Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eU3oV2ZOsyLNFrfmvOGDO8nB8r8.roa
File: eU3oV2ZOsyLNFrfmvOGDO8nB8r8.roa (raw, json)
Hash identifier: RdQp5npS9yflzGedpmuR7kc5oecc9L+oVMd/46tgNog=
Subject key identifier: 79:4D:E8:57:66:4E:B3:22:CD:16:B7:E6:BC:E1:83:3B:C9:C1:F2:BF
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01882921634C42FD0C8624D7C647A3A97972
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eU3oV2ZOsyLNFrfmvOGDO8nB8r8.roa
Signing time: Wed 17 May 2023 09:53:53 +0000
ROA not before: Wed 17 May 2023 09:53:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.29.0/24 maxlen: 24
87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.170.0/23 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:21:63:4c:42:fd:0c:86:24:d7:c6:47:a3:a9:79:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 17 09:53:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=794de857664eb322cd16b7e6bce1833bc9c1f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:5d:e6:1c:41:c9:b6:97:0e:c4:58:da:ba:
70:d2:25:cf:5a:08:66:87:ac:f9:32:d4:1c:40:66:
26:50:68:51:45:ad:a2:1f:6c:45:08:5c:1b:f9:56:
bf:b3:8c:8f:28:2b:10:b8:a9:10:89:02:a0:c6:04:
36:17:0e:8f:1c:46:c1:40:51:90:0c:a9:b8:5e:d3:
00:16:ad:9e:14:0c:5c:a8:4d:ee:d2:b6:cf:b0:53:
25:2a:a7:f5:a4:21:73:c9:95:09:60:ad:01:6e:f2:
51:7d:b0:0a:5d:86:52:e4:9d:fe:f0:7f:b6:f2:94:
f1:10:de:3c:d2:aa:c5:9d:05:78:40:57:3c:6e:c3:
77:7c:a8:97:32:28:d8:f5:71:d3:1a:75:1e:5c:5c:
74:f9:18:f6:0b:a0:97:7d:e7:09:5d:b1:71:a4:c3:
00:c8:e9:17:1e:e1:90:56:8d:d2:1d:d7:53:6e:89:
f6:50:01:92:f1:ed:fd:6c:7f:f8:a1:0e:bc:5d:af:
3f:28:4f:66:54:35:85:89:0b:57:86:21:23:ad:03:
62:a2:2a:da:bc:41:89:c1:7e:6f:d2:b8:b5:7d:a1:
4e:39:52:8b:fb:f9:d9:a1:fa:87:8d:bc:3a:e9:77:
d0:92:73:cc:70:a5:df:af:23:2b:b5:30:b3:11:9b:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:E8:57:66:4E:B3:22:CD:16:B7:E6:BC:E1:83:3B:C9:C1:F2:BF
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eU3oV2ZOsyLNFrfmvOGDO8nB8r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/24
87.254.19.0/24
87.254.29.0/24
185.210.170.0/23
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d3:aa:2d:79:ce:e0:5e:f6:e9:1d:43:5e:ec:dd:52:00:ff:
ca:0b:39:5f:09:ba:27:d6:2e:f4:d4:8c:29:90:09:56:fa:08:
90:b5:fb:e2:1d:c9:59:f2:0f:bf:e9:80:6e:f5:5e:a3:29:68:
56:57:1d:e3:ba:f3:82:01:39:d7:ec:cc:f5:27:16:d5:cf:ec:
cd:49:63:3a:f6:9b:40:27:30:92:dc:a8:95:2f:f7:c2:6c:80:
43:04:0a:dc:53:62:da:b8:bd:9a:5f:1e:3d:1d:9e:d6:fe:99:
ab:4a:0a:1c:fb:c2:39:4e:bb:72:41:38:05:57:fd:ab:ae:2f:
55:22:61:8e:5f:ec:29:29:a7:82:ad:2d:cc:46:ae:ea:bc:c6:
20:6e:cb:f9:db:6e:13:1e:fa:20:97:e2:32:3f:f4:14:d3:b3:
f5:62:a9:49:5f:a1:15:65:8a:e6:ac:7b:34:1b:bf:36:82:38:
68:cb:26:be:d0:a2:3d:e8:c4:37:12:8a:1c:ac:48:f8:bd:ea:
70:83:aa:a7:f7:77:78:28:8f:41:58:d7:3a:7a:31:33:00:37:
c5:86:f5:17:39:a6:36:2b:80:8d:08:23:26:04:78:cf:5b:cc:
c2:65:76:4f:02:fc:1e:04:7e:cc:0d:bf:1e:f8:10:a7:e0:63:
cb:fa:06:5f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYgpIWNMQv0MhiTXxkejqXlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNTE3MDk1MzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTRkZTg1NzY2NGViMzIyY2QxNmI3ZTZiY2UxODMzYmM5YzFmMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCJd5hxBybaXDsRY2rpw0iXPWghm
h6z5MtQcQGYmUGhRRa2iH2xFCFwb+Va/s4yPKCsQuKkQiQKgxgQ2Fw6PHEbBQFGQ
DKm4XtMAFq2eFAxcqE3u0rbPsFMlKqf1pCFzyZUJYK0BbvJRfbAKXYZS5J3+8H+2
8pTxEN480qrFnQV4QFc8bsN3fKiXMijY9XHTGnUeXFx0+Rj2C6CXfecJXbFxpMMA
yOkXHuGQVo3SHddTbon2UAGS8e39bH/4oQ68Xa8/KE9mVDWFiQtXhiEjrQNioira
vEGJwX5v0ri1faFOOVKL+/nZofqHjbw66XfQknPMcKXfryMrtTCzEZvbNwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHlN6FdmTrMizRa35rzhgzvJwfK/MB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvZVUzb1YyWk9zeUxORnJmbXZPR0RPOG5COHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAV/4CAwQA
V/4KAwQAV/4TAwQAV/4dAwQBudKqAwQA2RkBMA0GCSqGSIb3DQEBCwUAA4IBAQAR
06otec7gXvbpHUNe7N1SAP/KCzlfCbon1i701IwpkAlW+giQtfviHclZ8g+/6YBu
9V6jKWhWVx3juvOCATnX7Mz1JxbVz+zNSWM69ptAJzCS3KiVL/fCbIBDBArcU2La
uL2aXx49HZ7W/pmrSgoc+8I5TrtyQTgFV/2rri9VImGOX+wpKaeCrS3MRq7qvMYg
bsv5224THvogl+IyP/QU07P1YqlJX6EVZYrmrHs0G782gjhoyya+0KI96MQ3Eooc
rEj4vepwg6qn93d4KI9BWNc6ejEzADfFhvUXOaY2K4CNCCMmBHjPW8zCZXZPAvwe
BH7MDb8e+BCn4GPL+gZf
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org