: wlpNUHJiqJ925WdxrZY60kbqE0iFqYHAte6U7ppOJY4=
Subject key identifier: 34:78:C7:1C:F8:87:5F:55:36:42:13:85:D0:E4:B4:B2:61:80:CA:68
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188A553301BD0E9BBFB0FE3227EA99EA14D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/NHjHHPiHX1U2QhOF0OS0smGAymg.roa
Signing time: Sat 10 Jun 2023 12:41:12 +0000
ROA not before: Sat 10 Jun 2023 12:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.11.0/24 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a5:53:30:1b:d0:e9:bb:fb:0f:e3:22:7e:a9:9e:a1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 10 12:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3478c71cf8875f5536421385d0e4b4b26180ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:34:3d:23:6c:68:d4:e3:4c:11:eb:92:8b:
5a:8d:b8:4d:56:c2:f6:6c:85:db:30:86:aa:1f:59:
61:13:20:de:bd:c4:41:09:07:06:a8:32:0f:cd:05:
be:3a:fe:1c:82:a5:a4:81:cc:38:0c:db:2f:72:37:
fd:0c:65:82:2e:6a:78:2d:e0:74:65:d7:4a:4b:c1:
1f:45:90:b1:42:fd:7f:7c:ce:cc:f6:fc:c4:3a:0d:
02:45:14:a4:2b:89:09:a5:fb:30:6a:b7:d7:e2:4f:
9d:d3:1b:85:17:0f:da:22:fa:cc:7e:f4:75:82:41:
65:16:8d:bc:c6:68:c6:09:9c:eb:a7:8a:12:8f:5c:
77:9a:65:7b:1f:9d:d9:82:d8:e9:3a:49:71:f4:26:
41:e9:e8:c6:72:cd:7a:ed:71:0c:02:c5:a2:bd:88:
44:c2:5f:fc:40:63:ed:01:60:5d:c6:ab:44:bb:1b:
d9:90:96:9f:f1:b8:df:61:31:81:4b:c6:f4:54:15:
41:19:31:8b:6c:9a:c4:e3:86:01:35:aa:ce:99:e9:
e7:1c:c5:6f:12:cc:05:52:68:81:c3:5f:38:19:57:
11:32:94:19:e5:0f:f3:14:94:f5:3f:c2:75:46:8c:
db:25:a4:90:71:e1:d1:fe:ab:f7:c7:01:96:0b:f0:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:C7:1C:F8:87:5F:55:36:42:13:85:D0:E4:B4:B2:61:80:CA:68
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/NHjHHPiHX1U2QhOF0OS0smGAymg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
87.254.16.0/23
87.254.19.0/24
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b9:6b:bd:19:8f:7c:4b:cb:6f:89:19:59:ae:4d:b2:e0:f3:
4f:db:5d:ca:69:e0:62:99:5d:f5:dc:a0:6e:c9:32:7a:09:5e:
de:1d:1f:4c:0c:28:14:94:cc:3d:13:3d:01:85:fb:3e:99:80:
9e:ed:ab:11:99:9e:cd:8e:b5:1b:f4:05:9a:e7:be:37:2c:c4:
60:82:6b:f0:ad:5e:6c:08:45:8d:46:a2:55:c1:1c:f8:fd:84:
7c:85:ea:6d:04:b8:5a:5d:84:1f:88:43:96:04:4c:cd:b9:89:
8d:b6:a9:fe:fb:fe:ef:a6:64:e3:59:ed:6d:9d:9f:c0:64:81:
1c:af:e5:1d:c0:2d:2c:fd:10:e2:a1:ce:63:17:35:67:3b:8d:
28:83:fe:63:78:6f:7d:c3:b0:25:7c:c3:bc:3d:f8:07:a6:22:
73:b0:c0:0a:bd:01:1c:9a:2d:20:c4:a7:dc:af:61:45:d3:14:
38:08:89:d9:fb:ad:a3:42:e3:c1:6e:88:02:79:32:91:2f:16:
d7:84:cd:0b:53:7f:45:1d:71:0d:ee:56:ac:57:75:fd:77:41:
c8:ba:ee:4e:35:35:f7:2e:c2:98:36:29:f7:4e:55:e1:3a:fa:
ae:0d:39:c5:d0:eb:25:fd:98:01:fd:2e:4e:c8:d1:0f:7c:59:
31:f9:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org