Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Rdunt9mYbKOGez7zAicVm1G6Qqs.roa
File: Rdunt9mYbKOGez7zAicVm1G6Qqs.roa (raw, json)
Hash identifier: FMYG3Fdj9ZIo2piRQHYcLcaGmqEQ3NSsOz3Hqtb4NO8=
Subject key identifier: 45:DB:A7:B7:D9:98:6C:A3:86:7B:3E:F3:02:27:15:9B:51:BA:42:AB
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01891CA1D9905CB018EC2DC4FDBA77767869
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Rdunt9mYbKOGez7zAicVm1G6Qqs.roa
Signing time: Mon 03 Jul 2023 16:41:56 +0000
ROA not before: Mon 03 Jul 2023 16:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.31.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 09:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:a1:d9:90:5c:b0:18:ec:2d:c4:fd:ba:77:76:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 3 16:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45dba7b7d9986ca3867b3ef30227159b51ba42ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:2b:56:2a:a1:5c:6a:57:6d:5b:c1:18:1c:
a2:54:31:c3:43:ce:92:83:aa:f2:26:f8:f4:52:c0:
78:f1:cc:1c:32:c0:5e:5e:74:a8:1a:76:44:e5:0a:
a9:a9:11:84:fc:c0:96:42:b7:42:c6:cd:e3:f5:8c:
13:7c:67:ef:14:66:f9:49:79:b2:5e:5e:10:0b:b9:
4b:5b:b1:c8:a4:39:dd:06:3a:88:0a:5b:8c:9f:4f:
9a:1d:eb:aa:db:b5:f0:61:c1:b3:e3:5b:a3:be:2b:
35:48:f1:d0:68:e8:71:95:10:85:2a:50:fd:4d:d6:
d4:c4:3c:b8:29:59:35:51:ae:da:ef:23:4d:3b:fc:
2e:a3:3e:66:f9:5c:ac:5e:de:60:c8:c5:65:6f:e7:
93:cc:79:75:80:69:0b:ad:2b:af:59:2f:8f:40:fd:
13:19:ee:73:01:4c:79:b5:53:9c:53:4c:3a:8c:c6:
0c:ed:e2:41:a6:2b:22:65:4e:c4:ac:a5:52:60:bd:
af:0b:33:b9:b7:ae:21:18:64:a9:25:65:eb:8b:30:
90:aa:d4:d6:dd:94:1c:7a:8b:df:95:2c:3e:99:6b:
17:f8:07:c1:7f:fb:47:2e:5e:50:0d:16:fe:38:31:
ba:3c:16:bb:3d:85:fd:7b:78:5a:9e:4e:8c:f8:3e:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:A7:B7:D9:98:6C:A3:86:7B:3E:F3:02:27:15:9B:51:BA:42:AB
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Rdunt9mYbKOGez7zAicVm1G6Qqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/23
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0e:ec:2e:80:54:1c:d5:6b:83:2b:db:0a:8b:9e:43:df:fc:
07:fe:9c:08:94:55:6d:e6:0f:2a:3e:23:24:33:d2:b1:be:33:
5c:41:61:c2:e9:ae:6c:65:87:4b:d6:5c:f4:6e:1a:3e:f0:52:
df:48:0f:e9:e4:c3:7c:e4:10:c6:47:31:c4:19:73:51:2c:77:
1d:f8:02:ed:03:b7:3b:23:d4:06:66:61:7a:66:84:92:d8:6b:
14:b6:c6:6f:32:c9:8c:85:67:bf:c6:5b:85:d2:ff:76:80:20:
da:08:8a:02:ea:84:ed:e8:9a:41:bf:9c:29:57:ed:c1:2b:90:
d2:4d:27:64:06:42:19:4b:86:12:ac:61:da:07:56:31:05:8f:
28:fa:ad:2c:eb:28:8d:67:d8:c7:8b:84:3b:b0:0c:b8:bc:19:
05:74:8e:0d:d8:3f:40:cc:b1:36:dd:17:61:b1:c2:7a:d7:6a:
52:5a:58:0d:bf:31:a7:c4:26:39:15:74:8c:63:61:75:23:71:
b9:42:a9:30:b3:67:5d:4b:bd:16:13:33:1f:3e:32:59:05:13:
20:c4:e3:fe:6b:18:ea:00:eb:c3:7a:ea:c2:58:6c:c7:f2:cf:
82:ad:65:ae:71:34:81:ce:01:9c:bc:47:eb:28:f3:43:56:34:
ae:a8:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:04 2024 by rpki-client on console-fra.rpki-client.org