Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/fH97Ycq16x9UQehkpOJnESNBVlw.roa
File: fH97Ycq16x9UQehkpOJnESNBVlw.roa (raw, json)
Hash identifier: IDIxxyeQwJWrT3/7smAb3VExxjWX+hDW0Af/46bn8Io=
Subject key identifier: 7C:7F:7B:61:CA:B5:EB:1F:54:41:E8:64:A4:E2:67:11:23:41:56:5C
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0191558C3CFC1D95F9CAF2BE2A01CFA2AB31
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/fH97Ycq16x9UQehkpOJnESNBVlw.roa
Signing time: Thu 15 Aug 2024 10:18:59 +0000
ROA not before: Thu 15 Aug 2024 10:18:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 87.254.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:8c:3c:fc:1d:95:f9:ca:f2:be:2a:01:cf:a2:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Aug 15 10:18:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c7f7b61cab5eb1f5441e864a4e267112341565c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:38:7c:f2:4f:fa:01:e7:d2:5d:b2:86:c7:
48:9c:17:cf:6b:13:5f:11:ba:73:30:5e:19:90:5a:
8b:73:b3:bb:88:22:70:8c:1f:4f:e1:04:bd:03:79:
ff:10:0d:00:9c:9a:55:6c:d8:f0:53:ec:c4:d4:24:
9f:5f:23:53:d9:b4:70:c6:21:17:88:fa:fc:65:77:
09:8c:3c:2d:82:4a:bf:4a:c5:ac:a8:27:49:c6:ae:
62:1d:c1:96:a4:9a:3f:85:01:11:94:7b:3c:90:59:
9a:ed:b1:6b:eb:e2:7a:a0:66:cd:5d:67:81:38:62:
c7:4c:2e:47:b5:3f:64:17:f0:bc:00:ea:2a:1e:3d:
a9:b7:9b:25:2b:d6:c0:7d:21:86:9f:be:b8:20:21:
1a:01:1b:0b:e5:de:42:17:cc:23:32:16:23:55:3d:
e2:b2:a9:95:f7:3b:b5:b4:29:29:82:3f:26:4c:08:
de:38:49:a8:8f:37:50:db:36:3f:23:bd:5f:0c:f7:
95:22:b4:ed:17:23:2c:6d:9d:68:04:2f:49:0d:a7:
0b:37:87:7f:b7:ee:72:cf:a1:71:b7:0a:38:fa:3c:
e1:b7:50:7f:4f:e3:4a:17:89:b6:e4:fe:50:ed:9b:
09:81:f0:49:18:21:c4:96:bf:0a:8c:89:97:af:b0:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:7B:61:CA:B5:EB:1F:54:41:E8:64:A4:E2:67:11:23:41:56:5C
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/fH97Ycq16x9UQehkpOJnESNBVlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:51:ea:69:28:00:25:75:ce:6c:55:a4:be:43:71:27:07:e2:
fb:74:da:cc:01:38:ee:a9:1e:3e:f1:11:30:93:18:2f:b2:c8:
cd:3c:c2:61:4d:95:af:7b:11:53:43:a5:fc:fd:08:39:ae:93:
ed:a6:35:f0:01:6d:ed:87:c0:61:60:76:da:76:3f:8e:90:83:
57:9f:f3:c2:ff:8c:8e:17:f0:2d:b3:fc:a6:04:56:36:f0:b5:
62:ba:41:f0:0d:6f:7d:ac:9e:fb:fb:8f:62:b7:13:d8:5f:b5:
8e:12:95:39:2a:16:e4:da:11:90:e6:59:68:15:4c:0c:84:0d:
c2:44:39:b7:cd:ac:35:da:0c:ff:98:f1:c6:79:c6:e2:43:03:
9b:09:d4:07:69:19:09:b6:a0:56:2b:66:89:6f:8f:9a:ca:c0:
ac:91:df:13:6c:b4:e4:dc:d0:39:8c:58:84:7a:5d:f9:64:bb:
4f:a4:2e:73:11:ce:6a:b7:ce:97:f5:20:de:1d:d6:b5:5e:fe:
9b:4d:c0:c3:a7:44:2c:32:55:11:72:61:0d:5e:d1:9b:da:f0:
d4:8a:8b:98:e7:cd:7e:ff:91:c9:17:03:8c:7b:19:9a:08:2d:
22:cd:b9:f9:b7:f8:16:d6:a5:fb:32:1a:7e:ff:41:55:b9:72:
7c:f2:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 12:52:46 2024 by rpki-client on console-fra.rpki-client.org