Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mRWdYpOI8LoGxNMbkg-OKPtMb9U.roa
File: mRWdYpOI8LoGxNMbkg-OKPtMb9U.roa (raw, json)
Hash identifier: tGk1eeASrcR9gM1tIqdQrITXMin9Fr4eQaGnj/wCosM=
Subject key identifier: 99:15:9D:62:93:88:F0:BA:06:C4:D3:1B:92:0F:8E:28:FB:4C:6F:D5
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018878237EC97763BC8C19D55385F89F33E9
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mRWdYpOI8LoGxNMbkg-OKPtMb9U.roa
Signing time: Thu 01 Jun 2023 18:06:12 +0000
ROA not before: Thu 01 Jun 2023 18:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
185.210.170.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:23:7e:c9:77:63:bc:8c:19:d5:53:85:f8:9f:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 1 18:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99159d629388f0ba06c4d31b920f8e28fb4c6fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:20:c9:41:e8:df:23:83:2b:69:f0:ff:3a:
eb:b3:60:bd:88:52:31:02:64:e7:df:c6:a1:99:0a:
31:c9:b9:03:fd:aa:06:4a:8e:55:46:f9:9e:38:1e:
7b:2f:a2:5b:7d:eb:6c:16:49:da:15:3f:74:00:4f:
17:87:f4:4c:a1:bf:d8:2f:f5:83:3c:58:a2:f9:29:
a7:89:42:50:c5:f6:31:ce:57:1c:55:ad:d1:56:27:
4b:97:0a:91:6f:8a:63:7c:90:76:6c:75:43:06:c2:
0a:e5:93:32:2f:8f:e9:e3:64:3d:96:d7:59:af:fd:
04:7e:2f:02:cb:84:2c:e9:ed:e5:3d:0b:10:93:aa:
3b:3d:3c:d9:23:cf:d2:e3:c3:77:91:fd:a4:a3:d1:
aa:40:f1:fe:83:a5:8e:bb:d1:c8:5f:ba:a3:c7:6f:
47:13:ca:ff:2a:df:f1:8d:54:38:21:3f:f4:11:fa:
fb:8b:98:38:17:4f:75:00:0f:e4:e9:79:20:5b:c1:
fc:ee:1f:7e:77:35:ab:a3:a9:28:05:35:86:e7:5c:
13:1d:53:bf:44:ba:e9:12:85:be:6f:7e:f1:a9:c3:
34:0c:36:52:39:7e:6d:01:b3:23:78:4b:9a:23:16:
60:4c:fa:fb:c4:62:cd:cf:3e:44:1f:36:44:9d:08:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:9D:62:93:88:F0:BA:06:C4:D3:1B:92:0F:8E:28:FB:4C:6F:D5
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mRWdYpOI8LoGxNMbkg-OKPtMb9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
185.210.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:10:51:b1:6e:70:ae:92:aa:17:86:c7:ff:1c:09:32:7c:98:
9f:db:bb:fd:3a:e4:0f:97:0a:be:58:28:9b:3d:49:97:63:b8:
97:26:f9:d7:6f:b0:99:b2:e2:91:00:ef:b2:ab:fb:35:45:55:
d9:f6:9b:92:c1:8b:03:c8:76:35:e3:b1:03:9e:8f:13:14:ce:
34:99:c2:bf:87:22:55:7e:7a:55:15:65:27:f6:9c:4b:b5:7a:
71:29:c6:a5:cc:69:1a:89:f8:6f:6f:55:66:b2:2a:b6:f9:55:
18:2d:15:64:d1:d6:23:fe:a4:ba:a7:b1:4d:db:9a:2a:b9:d3:
ef:d2:47:1a:90:57:af:a1:df:ca:c0:1f:97:64:98:6c:e9:70:
27:0a:62:ed:b4:97:20:dd:16:fe:e4:f7:d0:36:46:c1:3d:56:
b1:a9:97:0b:a6:85:49:d9:3d:32:b4:95:6f:ca:44:c4:c3:c8:
ff:05:9a:29:0c:73:50:fd:c2:a6:48:70:a6:68:c7:55:e1:8e:
0b:97:d0:a8:b1:c9:71:e5:b8:ce:c2:ad:d4:9c:cd:65:0a:4b:
fb:94:6d:e9:7e:10:91:e7:c5:ea:22:b5:a7:d9:d8:db:d7:c5:
e7:1c:66:fb:ea:cc:f9:64:99:ca:40:92:5a:0a:9a:30:61:9b:
a5:e0:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org