Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VWtBe9B-Fa9Xhf836eX0V_gH3Dc.roa
File: VWtBe9B-Fa9Xhf836eX0V_gH3Dc.roa (raw, json)
Hash identifier: U85TahX48O7TlbVKUwgq8CqTL7LWHUvTPGjlbvdswak=
Subject key identifier: 55:6B:41:7B:D0:7E:15:AF:57:85:FF:37:E9:E5:F4:57:F8:07:DC:37
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018B18D330D5975BD4D7436841BD69A69B5F
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VWtBe9B-Fa9Xhf836eX0V_gH3Dc.roa
Signing time: Tue 10 Oct 2023 09:02:55 +0000
ROA not before: Tue 10 Oct 2023 09:02:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.31.0/24 maxlen: 24
87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.12.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.22.0/24 maxlen: 24
87.254.23.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:d3:30:d5:97:5b:d4:d7:43:68:41:bd:69:a6:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Oct 10 09:02:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556b417bd07e15af5785ff37e9e5f457f807dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:45:ec:0f:4a:52:56:82:aa:6e:47:42:ab:
39:6f:8d:b6:b8:54:a3:0f:00:e5:3f:0e:f4:12:b9:
d9:12:ce:1e:bf:04:6a:42:4c:eb:5a:62:fd:1f:0a:
f1:27:0a:4e:34:68:53:b3:d6:d6:2f:92:89:54:48:
2d:dd:04:54:d1:db:02:41:72:02:14:9e:a8:85:ea:
4c:79:85:83:2d:d0:c5:3b:1c:e3:e1:bf:f4:13:41:
40:74:fd:52:e6:d5:dd:3e:65:5b:7b:64:b1:0e:f7:
7d:2d:28:f1:1e:a6:bf:01:61:e9:19:c2:2c:bd:59:
24:63:d7:9e:af:46:68:69:3b:51:03:47:be:89:c3:
1b:d8:e0:87:e2:90:1c:2b:5d:2c:e8:56:4b:2d:dd:
21:21:1d:72:a1:24:15:a2:67:5a:11:9a:3d:d6:70:
cc:f6:e4:6e:6c:2e:5b:6d:63:bc:a1:1a:e9:e1:d1:
7d:65:d4:87:99:5f:31:c3:44:ef:6a:07:27:0e:df:
eb:c1:2e:b1:76:e6:22:2b:5c:a6:47:fd:61:ca:10:
85:4c:7a:80:bf:15:32:c9:8d:21:ff:92:0f:8c:8c:
03:81:d2:c3:a7:02:77:6e:1d:82:f0:ba:ac:87:ee:
b0:e2:3d:35:b0:6f:ec:10:26:65:fc:fb:e7:30:c9:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:41:7B:D0:7E:15:AF:57:85:FF:37:E9:E5:F4:57:F8:07:DC:37
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VWtBe9B-Fa9Xhf836eX0V_gH3Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/24
87.254.12.0/23
87.254.17.0-87.254.19.255
87.254.22.0/23
87.254.31.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a1:5d:0e:3e:e9:a2:47:00:78:1f:95:c4:ce:b7:ef:bd:ae:
2b:24:70:34:03:ab:1d:e1:c9:31:7f:9b:57:08:08:b2:7f:2b:
5c:79:a4:28:54:2b:3e:a6:09:d4:30:72:ee:6c:2f:44:c0:f4:
a9:3b:aa:a5:0a:a2:d5:d5:7d:24:88:48:e3:93:56:1c:b7:d2:
70:51:e6:0e:ff:c9:15:e9:3f:8e:82:54:e1:56:aa:ee:8c:d3:
91:2b:ef:16:ec:81:ab:10:16:b9:ba:91:f1:fb:42:bf:f4:29:
ab:a8:80:9f:6f:49:65:4c:34:51:6e:ea:6c:80:6c:5a:e4:b9:
6d:d9:e8:2c:7b:d1:00:22:c4:2f:d1:d1:d1:26:ae:92:35:e4:
9d:81:6f:13:09:02:e8:44:07:40:9a:1c:05:4c:4a:05:d4:6a:
35:91:a2:0b:44:ab:64:f6:bc:18:12:8a:70:d5:8d:41:c6:df:
fd:e8:36:b2:74:ca:c4:4a:6f:aa:6f:f5:02:52:c4:1e:90:a3:
e7:ce:ff:0c:13:3d:cf:d8:ea:b5:2f:7d:92:e7:e7:45:01:68:
8c:bc:f0:12:ab:e6:8c:00:23:ab:c5:16:7d:31:47:41:07:10:
2e:d3:b9:e3:c4:d3:ae:8a:d8:93:78:6e:90:7d:b9:89:88:51:
66:1e:47:2e
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 11 21:58:26 2023 by rpki-client on console-fra.rpki-client.org