Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/gIWhR6ttNlNy_tbGY-i9x4DpFPk.roa
File: gIWhR6ttNlNy_tbGY-i9x4DpFPk.roa (raw, json)
Hash identifier: Fpj0p+kcjPRRvGpFDN2dBocNbewrDeKtdKZBtfcqSe4=
Subject key identifier: 80:85:A1:47:AB:6D:36:53:72:FE:D6:C6:63:E8:BD:C7:80:E9:14:F9
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018756AC41F00F78FDC64FA732F28884F534
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/gIWhR6ttNlNy_tbGY-i9x4DpFPk.roa
Signing time: Thu 06 Apr 2023 13:05:42 +0000
ROA not before: Thu 06 Apr 2023 13:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.11.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:ac:41:f0:0f:78:fd:c6:4f:a7:32:f2:88:84:f5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 6 13:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8085a147ab6d365372fed6c663e8bdc780e914f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:66:44:0c:8c:8e:30:46:c7:23:67:02:38:
86:69:55:33:4d:78:b0:12:a0:1a:e8:0b:26:73:a4:
66:43:61:e3:7f:8e:51:7f:c3:1d:7e:da:53:3a:67:
a2:bf:d0:74:08:7a:e6:d1:fa:0d:38:5e:be:0a:06:
ee:18:1e:52:cd:f6:b1:e9:34:9c:89:e7:0a:e1:7d:
04:2b:91:eb:d7:17:90:a8:70:6c:65:85:91:f5:3d:
e2:fb:17:46:dd:89:99:de:dd:70:02:c8:09:36:56:
05:3b:30:7f:f7:c0:21:3f:19:0c:0b:e5:12:bf:af:
7d:96:53:21:5b:85:44:6c:c2:c8:7b:d1:22:f2:f7:
08:77:35:b0:74:15:fb:f4:0f:f9:3d:45:f8:28:bc:
39:80:15:98:b1:77:65:0d:9c:0f:6e:05:f6:3b:9d:
c1:50:05:bd:58:8d:7c:99:8a:65:05:1d:2c:64:1f:
8d:52:8a:63:f0:63:cb:fa:96:b3:5f:61:12:de:75:
c9:43:91:10:39:0e:82:d7:ed:7f:46:7c:5f:50:61:
d1:76:e6:12:a5:9d:fa:09:6d:24:28:d5:b7:d4:a3:
35:2f:10:7b:a4:0f:7d:f1:33:b0:57:5c:56:62:a2:
71:86:47:14:29:24:d5:1e:62:46:ba:19:5f:a8:a1:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:A1:47:AB:6D:36:53:72:FE:D6:C6:63:E8:BD:C7:80:E9:14:F9
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/gIWhR6ttNlNy_tbGY-i9x4DpFPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.11.0/24
87.254.16.0-87.254.18.255
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:3b:b3:2d:db:91:bb:10:ae:12:30:f3:aa:a1:d6:1c:bc:36:
3a:f2:ae:6d:b4:fa:9e:c6:a2:20:a7:ae:96:2d:79:27:44:5c:
d3:50:66:c9:e8:95:67:0b:56:d4:5b:f7:52:66:09:10:96:3a:
65:b6:2d:38:37:cd:47:e5:34:8d:ef:ac:ea:61:f6:ab:32:05:
71:bb:84:7c:d8:8e:51:fa:23:78:09:69:74:0a:d6:05:8d:c5:
d0:1a:29:36:ef:a9:d9:de:a2:27:54:3f:73:a1:94:47:8d:39:
95:06:7c:15:ce:35:fc:ec:56:fa:87:83:26:fa:9e:f8:ff:60:
ee:e5:b8:0f:8f:42:30:ee:bc:a2:06:00:d5:a5:18:e6:2b:88:
69:01:d7:4d:c5:7f:ae:f5:9f:ff:ce:5a:ca:96:35:76:8f:83:
8a:a4:3a:a2:81:db:3d:35:18:77:82:12:a7:76:1a:2a:4d:02:
60:77:64:bf:c9:00:7a:19:b1:ee:b1:5d:3c:cd:3d:db:e8:c6:
64:d0:94:39:31:bf:56:64:36:e0:66:fe:99:5d:17:7a:64:a4:
0f:89:b1:21:c2:47:f4:73:88:ca:87:1f:ce:95:df:35:a6:18:
77:65:e6:5b:40:b0:ef:ed:62:0b:e9:b1:f4:a3:0f:95:d8:75:
f1:a1:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org