Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/yPKc_OYpyEEFzY0LSmHjW2ktA_k.roa
File: yPKc_OYpyEEFzY0LSmHjW2ktA_k.roa (raw, json)
Hash identifier: 6jzPOnPrEzpq/q6xiw2V18TL+/iHdjVTq8X/zFqFpD4=
Subject key identifier: C8:F2:9C:FC:E6:29:C8:41:05:CD:8D:0B:4A:61:E3:5B:69:2D:03:F9
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018896E41CBF3AE24C3A5EFD74E2871E03CB
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/yPKc_OYpyEEFzY0LSmHjW2ktA_k.roa
Signing time: Wed 07 Jun 2023 17:25:11 +0000
ROA not before: Wed 07 Jun 2023 17:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 87.254.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:e4:1c:bf:3a:e2:4c:3a:5e:fd:74:e2:87:1e:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 7 17:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8f29cfce629c84105cd8d0b4a61e35b692d03f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:3f:03:95:e5:f0:aa:a9:77:d8:c8:5e:ea:
16:4f:b6:25:50:6c:08:26:30:7d:fa:d3:a8:20:c7:
b4:fc:50:7a:01:95:88:e0:13:a9:29:05:17:10:15:
7f:9e:c0:65:c1:1e:ab:79:be:ec:3a:eb:1d:7c:71:
09:bc:1f:5f:03:8d:69:0b:88:88:6e:52:52:61:e1:
37:dc:c7:79:14:2d:74:76:d1:8a:7f:ba:03:92:c0:
7b:53:7c:27:ba:ba:05:32:0c:cd:10:0e:8b:57:45:
d0:e3:44:19:ae:8f:77:c5:d3:7e:65:48:ff:90:cf:
ac:ef:9c:44:e9:97:05:7d:44:db:44:3c:27:e3:48:
84:fe:e9:0c:94:39:a3:81:02:42:48:32:ef:3d:c5:
11:20:b5:d5:b8:fa:2b:48:8e:a0:36:46:26:5c:d7:
c1:c8:63:31:37:93:fd:24:3a:98:53:9c:76:73:6a:
d2:9f:64:7b:77:de:b8:4e:a3:5b:e1:19:d8:d4:c5:
dd:09:ba:c4:eb:fb:c1:bc:08:51:d5:a9:be:2b:cc:
6b:61:40:98:d0:95:d4:4b:d1:4a:86:95:01:c0:a6:
0f:5e:15:25:59:71:36:ac:16:38:a3:55:01:f3:30:
ce:1e:04:b9:f0:97:f7:47:6f:c3:af:a2:56:26:15:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:9C:FC:E6:29:C8:41:05:CD:8D:0B:4A:61:E3:5B:69:2D:03:F9
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/yPKc_OYpyEEFzY0LSmHjW2ktA_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1f:4a:13:34:17:e9:ac:71:59:db:c6:92:91:22:6c:2b:71:
c8:9d:4d:8e:9c:6c:1a:90:e6:e4:a8:8c:6c:05:c0:02:6d:51:
5e:8b:ba:02:73:83:49:b1:38:82:10:b7:be:c8:42:94:07:2d:
41:56:f2:00:bc:0b:90:27:88:4f:07:b0:5b:81:a1:be:a1:c4:
33:84:bc:9c:3a:a0:fb:ff:3e:f6:0a:f8:e5:58:71:04:c4:05:
8a:e5:d3:2c:a0:83:6f:4f:e4:30:bf:89:45:cf:20:b9:9d:f9:
af:a2:7b:c0:f7:18:f9:5a:45:23:d9:71:fe:e6:3c:99:27:f4:
db:05:c8:53:aa:e5:fb:d8:4b:7a:2a:4b:6e:58:44:6e:01:1c:
cd:5b:38:8b:d9:07:f0:8d:3a:81:79:12:d9:fb:c6:05:39:78:
32:5b:4b:c2:b1:a8:07:5c:07:48:4f:10:c6:95:0d:a1:17:a6:
3d:3b:40:17:fc:42:2f:45:53:c9:f3:09:6b:c8:f4:6d:c6:b3:
d8:26:fb:13:fa:6e:1d:7c:16:5b:28:99:6a:07:77:da:87:27:
b8:f1:bf:a0:1c:8b:61:87:ff:30:2c:8a:be:6f:18:21:a2:f4:
cb:03:bd:30:6d:bf:d7:43:d4:c5:ba:27:0a:6d:f5:a9:e8:27:
01:38:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:48 2024 by rpki-client on console-fra.rpki-client.org