Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jTOMgY0euaLbarhASQ-SfRpgJvs.roa
File: jTOMgY0euaLbarhASQ-SfRpgJvs.roa (raw, json)
Hash identifier: Gzp1VdI1V5t/cXL+IhNXI55vv4i0SCiz6MYKPcE0coU=
Subject key identifier: 8D:33:8C:81:8D:1E:B9:A2:DB:6A:B8:40:49:0F:92:7D:1A:60:26:FB
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0187CEB7C05857D1C362A48D31CF967B9CA5
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jTOMgY0euaLbarhASQ-SfRpgJvs.roa
Signing time: Sat 29 Apr 2023 20:32:41 +0000
ROA not before: Sat 29 Apr 2023 20:32:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:b7:c0:58:57:d1:c3:62:a4:8d:31:cf:96:7b:9c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 29 20:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d338c818d1eb9a2db6ab840490f927d1a6026fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:8c:aa:65:c3:92:82:1f:0c:ba:77:9a:42:
ed:e2:19:ea:2b:f1:e5:44:f9:a1:85:84:48:d9:eb:
ff:f4:fc:22:52:45:a6:6c:54:8b:33:58:e4:63:2e:
68:eb:c6:92:86:8f:04:9d:37:cd:85:e6:88:96:0f:
24:5b:95:2b:9f:0f:6e:d0:ca:c3:c7:a2:37:1f:ce:
5a:f4:99:87:43:b9:f5:69:92:c7:47:ea:60:70:bf:
77:84:61:1b:69:09:62:69:82:16:2d:91:a4:8d:59:
40:97:b4:48:09:92:25:36:b0:40:26:f6:34:fe:84:
72:eb:e6:16:61:0b:54:c0:a2:f4:f5:e4:00:8f:d4:
2e:05:8a:07:50:3a:21:ff:b3:80:ea:89:6b:88:b3:
5c:4c:7a:45:df:ad:18:38:54:8c:a9:7c:b1:6f:07:
4b:81:c0:bb:62:c5:70:33:73:e2:0a:45:00:49:41:
84:97:f0:bd:4a:75:27:71:a7:e5:b6:9a:95:9a:52:
3e:0b:6c:1c:76:88:5a:0e:e8:cf:b4:0c:a7:b7:b5:
89:d4:f9:3f:09:e9:04:82:45:39:e1:6a:c6:85:22:
6f:b2:c9:d1:b1:6d:ce:b9:f4:a3:52:4c:e2:24:aa:
fd:33:25:b2:4c:36:90:fb:5e:28:f3:f5:a7:ec:45:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:8C:81:8D:1E:B9:A2:DB:6A:B8:40:49:0F:92:7D:1A:60:26:FB
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jTOMgY0euaLbarhASQ-SfRpgJvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
87.254.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e3:1e:43:c8:44:27:1d:bb:03:2e:bc:a5:31:0b:68:87:9c:
db:2e:83:a6:41:75:4b:85:04:fb:c5:73:7b:11:a5:6e:8f:b8:
7b:eb:4d:52:ad:08:22:8a:53:cf:30:4d:41:9c:62:03:c6:cf:
59:1c:c9:c3:ad:09:0a:14:e3:c5:1c:27:e1:10:cb:06:b0:87:
14:b4:29:cc:eb:a2:dd:f3:08:06:d6:83:02:32:01:48:cd:54:
53:3a:e0:79:50:18:a3:f7:20:99:da:7c:cf:ac:ba:3e:18:48:
97:d4:64:63:5c:e7:a1:81:06:98:b1:e3:54:79:ed:37:6e:42:
51:e7:c9:e4:95:fe:c3:f0:f6:5e:9d:90:ee:d0:1d:fe:dd:0e:
b7:6e:8a:15:fc:7d:a9:cd:f5:b5:d3:86:f6:c8:6e:ff:2d:02:
c5:be:c2:05:4b:a9:2b:c4:79:0b:8f:6d:ca:c5:51:55:63:24:
62:a2:45:08:07:81:94:21:62:c1:20:8b:23:85:3f:82:f1:5b:
a3:c2:cb:e2:f3:69:f0:51:62:d9:3a:91:37:9b:7c:11:b4:aa:
22:a5:8a:93:6a:f9:bf:1e:40:36:67:b0:8f:ba:3f:28:48:0c:
9f:ae:32:2b:2d:ec:62:21:85:4f:3d:95:53:a2:21:ea:15:04:
3c:ba:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org