Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/c466tl1c_lkTSGIkdzkyqFQuZaM.roa
File: c466tl1c_lkTSGIkdzkyqFQuZaM.roa (raw, json)
Hash identifier: +rja1x5sLWZJcujf6I9QXJwCNr/qPGdeSGTnabnAMrs=
Subject key identifier: 73:8E:BA:B6:5D:5C:FE:59:13:48:62:24:77:39:32:A8:54:2E:65:A3
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01885297917CECF8816CE81B94D4B164FE31
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/c466tl1c_lkTSGIkdzkyqFQuZaM.roa
Signing time: Thu 25 May 2023 11:07:24 +0000
ROA not before: Thu 25 May 2023 11:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:97:91:7c:ec:f8:81:6c:e8:1b:94:d4:b1:64:fe:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 25 11:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=738ebab65d5cfe5913486224773932a8542e65a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:37:da:f1:3e:73:51:d1:45:88:35:68:5a:
e8:bb:7a:dd:48:2c:a5:30:e5:db:66:cf:02:68:13:
4d:17:d6:fa:48:fc:3a:a4:5c:85:58:25:1a:eb:41:
ec:4b:64:76:42:9d:f5:8d:25:54:fd:60:b9:4c:b3:
e4:c7:b3:ed:c5:83:ca:07:1e:49:36:bb:a1:4b:e1:
b0:04:24:4f:1a:4b:ca:4b:b6:74:2c:a6:17:37:a4:
4d:eb:a4:ce:44:62:85:9e:c4:10:48:58:71:52:37:
5a:c0:4e:14:90:fc:8f:60:de:37:2a:23:de:61:6a:
1b:48:92:2e:ae:60:c1:b3:42:d9:ae:6e:96:26:a1:
b7:0c:92:ef:37:96:2b:37:74:12:d5:ad:91:61:1c:
af:4d:45:b0:e1:c8:ef:66:4e:8f:a1:bc:cf:91:08:
31:61:64:d6:2d:91:ad:8f:72:0d:2c:f3:ad:ff:af:
c5:41:87:9c:ca:7e:e1:07:37:ab:40:e3:94:4f:40:
93:9b:6c:20:4c:62:e1:d5:ad:bb:19:3c:cb:9a:0c:
e1:8e:d8:db:9b:43:68:9b:76:a0:13:e9:24:ed:a2:
e5:b5:43:6b:67:ac:58:60:75:d2:a0:f0:c8:0c:c5:
77:0e:4f:3d:24:9f:c3:c9:cc:f2:9e:e6:2b:10:f4:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:BA:B6:5D:5C:FE:59:13:48:62:24:77:39:32:A8:54:2E:65:A3
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/c466tl1c_lkTSGIkdzkyqFQuZaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
87.254.19.0/24
185.210.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:82:ad:79:d6:91:f9:6d:b4:79:ab:68:9c:97:f2:2b:94:15:
18:fd:44:4c:84:b5:bc:22:5b:10:e4:c4:82:97:6a:02:69:47:
76:f6:d3:a9:8d:34:c2:29:c9:48:ab:bc:8f:02:f6:64:d2:57:
59:4c:8e:ed:7f:9f:9a:fa:62:d9:e6:2c:27:b4:bc:8c:2e:10:
93:6c:cf:87:83:53:f4:63:b9:85:a7:f5:73:3b:1c:08:6a:f7:
e2:cc:ca:ef:5a:ee:a2:98:98:37:c5:40:ad:9e:19:37:bf:f8:
d6:c9:96:4b:7d:88:ad:1e:01:ad:d2:be:22:28:38:b3:36:8b:
eb:5b:98:90:db:0d:30:20:8b:35:e4:9d:1d:d3:7f:d9:f1:0c:
db:9f:b0:cc:3e:18:5a:53:c3:a5:89:3e:31:9a:6a:16:63:99:
a1:e1:f5:a3:97:47:f5:b9:b0:74:dd:7f:3a:6d:48:cd:36:29:
ae:45:15:e5:18:0a:01:40:40:47:ca:7c:ee:02:62:6f:78:18:
39:0d:32:79:e9:b4:c2:1b:1d:37:d2:96:33:4b:37:fc:54:0a:
f2:4b:3a:ae:93:03:ee:22:4f:13:27:4b:5e:dc:51:8a:00:7d:
79:4d:f9:68:c3:b7:d1:2e:c9:f2:12:d4:e4:72:98:11:ea:cf:
50:d2:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org