Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/x9Fz9q2_TmseN2VXnxhgi30m_Rw.roa
File: x9Fz9q2_TmseN2VXnxhgi30m_Rw.roa (raw, json)
Hash identifier: pb7G9t0+8ILsDmy5du51BoK4f+BODxIosrXF4DPHIbQ=
Subject key identifier: C7:D1:73:F6:AD:BF:4E:6B:1E:37:65:57:9F:18:60:8B:7D:26:FD:1C
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019145827B873575876C63FBDD2C809C99F3
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/x9Fz9q2_TmseN2VXnxhgi30m_Rw.roa
Signing time: Mon 12 Aug 2024 07:34:24 +0000
ROA not before: Mon 12 Aug 2024 07:34:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 87.254.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 19:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:82:7b:87:35:75:87:6c:63:fb:dd:2c:80:9c:99:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Aug 12 07:34:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7d173f6adbf4e6b1e3765579f18608b7d26fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:6a:b4:b4:bb:8f:73:e5:4a:ea:70:33:25:
c6:38:54:b9:79:63:05:dd:88:3f:e3:ed:b2:66:02:
1a:00:12:5b:4d:61:d5:0e:1f:6c:8a:b1:e4:24:ad:
66:36:24:ee:0b:cb:d9:01:38:9f:4f:ee:9f:6a:08:
1d:e7:8c:b6:54:a0:09:25:44:28:9e:60:4e:90:7c:
d4:4a:86:a6:c2:7d:d7:0c:cf:91:20:4c:98:40:b4:
9a:ba:1a:ce:1b:a4:c2:74:0a:4a:12:d3:13:23:9c:
d9:40:c6:32:27:54:fb:f0:58:c2:bf:38:07:ae:33:
a6:ca:4d:02:dc:fa:5e:80:cb:58:b8:c4:c0:83:d3:
25:f2:1a:cf:0a:8c:10:2f:ab:4e:45:c2:6c:48:03:
38:8f:82:ae:f9:45:84:5c:88:a1:25:25:9e:e3:21:
a1:00:96:d9:80:86:c8:5e:2d:b6:4a:05:97:42:3d:
46:cb:01:88:3f:d1:bf:df:08:2e:8a:c6:c6:fb:87:
c6:24:b5:35:41:3a:d2:3b:6d:88:a7:d8:46:54:b0:
cb:ed:55:8f:32:06:b4:33:1f:01:e6:65:05:01:f1:
be:10:03:4e:50:f8:8d:d0:29:8e:1e:e7:3b:ea:94:
03:20:32:ed:e9:91:e7:5f:7e:3f:d4:bb:f8:82:8e:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D1:73:F6:AD:BF:4E:6B:1E:37:65:57:9F:18:60:8B:7D:26:FD:1C
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/x9Fz9q2_TmseN2VXnxhgi30m_Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9e:3c:29:e3:da:1d:87:84:84:02:38:ee:d7:4f:70:01:82:
ae:5b:0e:d1:99:04:cf:06:8b:00:19:b3:02:8f:88:79:11:6f:
b8:84:0e:37:e8:9a:9d:f6:b0:00:f1:08:41:63:a4:ac:e9:12:
98:8f:67:fe:a6:56:6e:df:69:19:15:83:f5:16:fe:18:ed:8d:
f7:31:31:11:99:65:b8:99:3f:a0:c4:34:a1:b1:cb:fa:d0:53:
00:9c:e9:a0:61:0b:8d:d3:60:60:15:70:ce:e3:07:7a:00:05:
da:10:92:67:8c:8f:ad:f9:12:26:08:bb:87:1a:11:c3:48:5d:
68:2b:be:1d:32:52:22:51:eb:4b:3d:4d:fa:27:12:3f:39:74:
83:fe:97:d9:0a:1c:34:04:bb:58:3b:0e:96:ee:f2:90:16:b9:
d9:e6:6a:0d:85:42:a3:65:3f:73:c1:16:ad:64:62:66:89:13:
b7:c7:8b:e4:a4:c4:70:fc:47:4b:25:ba:08:f7:a5:30:a5:52:
c3:b6:2d:05:87:2a:c1:b0:1f:f5:6e:2e:74:62:f6:30:45:83:
9c:d7:7e:10:78:31:80:b4:66:db:8e:7f:27:dd:c0:68:75:ed:
21:af:0e:d7:13:37:9d:63:ff:03:07:28:d5:63:67:75:b4:c1:
2d:ce:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org