Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/iCLolLHfWLIw6QZxZE2R-LFJMEo.roa
File: iCLolLHfWLIw6QZxZE2R-LFJMEo.roa (raw, json)
Hash identifier: n/3PTNd0wuVXGaxqVGLoazxBK0/6jmW6pwbqLCcb6rM=
Subject key identifier: 88:22:E8:94:B1:DF:58:B2:30:E9:06:71:64:4D:91:F8:B1:49:30:4A
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0191E5E66AA94851BF1E461703B98DDD8BD9
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/iCLolLHfWLIw6QZxZE2R-LFJMEo.roa
Signing time: Thu 12 Sep 2024 11:02:48 +0000
ROA not before: Thu 12 Sep 2024 11:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.254.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 10:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:e6:6a:a9:48:51:bf:1e:46:17:03:b9:8d:dd:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 12 11:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8822e894b1df58b230e90671644d91f8b149304a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:1f:4b:87:5a:0d:2c:72:8a:da:2a:f1:cc:
8f:1f:95:79:74:4e:73:3e:09:d4:f0:53:4d:70:c5:
22:6a:2c:f3:53:ad:9f:2e:30:86:42:db:f7:e9:b3:
c2:15:44:20:1e:c2:bf:46:c2:4e:f3:81:0e:29:a7:
d6:0a:3b:6f:cb:fd:bd:7d:64:64:38:30:1c:3e:eb:
da:f7:40:0a:b3:00:75:94:f1:c3:9f:c6:b7:1a:78:
8b:bd:9d:ed:2b:80:a2:e4:d4:0e:94:5d:72:37:99:
34:3f:31:ec:a3:b9:b3:d3:09:96:45:2f:36:44:30:
bb:ef:1c:05:8e:e2:85:97:08:b9:39:33:b8:84:b5:
a3:e0:e2:9d:2a:a5:dc:71:da:a0:b2:65:cf:93:a8:
a1:60:e6:98:85:29:42:c9:b0:0a:3e:c1:91:32:01:
fc:cd:21:89:c3:f9:03:62:dc:5f:dd:59:8b:bf:f4:
69:fb:89:9f:2f:58:5b:d4:7a:c9:97:2c:08:56:d3:
5f:d7:04:4c:db:3b:0d:ca:f8:ce:91:11:78:a4:6f:
bd:f2:75:0c:36:3e:c7:e8:1e:44:0b:38:11:25:82:
cf:45:ab:84:33:ef:cb:b9:f0:1e:c1:7d:30:4f:02:
6b:ab:8a:c9:1d:b7:c3:92:cf:c3:b6:e2:02:da:60:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:E8:94:B1:DF:58:B2:30:E9:06:71:64:4D:91:F8:B1:49:30:4A
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/iCLolLHfWLIw6QZxZE2R-LFJMEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a5:28:de:3a:bb:25:fd:08:ff:b8:c1:f1:3b:36:11:42:dc:
eb:ac:f5:70:9a:a9:02:24:61:a9:10:dd:ab:b7:64:8b:05:c1:
2e:a5:d8:d5:b1:8b:f2:f1:0f:bf:f6:38:36:59:fc:1d:51:21:
6d:58:80:99:cb:4c:f3:ef:d4:71:d3:6a:c8:e8:1c:e9:c7:21:
fb:19:f6:a2:40:67:c6:8b:c2:95:72:d9:3b:21:87:9b:92:e5:
e4:b8:cf:17:e8:e6:51:d9:21:00:4c:d2:f1:d7:69:3c:ba:2f:
52:8d:72:82:db:87:a9:20:d0:c7:51:2f:35:14:af:73:ae:0e:
99:0d:33:0f:d5:41:c9:06:2d:c9:49:b1:e8:f3:38:5f:dd:07:
26:8d:a9:dc:1a:c1:58:3b:8c:cd:63:5a:30:be:f2:3d:26:ce:
22:0f:66:c4:02:50:c5:ee:7a:a7:9a:a6:d7:a0:83:b0:f1:7a:
d4:71:89:02:84:8e:46:ee:b7:bd:f7:a9:5a:ae:c1:c2:01:82:
79:b1:2e:88:94:24:8e:b8:e4:ea:20:e8:3f:7c:5b:3a:51:e5:
cc:72:a8:34:c6:95:eb:a6:f3:e0:45:7e:aa:b7:0d:52:fd:40:
4d:e2:89:b7:1f:f2:02:67:b5:3b:7f:0a:a0:69:95:51:e3:dc:
06:d7:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:07 2024 by rpki-client on console-fra.rpki-client.org