Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/xHQgHBZjt0BZ9JTOkPdPjw1bNxs.roa
File: xHQgHBZjt0BZ9JTOkPdPjw1bNxs.roa (raw, json)
Hash identifier: 4Gg0hqKhRgzb3hTIEjUgwgoMJAG6crL+4gPP3Mnmq90=
Subject key identifier: C4:74:20:1C:16:63:B7:40:59:F4:94:CE:90:F7:4F:8F:0D:5B:37:1B
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018CC726A4DC14FB7225B99A163A0B0E0349
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/xHQgHBZjt0BZ9JTOkPdPjw1bNxs.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a4:dc:14:fb:72:25:b9:9a:16:3a:0b:0e:03:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c474201c1663b74059f494ce90f74f8f0d5b371b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:3e:ab:47:26:97:9f:4e:3a:06:03:88:49:
aa:cf:5a:9c:9c:d3:29:9b:00:d4:7d:8a:7f:08:b7:
44:64:bf:9c:1c:a2:a7:b4:a7:c7:74:a3:ba:dc:ef:
c2:91:b0:b8:92:67:80:be:c6:2d:1a:9f:0b:90:bf:
53:cd:92:1b:d3:79:13:f1:10:bc:63:71:39:02:c4:
99:47:f9:c3:82:6a:a9:21:38:87:6c:b8:f2:e9:93:
a7:18:cb:7b:86:a0:63:9c:f8:50:20:67:1a:2f:a0:
6f:ec:40:4c:5a:01:e8:b1:1d:be:c4:97:37:90:cc:
3d:aa:e7:55:07:b1:99:b7:8f:e9:02:8a:71:6c:74:
9c:17:18:8e:f8:e1:bd:16:76:2b:d5:68:38:f5:e4:
04:a2:90:d5:5e:31:0d:16:35:9f:66:33:db:19:21:
4e:2e:b6:c6:21:3b:78:72:fc:3e:ba:41:ac:ab:65:
65:0b:53:11:45:8a:9d:d3:fc:8d:3b:d9:3e:aa:de:
2d:f4:b1:42:6b:71:d7:75:32:60:c1:fc:16:8c:33:
5b:2e:9e:f9:c1:15:97:16:b0:6a:32:58:8d:00:9d:
2c:11:a1:5f:8c:e1:f2:aa:ca:16:35:57:ae:b7:62:
3e:fb:2f:3b:cd:1d:5c:45:ce:1a:93:b7:d6:0c:70:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:74:20:1C:16:63:B7:40:59:F4:94:CE:90:F7:4F:8F:0D:5B:37:1B
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/xHQgHBZjt0BZ9JTOkPdPjw1bNxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.12.0/23
Signature Algorithm: sha256WithRSAEncryption
51:d1:5b:36:07:15:84:aa:a3:9e:51:92:7a:0a:8c:24:e4:f2:
b3:1c:dc:15:34:37:ce:0a:e7:3d:18:95:00:92:62:a5:25:8a:
2d:43:ea:17:d4:1e:4e:20:9b:87:e0:dc:0a:c4:4d:aa:6e:09:
a8:53:44:4a:9d:f6:48:0b:50:fe:bb:31:f7:c2:71:57:8e:77:
a2:87:66:86:85:14:ff:ff:eb:14:ec:ee:6e:21:48:1b:9d:fb:
5f:20:c6:3d:73:ec:7a:bb:e2:59:f2:2d:ca:73:e7:3a:91:e2:
0d:08:d4:66:f2:68:a9:6a:36:40:9d:c8:25:9b:cf:77:92:ca:
08:df:9b:a1:d6:79:98:eb:cc:a4:fc:61:c8:3e:29:ae:51:4f:
d5:0f:36:6f:c2:06:78:1f:b0:71:37:8f:d0:c3:c5:4c:f6:ff:
d6:4f:17:80:99:16:ad:56:3f:91:bd:17:a4:29:7c:a2:be:83:
01:46:5f:70:30:8e:7c:83:ab:40:8a:72:1d:f9:d3:63:ea:e4:
fa:54:37:20:66:85:32:9d:8d:fd:5b:86:07:82:b6:85:50:1d:
43:b6:a7:88:e8:a2:74:73:07:4a:ea:03:99:13:17:bf:87:f9:
b2:26:1f:fd:f9:a7:55:45:5e:df:b5:91:0a:0b:44:13:3b:a4:
17:84:79:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJqTcFPtyJbmaFjoLDgNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjQwMTAxMjIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDc0MjAxYzE2NjNiNzQwNTlmNDk0Y2U5MGY3NGY4ZjBkNWIzNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBM+q0cml59OOgYDiEmqz1qcnNMp
mwDUfYp/CLdEZL+cHKKntKfHdKO63O/CkbC4kmeAvsYtGp8LkL9TzZIb03kT8RC8
Y3E5AsSZR/nDgmqpITiHbLjy6ZOnGMt7hqBjnPhQIGcaL6Bv7EBMWgHosR2+xJc3
kMw9qudVB7GZt4/pAopxbHScFxiO+OG9FnYr1Wg49eQEopDVXjENFjWfZjPbGSFO
LrbGITt4cvw+ukGsq2VlC1MRRYqd0/yNO9k+qt4t9LFCa3HXdTJgwfwWjDNbLp75
wRWXFrBqMliNAJ0sEaFfjOHyqsoWNVeut2I++y87zR1cRc4ak7fWDHDX/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMR0IBwWY7dAWfSUzpD3T48NWzcbMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEveEhRZ0hCWmp0MEJaOUpUT2tQZFBqdzFiTnhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/4CAwQB
V/4MMA0GCSqGSIb3DQEBCwUAA4IBAQBR0Vs2BxWEqqOeUZJ6Cowk5PKzHNwVNDfO
Cuc9GJUAkmKlJYotQ+oX1B5OIJuH4NwKxE2qbgmoU0RKnfZIC1D+uzH3wnFXjnei
h2aGhRT//+sU7O5uIUgbnftfIMY9c+x6u+JZ8i3Kc+c6keINCNRm8mipajZAncgl
m893ksoI35uh1nmY68yk/GHIPimuUU/VDzZvwgZ4H7BxN4/Qw8VM9v/WTxeAmRat
Vj+RvRekKXyivoMBRl9wMI58g6tAinId+dNj6uT6VDcgZoUynY39W4YHgraFUB1D
tqeI6KJ0cwdK6gOZExe/h/myJh/9+adVRV7ftZEKC0QTO6QXhHka
-----END CERTIFICATE-----
Generated at Wed Jan 3 21:19:26 2024 by rpki-client on console-ams.rpki-client.org