Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/tTHrIZks5Ux_2hg4IgjYMEMVpr4.roa
File: tTHrIZks5Ux_2hg4IgjYMEMVpr4.roa (raw, json)
Hash identifier: Qb7yorzvj5S539G/bCaABp2pKgjP3AzDWnyNf5UZGDo=
Subject key identifier: B5:31:EB:21:99:2C:E5:4C:7F:DA:18:38:22:08:D8:30:43:15:A6:BE
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018848426ECDB36E5E38F07514E761B28749
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/tTHrIZks5Ux_2hg4IgjYMEMVpr4.roa
Signing time: Tue 23 May 2023 10:58:13 +0000
ROA not before: Tue 23 May 2023 10:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.11.0/24 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:42:6e:cd:b3:6e:5e:38:f0:75:14:e7:61:b2:87:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 23 10:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b531eb21992ce54c7fda18382208d8304315a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:24:94:15:10:90:e8:a3:08:f9:74:c5:e0:
14:45:8e:bb:31:c4:80:7b:e1:61:5b:ee:d5:3f:d5:
c3:54:0a:3f:84:44:83:ba:21:b7:48:7c:4c:bf:e5:
40:d6:cb:d7:1a:fd:4d:15:4d:f9:4b:1c:1a:6a:14:
71:e2:22:f8:85:0b:63:51:83:b5:4c:48:e4:bd:5e:
cf:f6:79:27:46:31:98:35:ed:8a:8b:07:7f:26:0e:
b4:1e:0d:71:3b:21:c9:93:01:85:8c:e2:17:fb:29:
6d:8e:28:7b:91:43:0a:d8:a0:49:54:97:9f:3c:31:
c9:02:1f:8d:05:dd:32:9c:4b:6c:02:5b:a4:6d:76:
7b:23:a8:36:28:f9:48:98:7f:70:7e:7c:a8:18:bf:
b7:d4:d3:ca:8e:39:c5:d1:b6:ca:f5:ec:2a:d3:d7:
49:19:fa:3f:84:f8:22:98:a8:bb:0d:cf:b9:65:bb:
89:0f:44:7b:97:bd:2e:86:09:52:2b:b8:b3:28:29:
91:41:f7:9c:03:36:77:74:29:f0:a3:89:1f:fd:10:
99:8e:91:9e:10:11:3b:79:03:94:cd:80:7c:1c:98:
a8:08:d4:09:74:d3:fb:d9:a3:74:b6:44:de:f9:cd:
4e:f9:6b:be:89:1f:38:04:ad:23:ad:50:dd:ea:39:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:EB:21:99:2C:E5:4C:7F:DA:18:38:22:08:D8:30:43:15:A6:BE
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/tTHrIZks5Ux_2hg4IgjYMEMVpr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
87.254.16.0-87.254.18.255
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:df:2a:c9:7c:d1:d2:c4:9c:93:e1:45:52:0f:0b:b9:5a:de:
ed:ca:78:3f:b1:6b:01:b2:bb:9e:8d:f7:aa:a1:5c:52:d5:16:
d2:ba:7f:9d:88:68:13:7c:dd:87:ad:0d:c3:c1:4b:05:f2:84:
7f:3a:81:66:a7:28:e6:4b:1f:96:cc:3d:b5:a7:3b:87:d6:ab:
99:4f:33:b3:fb:e6:b5:a0:b8:37:6e:1a:ec:06:46:82:a4:35:
28:dc:18:6c:be:f4:58:60:74:fc:77:0e:aa:4d:40:72:3a:2e:
c3:e2:74:86:a2:44:58:70:43:f8:fa:f0:34:97:65:6c:9a:6a:
0a:2f:41:58:d6:f0:67:31:7b:1b:01:d7:97:ed:99:ec:ba:35:
40:d9:19:bd:78:fa:1a:21:c5:8d:32:f6:50:1a:4d:fd:3c:7b:
e4:fa:61:81:19:89:a3:fe:e8:82:66:47:44:eb:55:45:5b:1f:
7a:33:06:90:ae:1d:0e:33:04:14:dd:dc:20:97:72:b4:f3:f8:
33:d3:0f:87:31:c3:3a:c5:6a:f9:a7:ed:91:a1:a5:f0:7f:92:
6b:de:a0:73:92:88:ab:1b:a3:81:f3:42:03:c1:7e:d5:ed:32:
6e:de:cc:33:84:81:1b:e4:94:32:e0:7e:a4:da:f6:5c:cb:7c:
a5:9a:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org