Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/_JSMmIL7ta-Qnze96aE3ndH9PAM.roa
File: _JSMmIL7ta-Qnze96aE3ndH9PAM.roa (raw, json)
Hash identifier: vi/p99pqWq2ODTBBk6WtpUeWhXnR4u+8n1/99E5+whM=
Subject key identifier: FC:94:8C:98:82:FB:B5:AF:90:9F:37:BD:E9:A1:37:9D:D1:FD:3C:03
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01882B97484133DEB2C3DB73F169D49166F7
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/_JSMmIL7ta-Qnze96aE3ndH9PAM.roa
Signing time: Wed 17 May 2023 21:21:54 +0000
ROA not before: Wed 17 May 2023 21:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.170.0/23 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:97:48:41:33:de:b2:c3:db:73:f1:69:d4:91:66:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 17 21:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc948c9882fbb5af909f37bde9a1379dd1fd3c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:80:66:cc:d5:ca:85:ee:67:36:8c:c1:16:
44:58:92:d1:3c:7c:bd:05:1c:4a:87:bc:04:79:ee:
c8:7b:6b:27:ff:22:62:17:1f:f0:8f:14:b3:ea:16:
c8:a7:53:8c:bf:5d:12:64:54:32:73:42:d0:87:68:
f3:80:99:a2:e6:85:ac:9b:4b:2a:54:e9:51:b0:1b:
5b:1c:15:5f:43:03:98:53:a2:1a:b9:23:2b:dc:a7:
30:7e:1e:7f:43:df:c4:4c:56:03:2e:34:02:df:90:
1e:6d:df:3e:6a:36:27:ff:30:28:e2:35:17:49:52:
3c:4d:b4:a9:d4:eb:b9:b2:ae:7c:68:71:00:30:a5:
d9:07:2b:54:cf:d4:91:c7:ef:9c:cf:16:8f:04:73:
85:39:20:60:3b:25:4f:4f:8d:c2:6b:b9:a7:9b:5c:
c4:29:4f:f2:ad:91:10:f1:b7:82:ed:0a:b5:02:db:
2f:a3:56:ed:71:9d:68:39:14:37:21:89:0e:8b:0a:
38:cf:9d:cf:63:de:86:d2:5b:da:69:75:35:86:30:
c9:7d:e8:9b:8a:4f:bc:66:7d:f6:9c:27:b1:8f:7c:
f5:ed:6e:0d:01:80:ad:d8:24:f5:1d:5d:52:af:1e:
36:48:e4:cf:38:cd:7c:f3:33:85:69:63:a6:4e:ad:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:8C:98:82:FB:B5:AF:90:9F:37:BD:E9:A1:37:9D:D1:FD:3C:03
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/_JSMmIL7ta-Qnze96aE3ndH9PAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/24
87.254.19.0/24
185.210.170.0/23
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:86:0f:09:bc:bc:36:f9:7b:e1:39:ee:c3:b1:63:84:9c:8b:
99:34:57:b4:23:32:b8:be:a1:33:96:4e:ae:36:cf:ba:1f:53:
09:04:63:bf:d2:cb:37:1a:8e:0a:99:a9:c8:1a:9a:a6:9f:a8:
26:0d:6c:d8:da:b8:c0:3e:ac:80:80:55:e1:cc:1c:a5:28:ab:
56:14:20:ed:25:02:3d:bc:79:8b:af:84:1b:17:1d:a6:a3:1a:
cd:17:9e:29:6b:dd:1e:b9:28:26:82:15:a9:aa:a6:18:95:31:
3b:d0:ab:24:26:07:0e:0f:47:fd:f0:dc:5a:6a:f2:17:99:30:
d4:e5:61:fb:53:75:7d:30:5d:b4:27:47:b4:06:21:4f:f6:70:
34:83:1a:52:e7:5c:10:ef:98:ca:eb:bd:61:1d:78:ac:ec:75:
84:d9:47:0f:27:d4:fa:f6:ea:ed:01:9f:8c:b4:cb:ef:83:bd:
8e:6b:6a:35:aa:45:4e:39:ad:89:f2:47:43:14:c3:17:2c:3a:
d6:7c:ca:dc:00:4f:11:22:00:bc:0a:76:1a:16:af:e6:97:0d:
30:b3:76:4c:b0:6d:b0:7c:a6:c0:da:eb:7b:36:c6:e9:c6:d9:
84:fa:d1:f8:c6:3a:e9:7f:bd:7e:52:fb:2d:4f:0a:91:c5:0f:
cb:46:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org