Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/fcTXUptBI7qUJHpXBgHRSVlNyPA.roa
File: fcTXUptBI7qUJHpXBgHRSVlNyPA.roa (raw, json)
Hash identifier: 4+eiefawBzzHaoBEYXFTWuL62WQGdTJfC/vtf0nRNh0=
Subject key identifier: 7D:C4:D7:52:9B:41:23:BA:94:24:7A:57:06:01:D1:49:59:4D:C8:F0
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01870E504C0C1FD54D6BAD6FE7021AA5F09C
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/fcTXUptBI7qUJHpXBgHRSVlNyPA.roa
Signing time: Thu 23 Mar 2023 11:52:35 +0000
ROA not before: Thu 23 Mar 2023 11:52:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.11.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:50:4c:0c:1f:d5:4d:6b:ad:6f:e7:02:1a:a5:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Mar 23 11:52:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dc4d7529b4123ba94247a570601d149594dc8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:33:92:82:7e:25:ac:77:e1:31:d1:92:f4:
81:16:1b:04:56:f6:a2:ed:03:44:10:7e:05:d3:43:
1b:e9:3f:31:88:cf:96:1e:71:f4:f1:6f:5b:27:f6:
a7:a5:60:d0:11:cf:23:32:04:66:cc:39:43:bf:97:
99:7b:c4:5e:5e:9a:ca:ab:47:02:21:6d:68:06:fa:
02:ed:82:17:62:b0:77:0e:21:c5:08:83:5b:ea:83:
88:fb:2b:7f:37:8b:39:98:68:15:44:bf:dd:a6:5a:
5b:a1:3b:f8:da:84:5f:a7:cc:54:df:67:62:9a:90:
06:d9:b5:ea:ea:15:17:d3:9b:96:c8:d7:cc:f4:71:
53:f2:80:70:c2:a3:6c:d9:96:78:12:90:bf:64:ff:
d0:46:c1:73:e2:41:f0:f8:4d:37:7a:10:c2:02:38:
cc:d1:b7:66:a0:f3:ee:83:1c:22:33:2d:f1:bc:c4:
99:c5:a2:df:50:6d:12:0f:1f:b2:62:f6:ba:e7:10:
59:1e:bb:22:c4:64:49:92:32:a9:16:6b:a4:ed:3b:
1e:6a:93:fd:3f:d5:c1:2a:0f:ea:4c:b0:23:c8:47:
10:60:98:bd:75:20:98:b2:d4:fb:eb:f4:d3:c4:af:
08:24:1b:5e:07:15:2c:94:7c:82:4d:95:3d:89:d0:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:D7:52:9B:41:23:BA:94:24:7A:57:06:01:D1:49:59:4D:C8:F0
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/fcTXUptBI7qUJHpXBgHRSVlNyPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/23
87.254.16.0-87.254.18.255
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:35:b7:16:c9:be:f3:66:54:71:e7:a1:7b:c1:2b:55:1c:d1:
a7:3c:58:3a:aa:c3:92:a7:c0:46:d4:93:37:fd:20:72:e4:92:
84:32:bd:c4:a4:ab:61:b8:fc:cb:74:b2:0f:e3:bf:27:53:31:
d7:54:9b:d6:77:c1:5a:e1:71:39:67:42:13:5e:f1:2c:4f:0f:
62:39:df:59:88:4e:27:f0:c1:35:97:ea:6c:85:30:a4:01:c6:
0a:b0:b9:02:3e:aa:a8:e8:e8:9d:f7:e0:50:f0:c6:70:51:fa:
5e:42:f5:50:de:5a:ac:00:db:2f:92:f9:6a:eb:47:b7:57:f5:
42:17:ec:d4:6b:6e:9a:fa:0d:c4:c3:54:19:b8:37:9f:7b:51:
f6:d0:e3:1b:0f:4f:45:09:70:24:25:0c:7e:47:c2:d3:ae:87:
73:b2:8c:b8:02:16:0a:ac:f9:c5:e7:61:d9:48:87:49:be:b4:
b3:a4:2b:e8:fc:80:72:7a:8b:e2:02:32:4d:ea:07:57:ca:c6:
09:41:c0:db:e4:54:8a:d6:14:cc:50:88:31:95:e1:24:c4:32:
d7:5b:b2:43:13:10:03:53:59:e1:1d:39:c8:8d:ea:f3:25:88:
6f:e4:2e:b3:b6:23:81:06:f2:bb:7a:c9:cb:a8:29:76:98:a2:
e6:52:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org