Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/vv_7nl7FllSNh0aqwox-4xSPRt0.roa
File: vv_7nl7FllSNh0aqwox-4xSPRt0.roa (raw, json)
Hash identifier: fMol9IRBiwj6D7geI38tfw4cL/z4P/0ZvtkARrsX37c=
Subject key identifier: BE:FF:FB:9E:5E:C5:96:54:8D:87:46:AA:C2:8C:7E:E3:14:8F:46:DD
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0190A26483264CFA205DC8136690946FAA9D
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/vv_7nl7FllSNh0aqwox-4xSPRt0.roa
Signing time: Thu 11 Jul 2024 15:23:34 +0000
ROA not before: Thu 11 Jul 2024 15:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.254.23.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:64:83:26:4c:fa:20:5d:c8:13:66:90:94:6f:aa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 11 15:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=befffb9e5ec596548d8746aac28c7ee3148f46dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:76:46:08:8b:e2:51:55:4f:4b:d8:d6:25:
08:41:e6:22:32:c9:87:c0:e2:b8:3c:b7:40:86:40:
7e:bf:d0:0a:f6:ae:77:a0:2f:83:1a:15:07:f5:a0:
c1:1a:ef:85:f2:bf:f9:66:13:08:d3:77:b7:8a:62:
62:55:11:ce:1d:0b:28:66:ef:23:f8:57:e4:7c:ee:
90:f2:46:95:eb:13:18:01:05:0b:d9:33:70:1e:50:
ca:1e:d7:b7:92:67:77:7f:56:49:0d:bf:68:1b:88:
e4:e4:ec:1e:0f:26:ed:d0:d0:ce:48:d6:e9:fa:7b:
b9:a7:4c:35:c5:e1:93:e7:48:ba:47:c9:d1:e3:01:
dc:ea:90:c3:96:0c:53:e7:7f:f7:f7:a8:5a:16:91:
4c:84:25:98:83:c1:1b:d5:42:3a:44:37:b5:f2:63:
4e:98:6a:16:b7:c5:2b:30:94:0f:d9:51:50:0b:35:
ce:25:de:10:a9:e2:29:fd:59:a6:48:73:ef:07:96:
74:2d:da:78:c1:de:07:52:c4:85:ab:99:76:ca:23:
17:aa:b5:ca:75:1d:a5:2e:3b:b5:36:09:cb:1f:0b:
f6:89:4a:cb:ec:28:2b:85:ee:cb:9d:a6:3a:d9:57:
16:8e:bb:92:25:89:cc:d8:fd:9f:51:f9:6f:e3:e9:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FF:FB:9E:5E:C5:96:54:8D:87:46:AA:C2:8C:7E:E3:14:8F:46:DD
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/vv_7nl7FllSNh0aqwox-4xSPRt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
185.210.168.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:06:ea:30:af:b6:9b:ee:73:0f:6e:ba:70:4b:87:e8:c5:dd:
35:5e:42:11:7e:6a:2a:eb:1d:1b:b3:6e:48:82:d5:ed:87:4d:
67:91:ab:48:57:43:12:75:09:a4:6c:44:06:68:42:ca:98:dd:
d4:8c:e7:7f:9a:54:89:92:0d:86:21:55:a4:30:c9:1a:c4:c0:
2a:75:32:14:d9:37:90:01:2f:84:bf:30:52:a7:fb:77:bc:90:
45:c3:c9:de:97:fe:6a:1b:11:cb:a6:47:de:7c:89:73:6a:fd:
8f:50:cb:b0:78:e1:36:74:26:b7:85:da:17:11:79:9a:f3:ef:
55:b3:95:26:1c:44:7e:c3:69:ce:73:c4:a8:42:b1:c0:6e:13:
36:6c:46:8a:fc:d6:10:fb:c3:74:19:f1:10:11:af:c6:a9:b6:
d1:65:22:25:6a:7c:c1:c3:21:ce:4c:9f:d0:f6:97:b5:50:a6:
08:35:af:b9:90:92:39:20:fb:57:1d:23:5d:f0:ae:fd:ee:df:
0c:8f:c1:5c:38:6a:34:b8:b7:42:5d:bf:34:16:b0:22:4a:e6:
87:c6:07:20:a4:73:4b:41:a3:39:0b:f9:9f:aa:f7:73:27:b1:
e8:5e:be:c0:48:6b:4a:5e:12:f3:0a:3a:cc:c8:9a:55:3a:57:
34:4f:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:01 2024 by rpki-client on console-fra.rpki-client.org