Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/f5WJ-8IsM41-LtNAmFjn9ju8tO0.roa
File: f5WJ-8IsM41-LtNAmFjn9ju8tO0.roa (raw, json)
Hash identifier: 3yPCB6xdMfo/0yuxW8lWfU1tCJYs4J0L9iKqFuzy2Gk=
Subject key identifier: 7F:95:89:FB:C2:2C:33:8D:7E:2E:D3:40:98:58:E7:F6:3B:BC:B4:ED
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0185707078DCE1B3E19155CEF984DB60591D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/f5WJ-8IsM41-LtNAmFjn9ju8tO0.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 87.254.17.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:78:dc:e1:b3:e1:91:55:ce:f9:84:db:60:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f9589fbc22c338d7e2ed3409858e7f63bbcb4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:21:78:7a:81:35:4c:77:aa:77:34:31:79:
58:49:f7:57:64:e0:61:99:5f:81:d3:d4:b2:4f:21:
e1:88:2c:7a:0f:ab:fb:ba:bb:12:85:d6:19:3c:57:
3c:a6:e9:16:c5:e1:ea:1e:06:9a:80:c5:36:42:3d:
3a:63:89:93:da:23:a6:a3:d6:d7:24:ce:be:46:1c:
ea:36:c1:e2:92:d9:18:0c:6d:63:02:dc:95:78:e8:
3c:52:96:75:aa:9b:f9:24:cb:29:b0:35:bb:47:40:
b1:c3:e3:4f:d3:2d:fe:fa:de:a2:ab:cc:ee:f9:8d:
68:8a:17:c5:16:92:52:a0:05:49:16:2b:0a:4e:79:
39:fb:2d:7e:5f:1b:34:5b:40:33:6f:aa:e0:9c:dd:
ce:c6:47:83:0f:ab:cd:db:1e:c2:e3:b2:82:12:01:
9e:c3:3f:06:20:bf:8b:87:60:e6:20:fb:b7:1f:4a:
a3:da:5d:06:ce:b4:a2:35:08:a7:f4:ab:71:cd:c1:
b4:99:3e:ac:9c:83:56:51:18:b6:76:7a:10:95:61:
bd:9f:0d:d7:0b:2b:ec:79:e2:f4:6b:0e:a9:7a:cd:
8e:2e:1b:3d:3b:2e:51:5c:d6:c3:82:31:cf:aa:81:
42:3f:e4:9d:05:b5:c9:ec:70:ea:a3:ed:70:8b:7a:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:95:89:FB:C2:2C:33:8D:7E:2E:D3:40:98:58:E7:F6:3B:BC:B4:ED
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/f5WJ-8IsM41-LtNAmFjn9ju8tO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.17.0/24
87.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e4:d0:b2:53:ea:eb:74:49:aa:01:1c:f6:b4:8e:f3:ef:e9:
61:99:b1:4e:0d:9c:5c:a1:45:be:24:54:08:63:69:1d:c8:ca:
fb:26:d2:1b:35:d4:44:d5:7d:d7:8e:60:66:e6:07:ad:4b:69:
04:c5:a3:bb:10:f1:ef:9d:4d:ad:73:53:6f:1f:31:4d:fa:8f:
ec:e3:e6:1a:0a:78:56:d3:e9:2b:c7:23:60:06:27:7c:3f:c7:
20:72:01:14:98:d4:d7:48:1d:4c:8e:27:6c:7e:3a:a9:dc:96:
74:d9:83:4b:2a:e1:a0:40:5f:5a:7b:3b:95:da:50:d4:06:31:
72:08:20:4b:1c:de:ee:ab:0f:09:ec:b1:e1:58:08:86:ec:4a:
79:aa:be:cd:ea:a9:e9:be:b3:64:ad:4d:25:e6:1d:8a:63:52:
19:37:c8:7f:fc:ad:44:b5:5b:0a:56:62:6c:a4:59:b2:43:02:
5c:18:7f:41:8b:64:b5:93:30:d1:2c:81:9f:0c:94:59:6e:15:
ce:2c:5b:c5:5c:8e:4a:6c:b1:21:be:2c:b3:f2:bc:c7:56:3a:
f0:e9:20:2e:17:ef:cc:48:13:3d:ea:29:e1:36:84:49:54:73:
cc:26:80:0e:23:2c:24:2d:e9:ad:c6:79:bc:66:05:db:a5:1a:
88:7c:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org