Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mp5M-lJRQPiJbrR8M8ZsFEURYPQ.roa
File: mp5M-lJRQPiJbrR8M8ZsFEURYPQ.roa (raw, json)
Hash identifier: Tjmiy+MTZqUBlTmEu+OQ/ez8/pzA3pEKNRlScKKme98=
Subject key identifier: 9A:9E:4C:FA:52:51:40:F8:89:6E:B4:7C:33:C6:6C:14:45:11:60:F4
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01862DDF3B3797283F19AD5B9C986B42D992
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mp5M-lJRQPiJbrR8M8ZsFEURYPQ.roa
Signing time: Tue 07 Feb 2023 21:54:09 +0000
ROA not before: Tue 07 Feb 2023 21:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
87.254.11.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:df:3b:37:97:28:3f:19:ad:5b:9c:98:6b:42:d9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Feb 7 21:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a9e4cfa525140f8896eb47c33c66c14451160f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:69:47:b8:1e:fa:e1:7d:c7:09:b2:ee:17:
f2:d3:44:eb:76:fb:08:3e:84:c9:c1:ba:46:de:57:
75:ed:9e:2d:65:af:48:2a:7e:21:86:57:07:2f:10:
f2:1c:1f:04:f2:c5:f9:9e:df:b6:0b:6e:2b:ae:90:
79:ec:8c:3b:ac:2e:f1:b1:86:e3:df:9d:e3:91:82:
56:63:93:5f:61:36:75:d8:71:72:bc:e2:97:30:f5:
a9:f7:3e:b1:44:87:5e:79:4d:a4:df:27:10:f0:3b:
f8:bf:c9:a4:9d:98:f4:10:c1:5e:22:9a:84:ef:0c:
3c:56:37:fc:a3:bb:f9:b4:22:4e:5c:ba:8f:29:28:
1f:23:71:77:f2:d2:45:44:d5:b3:39:e4:fc:83:59:
23:0a:e9:be:6c:09:34:fb:aa:17:5a:90:7d:7c:df:
67:1a:c4:50:99:29:25:74:18:61:9e:7d:3f:bc:1c:
1d:e5:7e:86:4d:9c:b5:10:bd:44:48:e4:7a:20:30:
29:00:0f:47:9f:17:51:b6:49:6a:af:16:78:d4:e8:
89:db:8b:4a:b5:cb:15:4d:85:16:36:cc:73:06:1f:
58:b0:59:60:33:84:8a:96:b2:dc:49:54:13:82:43:
10:e3:9f:dc:3f:6e:0c:ea:1c:f1:33:92:ea:4c:d9:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9E:4C:FA:52:51:40:F8:89:6E:B4:7C:33:C6:6C:14:45:11:60:F4
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/mp5M-lJRQPiJbrR8M8ZsFEURYPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.9.0-87.254.11.255
87.254.16.0-87.254.18.255
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:75:72:cc:54:da:c1:85:fb:6a:ff:3a:2a:42:53:6f:ac:d5:
5e:85:b2:68:ad:a9:0d:ac:47:35:69:9f:f3:f4:52:9c:a0:59:
2f:86:d8:7e:2c:50:56:71:a3:71:9a:3c:df:e2:d3:a1:6c:d1:
d8:5a:03:68:66:3d:e6:b3:87:f4:ff:13:c0:ab:bd:03:ae:9b:
e5:42:bc:15:e8:66:a6:48:50:16:88:79:37:1b:dd:49:f9:06:
07:f3:22:c2:12:76:c9:1b:ea:65:9d:7e:54:77:67:5c:d8:f6:
6d:1d:50:3b:1b:c8:2d:ef:9f:f3:69:87:37:3d:16:2a:6f:4e:
b1:e0:14:92:cf:97:19:ee:34:2c:7e:6c:7b:cd:db:7b:49:77:
62:f5:63:b4:b7:73:be:ae:86:4b:2e:e9:f3:9f:e0:ce:96:81:
81:a9:ab:bb:35:b6:58:f5:99:a6:7b:2e:2e:ee:54:d3:ac:9a:
32:cd:8b:42:f5:5a:90:3a:a5:9b:07:fc:55:5c:a5:70:82:ba:
cd:f7:d5:be:87:44:73:ab:03:8e:b9:87:25:20:5f:b2:7c:24:
70:54:07:58:5a:0a:9b:e0:cc:95:e3:5c:00:95:45:93:9b:3f:
be:45:72:08:a5:18:83:36:aa:53:09:24:6c:91:c4:6c:d6:02:
8e:ae:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org