Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/cDdzqKi5z5txBgoMRuqUVsMj26M.roa
File: cDdzqKi5z5txBgoMRuqUVsMj26M.roa (raw, json)
Hash identifier: VHp/n0gzxfK9EaTvDBSJR1iSkpSgHckWCD8tAyG+cUk=
Subject key identifier: 70:37:73:A8:A8:B9:CF:9B:71:06:0A:0C:46:EA:94:56:C3:23:DB:A3
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018570707C4BD682ECB4EEB822C78E26F34E
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/cDdzqKi5z5txBgoMRuqUVsMj26M.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 87.254.10.0/24 maxlen: 24
87.254.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7c:4b:d6:82:ec:b4:ee:b8:22:c7:8e:26:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703773a8a8b9cf9b71060a0c46ea9456c323dba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:26:9d:10:43:89:f7:82:8d:6b:87:77:74:
9a:65:8f:37:f3:e2:2b:f8:9e:da:21:18:fe:c3:df:
3b:a4:45:ed:98:d6:a2:82:da:56:fb:ce:f8:25:c3:
87:66:0c:a7:da:dd:68:84:ac:7c:7d:0d:bb:f0:bd:
f0:b1:4c:0d:a5:22:df:f1:cb:e3:8d:72:50:7c:a2:
75:43:93:a7:73:f8:d2:94:b6:0f:01:36:98:b3:8b:
23:00:97:26:08:e5:87:8d:aa:69:b0:b7:f1:0b:34:
df:60:7b:2d:f0:99:0f:e6:c1:0d:7f:44:df:d1:92:
a9:65:04:f6:76:6b:52:6a:b1:23:e0:cd:f3:b0:38:
fd:c1:b1:f3:58:cb:29:ef:e4:f3:65:07:cc:d5:16:
4a:dc:97:e8:32:72:38:40:da:94:c0:12:f8:c0:6f:
73:37:d8:36:7e:ba:0b:b6:ec:0e:74:d5:9e:2a:91:
bb:ba:ce:a3:be:5e:45:02:28:21:d1:53:b6:be:be:
69:bf:5b:7a:cc:37:bc:60:c1:7b:55:ed:75:09:fe:
43:0c:b1:14:cb:3f:27:c3:a9:99:0a:c8:68:a6:e8:
8e:f5:e1:7d:85:58:00:8f:50:c2:f7:16:7e:da:57:
3e:26:de:e4:1b:07:d7:5b:3e:35:5c:2c:78:bd:3c:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:73:A8:A8:B9:CF:9B:71:06:0A:0C:46:EA:94:56:C3:23:DB:A3
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/cDdzqKi5z5txBgoMRuqUVsMj26M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6b:71:d4:22:da:de:63:0a:2a:f1:7d:0d:49:ee:80:59:93:
ee:b0:2b:a6:74:18:03:92:76:e9:59:91:2b:fc:28:3f:ef:53:
8c:b8:0d:49:ed:af:3a:0e:b8:42:d9:f3:5b:f4:d8:ed:21:09:
b2:d7:c5:94:e8:3d:81:53:9f:5d:d0:c3:ed:1d:b2:fe:1d:92:
a6:3c:55:6e:e7:8f:5e:ad:ef:da:55:f5:c1:ce:d7:d9:93:38:
99:c7:64:f4:a4:cd:4e:6f:e7:25:3d:76:b3:c7:cb:5d:0c:38:
6c:1c:71:62:8a:a8:b9:a6:56:4d:2a:b9:24:81:53:25:c1:d8:
2d:42:e8:0a:50:44:f3:ce:e7:2f:05:0f:0e:ee:da:42:e6:c7:
c5:75:4b:f2:83:28:69:de:75:86:70:18:c2:f6:f6:9a:4a:d7:
88:82:65:e7:19:f9:41:e8:43:be:09:76:19:38:b8:47:a8:e9:
47:c1:68:81:fe:7a:39:5f:5e:0b:4e:ce:7b:c4:26:b9:a9:94:
08:e4:c9:1b:0e:9b:64:ac:97:80:c9:6c:04:c0:e9:1d:19:d5:
9f:94:da:01:94:d1:61:ac:c4:b9:6c:42:24:21:9a:9a:aa:a5:
66:65:a3:17:06:11:34:76:bf:97:86:70:70:58:3f:fe:44:8c:
73:ed:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org