Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/j8VP2j7Tx2SxA7OS_XvfbYF1Y6c.roa
File: j8VP2j7Tx2SxA7OS_XvfbYF1Y6c.roa (raw, json)
Hash identifier: hEGhqUuMG3hk80MOF98fpZXD/ESjNgt2C2yAnn7igzg=
Subject key identifier: 8F:C5:4F:DA:3E:D3:C7:64:B1:03:B3:92:FD:7B:DF:6D:81:75:63:A7
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01880A074BA057651FE4F805FCBCB885DF42
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/j8VP2j7Tx2SxA7OS_XvfbYF1Y6c.roa
Signing time: Thu 11 May 2023 08:57:10 +0000
ROA not before: Thu 11 May 2023 08:57:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.31.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:07:4b:a0:57:65:1f:e4:f8:05:fc:bc:b8:85:df:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 11 08:57:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc54fda3ed3c764b103b392fd7bdf6d817563a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:49:b6:95:14:46:26:4d:ce:cd:47:d2:f6:
97:fc:6a:1d:13:1c:85:95:d5:f8:57:85:82:6e:fd:
e1:ce:99:a1:7e:b9:27:79:d9:5d:96:5e:8e:f3:3a:
bd:b5:ee:96:c6:b7:c9:cc:2b:8f:7a:fe:24:6a:67:
08:8e:cf:db:1d:0a:52:a8:08:c6:c3:4f:b4:08:ea:
5f:a0:b8:3a:f9:75:af:17:0c:0c:7f:59:09:41:4d:
12:99:7f:6a:e2:9b:cd:ee:23:1c:c7:90:70:fb:fe:
86:6c:fa:21:de:13:db:9c:41:d8:0f:7b:c6:dd:d2:
8e:02:21:d0:79:60:cf:23:6a:c9:fb:e7:7f:11:22:
4a:a0:18:fe:99:9b:20:a0:ea:16:91:69:3a:e7:f7:
a7:89:36:51:43:c2:e1:01:18:fa:c4:7f:03:fd:11:
fc:fa:5e:11:2b:38:79:50:ce:c4:e5:c2:c0:ae:b0:
6c:00:8f:33:fe:11:76:1e:f1:04:02:f5:55:c8:81:
0c:c9:74:07:3f:9f:f1:12:0b:b0:eb:32:9b:ef:52:
ec:53:a6:7d:42:b1:6d:fc:9f:34:4a:d3:48:f9:89:
4f:da:bf:eb:c3:6a:05:ea:1e:2f:27:c7:5e:d1:49:
1e:8d:63:eb:a9:2b:f9:90:08:00:82:42:20:d4:71:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:4F:DA:3E:D3:C7:64:B1:03:B3:92:FD:7B:DF:6D:81:75:63:A7
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/j8VP2j7Tx2SxA7OS_XvfbYF1Y6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/23
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fa:fb:54:47:b0:a9:34:bf:8f:65:6d:05:18:dd:f7:24:d0:
5d:f2:ea:38:7d:81:d9:d6:48:e9:38:6e:19:38:02:60:b5:6c:
c0:57:00:7d:4e:62:fd:e9:c5:ed:ea:3b:9f:49:89:1f:d0:7b:
4d:6c:c0:66:7b:4a:8c:84:79:47:0b:e4:87:0f:b8:24:dd:8b:
62:5a:0e:e7:ee:60:63:c9:e1:5d:22:af:1a:67:17:4e:c3:70:
ad:94:92:d7:85:21:f4:11:95:5e:58:75:e9:bc:e1:a8:b2:43:
ec:d2:12:86:75:f1:bc:82:64:0d:fd:fd:94:24:6d:df:dc:d0:
ab:2a:aa:e7:f1:9c:32:ff:eb:3b:6c:a9:d2:63:67:08:7c:32:
78:89:4a:2e:50:bb:20:86:c2:02:2b:f8:a0:06:89:6c:78:1f:
e6:0b:85:be:81:20:b8:bb:1f:aa:47:ae:7d:51:c1:c0:66:5b:
ba:7a:3e:c4:8c:9f:b2:3e:21:44:79:26:1f:87:23:8f:f3:6f:
47:da:8d:68:21:ab:d9:57:bf:86:18:d3:49:fe:1c:01:04:34:
6b:a2:dd:84:04:13:ed:bf:f0:26:0a:4a:1d:c0:7a:1d:5e:4c:
90:a2:24:20:c0:d7:c2:8a:20:ca:02:4b:5b:e0:53:7e:f3:7d:
50:93:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org