Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ufcXnppMjXiHRYwGoiw-CgC0Iw0.roa
File: ufcXnppMjXiHRYwGoiw-CgC0Iw0.roa (raw, json)
Hash identifier: f4wMesZ7c5U7hBKQq1XN/JaY80REy4o3RvFX8iZHJ/0=
Subject key identifier: B9:F7:17:9E:9A:4C:8D:78:87:45:8C:06:A2:2C:3E:0A:00:B4:23:0D
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018911961DBD07B340AA1D61010FF09BDE9D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ufcXnppMjXiHRYwGoiw-CgC0Iw0.roa
Signing time: Sat 01 Jul 2023 13:13:17 +0000
ROA not before: Sat 01 Jul 2023 13:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.11.0/24 maxlen: 24
217.25.1.0/24 maxlen: 24
87.254.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:96:1d:bd:07:b3:40:aa:1d:61:01:0f:f0:9b:de:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 1 13:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9f7179e9a4c8d7887458c06a22c3e0a00b4230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:a0:dd:fe:94:34:77:f9:2e:02:c9:f6:ca:
4b:f9:bf:fa:b5:62:d0:37:87:c0:fe:6f:98:bb:d3:
d3:48:e7:54:7e:00:51:b8:b5:e1:04:11:01:21:9f:
04:e8:df:c7:02:05:ec:f5:98:84:86:64:41:16:e8:
02:10:0b:60:0c:f0:26:61:0e:2e:2e:00:c6:02:b1:
0e:7b:b6:0d:7f:06:09:26:ff:2a:c1:1e:ba:16:04:
28:70:00:b4:86:af:9c:b6:e5:fd:60:01:e6:f7:c0:
22:f6:01:cc:f6:d9:88:e0:3c:a8:5c:d5:58:b0:22:
9b:d3:41:76:26:ac:9d:73:e2:c3:5b:17:06:55:4c:
b2:8c:a4:bd:e6:ad:34:19:dc:35:56:3c:a7:3a:2c:
54:60:0a:7e:1e:e7:77:a3:a8:39:6b:f4:ea:b4:8c:
9d:6a:7b:1c:71:ad:01:da:56:12:95:30:8f:f2:a0:
bd:87:dd:27:cc:87:12:bf:16:e9:0e:44:fb:8c:9c:
34:61:c4:30:89:12:74:b7:a4:08:ab:a5:9e:92:94:
d9:31:fb:fd:d9:80:37:c3:76:39:8e:71:ba:c1:8a:
d9:a7:fb:ce:5f:02:4c:4f:f6:59:e3:d8:69:05:5d:
70:ed:ae:a0:90:2b:7e:de:7e:95:69:9c:b8:46:93:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F7:17:9E:9A:4C:8D:78:87:45:8C:06:A2:2C:3E:0A:00:B4:23:0D
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ufcXnppMjXiHRYwGoiw-CgC0Iw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
87.254.16.0/24
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2a:45:75:df:3e:20:c2:a2:2d:e1:76:fd:9e:ad:20:6b:40:
f3:88:08:0c:bb:06:b8:a5:bf:56:31:d0:6e:d4:24:5c:f3:46:
c2:9a:95:4a:f1:8b:b8:ba:b4:66:25:be:29:0b:cb:fe:f9:78:
14:ce:45:21:36:7c:44:06:30:e3:b0:16:63:a5:fb:f0:51:88:
7c:b1:97:dd:c0:51:55:b5:87:0a:fe:41:bc:88:ab:12:21:1e:
59:83:a0:59:90:0c:3f:81:67:01:e1:17:15:ff:cc:50:86:89:
43:7a:22:52:3a:fc:74:4f:a6:4a:d6:cb:2a:23:7f:f1:b5:21:
91:90:64:c0:1a:4a:7d:b5:82:68:25:9c:4f:71:1d:31:ec:b0:
c8:b6:1b:4d:85:35:63:ec:64:2d:a3:0f:94:ed:2d:38:25:01:
e9:76:a8:23:55:f4:87:40:5c:b7:a0:d9:76:e9:1c:bf:94:2b:
74:15:64:8d:c4:9a:c7:3d:69:b6:a8:33:ec:7a:2e:7d:7a:f5:
b3:a0:59:55:09:74:6a:b7:35:8c:b4:73:2c:54:f3:71:a3:14:
68:ec:a0:13:08:90:3d:9c:2c:60:9a:c4:b0:95:0c:5b:5b:17:
0d:86:05:44:e0:6f:94:a6:55:3e:b3:c3:05:51:46:0f:7e:e8:
c5:f8:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:48 2024 by rpki-client on console-fra.rpki-client.org