Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/sIrTdgUJOtxVBRNkvmDuf-iUbjo.roa
File: sIrTdgUJOtxVBRNkvmDuf-iUbjo.roa (raw, json)
Hash identifier: OGxhXOPler7nshYGNhoQ+RVv/rY1gSqxQR+4Rrj0GHk=
Subject key identifier: B0:8A:D3:76:05:09:3A:DC:55:05:13:64:BE:60:EE:7F:E8:94:6E:3A
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0189923536EAED317A99AE888D278371B44D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/sIrTdgUJOtxVBRNkvmDuf-iUbjo.roa
Signing time: Wed 26 Jul 2023 12:38:28 +0000
ROA not before: Wed 26 Jul 2023 12:38:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.25.12.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.22.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:35:36:ea:ed:31:7a:99:ae:88:8d:27:83:71:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 26 12:38:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b08ad37605093adc55051364be60ee7fe8946e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f9:93:e7:bc:cb:ff:ad:00:62:df:42:2b:de:
44:a2:92:db:ea:8a:7e:e1:72:88:d2:e0:2a:98:09:
5c:d4:f5:af:de:dc:29:04:62:39:0b:9b:d8:3f:e2:
77:4c:ac:38:ca:b5:1a:65:a6:a6:67:2a:2a:fc:52:
51:5b:57:ae:6e:17:6b:be:74:a0:79:b8:65:7d:57:
0f:be:f2:35:63:92:89:17:05:46:3d:56:26:c8:f3:
d9:c9:84:c7:5f:ce:b5:25:19:cf:24:11:38:ad:fe:
e7:34:b0:af:fd:a8:41:fb:5c:5c:80:c7:25:93:d6:
b6:1f:f6:53:05:d3:fc:30:cc:e2:cf:1a:b1:2e:98:
45:9b:29:36:02:96:ec:a2:0f:92:53:d8:01:fb:a3:
43:15:91:7f:50:89:3a:5a:29:d7:29:ef:40:88:83:
4e:ff:a4:d9:d0:55:b8:f7:e9:73:6a:3f:df:ed:9f:
4d:7a:8d:e4:bd:21:0e:6a:27:5f:9b:0f:b2:9d:ec:
e2:84:d6:f3:b8:72:ad:50:05:83:dc:bf:14:9c:52:
f3:06:89:df:dc:17:60:e8:b8:5e:33:90:3b:47:d3:
bf:b3:33:83:94:97:db:e7:d9:4c:01:be:87:54:a6:
75:53:28:61:07:83:39:ec:27:4d:52:6c:35:4a:3f:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:D3:76:05:09:3A:DC:55:05:13:64:BE:60:EE:7F:E8:94:6E:3A
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/sIrTdgUJOtxVBRNkvmDuf-iUbjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
87.254.17.0-87.254.19.255
87.254.22.0/24
185.210.168.0/22
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3d:6b:7d:7d:ca:2d:98:4e:0b:70:ad:63:ee:6c:aa:e1:17:
37:68:b1:6f:50:dd:f9:86:83:9e:f4:74:77:fb:f8:c2:bb:1f:
17:e6:cd:4b:a0:58:cc:6c:3e:35:e5:c3:07:30:89:86:25:5f:
c0:bf:96:3a:85:30:e8:3a:8c:4d:4a:34:12:eb:f6:d6:26:b2:
79:1c:3d:8f:73:56:0c:dc:a6:35:c9:48:9b:53:61:4f:3b:87:
79:69:4f:1c:b1:05:04:91:b3:40:2f:dd:27:2e:0d:cf:59:45:
f4:d9:9a:72:1e:3b:79:7a:b9:72:6f:6f:33:7a:80:60:4f:5f:
4f:30:77:4e:a7:28:b5:b3:50:16:b7:84:99:d7:f4:ff:bd:f0:
94:7e:f1:fd:2f:83:25:eb:b3:1a:81:4f:d8:04:d6:88:9c:ab:
4c:c6:85:97:5a:c2:96:d8:c9:c4:f8:26:bc:a6:51:29:7d:7a:
92:ee:96:07:80:59:b7:fe:20:69:9b:34:cc:92:64:07:57:64:
41:ae:e1:4c:cb:35:e7:a0:72:5f:db:5a:c7:7e:6d:98:7b:59:
14:b7:bb:28:bd:42:33:26:d9:82:99:4b:5f:e8:00:23:31:b4:
1c:a4:83:0c:94:56:aa:c6:6d:ba:b2:0d:fd:ad:17:29:32:ce:
c9:af:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 10:55:30 2023 by rpki-client on console-fra.rpki-client.org