Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/h2_2rTDDdV_oUtbbBak75wFOO8c.roa
File: h2_2rTDDdV_oUtbbBak75wFOO8c.roa (raw, json)
Hash identifier: xulwsqUegS3aba09Bp/FiiF424EVoJoIXSLvUqlgnos=
Subject key identifier: 87:6F:F6:AD:30:C3:75:5F:E8:52:D6:DB:05:A9:3B:E7:01:4E:3B:C7
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0187DBA7B340360BBFC849C54C2A98E8CA49
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/h2_2rTDDdV_oUtbbBak75wFOO8c.roa
Signing time: Tue 02 May 2023 08:50:13 +0000
ROA not before: Tue 02 May 2023 08:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
185.210.168.0/23 maxlen: 23
185.210.170.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:a7:b3:40:36:0b:bf:c8:49:c5:4c:2a:98:e8:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 2 08:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=876ff6ad30c3755fe852d6db05a93be7014e3bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:2a:c3:e2:cf:b6:d3:3b:06:b2:49:fd:5a:
40:ac:d1:4a:60:6d:7b:35:f0:ab:42:50:0b:96:91:
a4:a3:c8:9d:2e:00:57:86:24:d9:04:ce:0e:a6:26:
f0:5a:66:41:de:c9:80:69:04:25:2a:7b:77:7b:c8:
1b:e8:5d:3e:91:34:f1:c8:3b:a7:ad:79:4a:11:49:
15:d4:2b:ad:ab:62:63:96:38:3e:8c:88:4e:39:73:
89:77:51:bf:2a:fe:72:fb:2f:40:24:a5:54:c6:cd:
32:87:d0:9c:20:3c:9c:af:bc:3f:d3:b9:4a:62:ff:
98:c8:95:8d:eb:48:0b:db:44:d4:95:4b:70:f5:4f:
cf:26:fb:22:95:fb:31:41:30:e1:23:73:4b:82:23:
3e:91:fd:a4:90:e1:c0:e8:fd:0e:a6:74:c2:1d:3b:
e7:f3:df:bd:06:41:7b:cd:fb:2e:02:85:e6:e1:cc:
1d:d2:9b:fd:e9:41:fa:37:0c:87:93:f0:c8:45:a8:
ff:b4:70:66:b9:66:45:4b:bf:7f:26:a6:f5:e8:af:
2e:1c:5a:73:e6:c1:54:9c:bc:21:92:05:3f:ab:79:
4a:9b:32:17:26:53:6a:a3:8a:f8:e6:b3:53:b5:2e:
ce:da:1f:33:03:41:9e:fc:af:76:23:65:e2:6e:65:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:F6:AD:30:C3:75:5F:E8:52:D6:DB:05:A9:3B:E7:01:4E:3B:C7
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/h2_2rTDDdV_oUtbbBak75wFOO8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.8.0/24
87.254.10.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
63:71:06:9d:58:0b:7a:1a:f1:9d:ee:73:07:81:5a:da:0d:2f:
fa:1a:b5:58:84:77:38:2f:40:70:7b:34:dd:4d:39:cd:e6:f1:
97:09:eb:77:a6:c0:2d:98:42:a8:20:ef:ec:a9:68:3e:21:ea:
40:43:25:cd:34:c9:0b:30:73:b4:4c:c5:28:d3:00:e0:1e:39:
fc:ba:b6:c5:03:a3:04:0e:bc:07:d0:3d:45:e3:e6:3d:ea:ff:
e4:a3:68:41:29:a2:20:75:b5:38:53:a9:1c:00:6f:81:83:4c:
f3:c3:9b:c9:71:a9:0c:b2:ed:e3:6f:b8:8c:ff:f9:00:72:1f:
5d:14:97:7f:08:b8:62:ee:a1:30:62:21:ff:3b:ce:80:82:90:
03:b5:59:ec:a9:b2:dc:0a:dd:c9:55:3b:5a:85:7d:92:c4:0a:
64:21:41:7c:9d:df:f9:91:70:69:ec:90:4f:6e:73:af:d4:2a:
5a:60:14:90:24:7a:72:08:6c:8f:6d:47:ee:48:c0:ba:85:d3:
6e:a8:81:95:9d:31:06:f5:ec:b8:be:96:2b:a4:20:87:e6:ba:
77:9a:c5:36:41:da:20:a7:d0:cf:47:9d:af:e8:fc:c9:5f:d5:
40:39:89:d5:d9:6c:d2:67:e4:f6:ef:cf:e8:8b:fd:f8:c5:ae:
90:72:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org