Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ipNwD17WZqQZ8nhTvht0-h_wS-8.roa
File: ipNwD17WZqQZ8nhTvht0-h_wS-8.roa (raw, json)
Hash identifier: YtOC+W2SAoEp7mgTIP/SwLM5Ydpnxd5HMFu2/w558Dg=
Subject key identifier: 8A:93:70:0F:5E:D6:66:A4:19:F2:78:53:BE:1B:74:FA:1F:F0:4B:EF
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188C35C94CFB98D15F19F3DAD9990009F5F
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ipNwD17WZqQZ8nhTvht0-h_wS-8.roa
Signing time: Fri 16 Jun 2023 08:40:04 +0000
ROA not before: Fri 16 Jun 2023 08:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.11.0/24 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:5c:94:cf:b9:8d:15:f1:9f:3d:ad:99:90:00:9f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 16 08:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a93700f5ed666a419f27853be1b74fa1ff04bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:89:c0:42:c5:30:74:1a:db:b6:51:b2:d0:
00:5a:08:81:4d:ee:75:34:7b:94:a0:14:6c:30:21:
63:04:87:5b:83:eb:b4:7f:a8:ac:0c:40:69:c6:ba:
b8:2e:e6:d6:9c:f2:04:a4:78:6f:31:6d:aa:8e:d5:
81:c9:7e:91:46:df:cd:b6:d4:f3:0b:fd:ef:82:58:
ef:42:60:a0:3a:ea:22:8f:0f:0f:d0:4c:2c:76:d0:
0a:64:ac:9c:ff:5f:f3:fb:bc:59:95:24:7b:b2:36:
b1:6d:f2:19:7c:6f:f9:40:6f:b4:6b:b4:9d:7e:78:
88:f2:5a:32:44:00:9e:10:1b:e3:88:f3:8d:b7:7f:
e3:1d:91:96:78:d1:ba:01:22:ea:1c:b8:c6:da:25:
e4:9e:6b:d1:a2:f3:9b:ad:8c:25:54:8a:b5:b8:ca:
5d:4b:59:ef:31:95:d4:20:db:5d:35:b7:6b:8a:7a:
7c:d3:1e:df:37:a2:d9:37:6a:83:7a:bb:3b:9f:70:
66:68:d9:05:a1:16:3d:6e:f6:49:d8:05:7f:ef:8f:
66:92:cb:78:4d:48:f6:14:65:0f:c4:7a:18:81:4c:
5a:5a:ae:8d:b0:39:43:8b:79:69:60:cb:91:fd:d9:
0e:7d:32:6f:1e:02:39:50:82:76:22:d4:ab:0d:11:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:70:0F:5E:D6:66:A4:19:F2:78:53:BE:1B:74:FA:1F:F0:4B:EF
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ipNwD17WZqQZ8nhTvht0-h_wS-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
87.254.16.0/24
87.254.19.0/24
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1b:9e:68:82:a6:fe:61:b8:c6:c9:d2:ca:0f:6c:71:7a:3e:
cb:de:4e:a8:88:72:20:fc:c0:01:47:08:79:9b:8f:51:8f:86:
bd:b7:94:ff:30:31:0f:4d:a4:4c:26:b5:c7:c6:be:b1:fc:e9:
84:04:73:6d:9a:32:c2:60:b7:d9:8f:ac:dd:a5:47:1e:0c:7d:
d1:99:84:c7:f9:2a:20:e0:67:0d:78:72:56:dd:82:91:99:f3:
5a:2e:60:b3:00:68:1b:e3:6d:a4:3c:7a:c1:d8:79:89:08:cd:
46:94:bb:24:51:89:6b:50:03:df:4a:e0:84:39:d4:fb:b7:9e:
72:97:13:71:92:e6:ea:15:7b:92:c6:6c:ce:02:ed:99:d2:cf:
08:b4:d3:8c:1f:0c:9a:94:10:a9:af:01:00:f8:fd:46:b2:f2:
50:1e:cf:31:b7:75:ba:27:34:49:8e:8d:50:fa:52:df:76:ba:
68:15:a7:e4:99:9b:f8:05:94:6f:82:a8:3c:f7:ca:33:a8:a9:
ea:9e:73:a7:ee:bc:e0:70:ba:9d:39:bf:4e:a8:f3:1c:30:54:
20:c0:db:58:92:e7:c6:54:43:06:19:35:e1:d6:ab:ff:0e:cd:
6f:8c:89:81:79:21:72:64:9f:21:6d:3b:57:27:01:2d:b8:16:
10:a2:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org