Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/PEttr94Ms-4Jz7hpPI6R_-K3G8A.roa
File: PEttr94Ms-4Jz7hpPI6R_-K3G8A.roa (raw, json)
Hash identifier: Q2rxOBRgEtBEkq+kNqh2Kvpa74YLuzWUTOgMhyWr/kc=
Subject key identifier: 3C:4B:6D:AF:DE:0C:B3:EE:09:CF:B8:69:3C:8E:91:FF:E2:B7:1B:C0
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01862DE1F9C6F7023824C3B09C18DF61BB21
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/PEttr94Ms-4Jz7hpPI6R_-K3G8A.roa
Signing time: Tue 07 Feb 2023 21:57:09 +0000
ROA not before: Tue 07 Feb 2023 21:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20915
IP address blocks: 87.254.25.0/24 maxlen: 24
87.254.2.0/24 maxlen: 24
87.254.0.0/19 maxlen: 19
217.25.0.0/20 maxlen: 20
2a00:eac0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:e1:f9:c6:f7:02:38:24:c3:b0:9c:18:df:61:bb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Feb 7 21:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c4b6dafde0cb3ee09cfb8693c8e91ffe2b71bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:a6:fa:3e:27:0b:71:ab:2c:bf:30:66:41:
aa:0b:fc:a4:d6:5f:7e:38:dd:42:70:36:9c:ba:39:
2c:12:8b:72:33:ac:ab:d8:0b:18:89:dc:79:59:b0:
ff:f0:bf:95:b8:36:0d:f1:0f:6b:9a:98:66:e7:32:
a9:6e:10:75:73:7c:83:53:bc:5f:4a:9f:14:06:dc:
6b:51:c5:68:50:6a:85:d9:fc:85:7c:3a:2e:5d:ff:
ea:83:c6:34:a5:50:ac:83:87:cb:46:79:cf:bd:a8:
8e:51:58:26:19:2d:a3:ff:ae:69:cb:44:7d:64:3b:
51:49:fa:08:1c:d2:8e:fb:2e:56:de:21:3d:ed:75:
6f:0b:44:13:99:e4:39:6d:7b:a2:a5:a3:e4:99:ed:
e0:e3:f8:30:23:b6:f3:22:c7:af:be:7d:e1:59:ac:
f2:56:97:ec:a3:a6:a2:3f:d2:6e:da:98:10:ac:48:
0c:41:94:a8:38:d8:c8:db:3e:6f:df:d6:ea:f7:95:
cf:34:de:34:63:b2:3e:b7:53:79:f6:87:5b:45:61:
0e:39:26:ad:17:f9:6d:97:fa:d2:ba:db:41:a1:93:
20:c8:fd:34:b4:a1:99:67:64:23:f8:d5:7f:fc:80:
0f:cb:80:78:95:d8:58:e4:56:eb:41:fa:6b:a9:f0:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:6D:AF:DE:0C:B3:EE:09:CF:B8:69:3C:8E:91:FF:E2:B7:1B:C0
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/PEttr94Ms-4Jz7hpPI6R_-K3G8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.0.0/19
217.25.0.0/20
IPv6:
2a00:eac0::/32
Signature Algorithm: sha256WithRSAEncryption
56:34:e5:6e:17:0a:ae:17:cf:9b:cb:c0:a7:39:63:4d:59:75:
d7:cc:cb:f5:65:f8:73:44:4c:6a:6e:ae:a8:41:15:fe:72:a8:
c1:32:12:6b:83:cb:09:a4:64:94:7f:0a:c9:98:a8:2f:f5:d1:
71:c2:91:7e:b0:33:2e:c8:fd:93:5d:8f:ec:bb:52:a0:67:f1:
7e:46:f6:87:90:20:04:c5:23:54:37:50:af:ec:bd:ad:e2:9e:
c7:30:e9:d1:61:06:14:b8:81:a5:aa:af:52:8b:d6:fd:8a:16:
5e:e9:cc:99:d9:1e:d1:f9:41:71:9d:02:6b:46:b5:a8:74:ff:
04:d6:44:4c:f7:a8:2f:cc:9a:60:a5:b9:f2:b2:c2:8c:6a:1d:
76:d7:18:a9:b8:d6:84:d8:1a:35:b9:49:ca:5a:34:01:1c:d9:
3e:9a:f1:1f:ca:28:33:42:0e:84:92:95:76:e9:aa:89:a2:2e:
79:a9:47:5e:4b:cc:3b:5c:e1:6e:aa:01:f1:8c:3a:9a:ad:36:
50:6d:2c:95:94:ef:9d:f2:c9:b5:2a:3e:c6:1d:7e:f7:cf:a7:
8d:ca:33:99:c8:1f:4d:dd:68:57:ab:1b:96:d6:66:c7:25:b3:
da:08:8b:d1:64:2b:81:6b:b6:29:2a:70:57:77:4c:de:22:d6:
52:ce:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org