Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/HNwXrRlIgfwdLSr0wPqgkoQnYxA.roa
File: HNwXrRlIgfwdLSr0wPqgkoQnYxA.roa (raw, json)
Hash identifier: MVdyUq6rV0UH5xOQR55voGcjXctSIjqnqxa8B0Tu5JE=
Subject key identifier: 1C:DC:17:AD:19:48:81:FC:1D:2D:2A:F4:C0:FA:A0:92:84:27:63:10
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0188F883F0952C145D1A01FDDDDB3BDCFA3C
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/HNwXrRlIgfwdLSr0wPqgkoQnYxA.roa
Signing time: Mon 26 Jun 2023 16:22:56 +0000
ROA not before: Mon 26 Jun 2023 16:22:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:83:f0:95:2c:14:5d:1a:01:fd:dd:db:3b:dc:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 26 16:22:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cdc17ad194881fc1d2d2af4c0faa09284276310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:ae:69:12:7c:60:9d:f5:54:4f:cc:22:38:
72:35:e7:23:f6:92:02:ce:bd:61:3b:a0:22:8b:e0:
02:5c:2d:dd:00:e9:1c:4d:48:49:87:98:f9:59:9d:
7f:7f:d1:78:61:d3:7d:18:58:ec:09:ad:59:83:79:
3a:c8:fc:34:4c:8d:3f:60:4e:fc:52:ea:0f:df:c7:
a1:5e:ff:c1:86:6a:d1:87:08:58:fa:08:30:37:21:
66:ab:09:13:f3:40:20:8e:c3:86:f0:9b:86:1d:5b:
91:9e:a9:61:75:f8:c1:b9:5e:b9:09:d7:70:31:41:
c8:b6:a2:c2:de:5c:c1:7a:83:da:e6:17:da:45:a2:
4b:2e:0a:bc:64:37:6e:82:b9:28:0a:cb:f8:24:33:
17:4d:99:87:d4:71:b8:dc:ff:72:0a:d8:35:c8:1e:
79:8d:03:a2:af:2a:48:41:3f:28:12:1c:36:5c:45:
07:7e:6e:b2:b1:38:6b:bb:23:35:41:b3:6c:2c:42:
4e:c0:99:6e:46:4a:b8:21:63:37:8c:ae:26:c8:dc:
c7:57:b3:9b:84:71:ad:99:18:6b:34:67:5b:56:64:
5a:5d:0e:d6:39:eb:c3:12:04:6d:f3:c9:f7:83:19:
07:5e:b6:e6:f9:72:3e:0c:a3:af:b8:a0:5c:74:e5:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DC:17:AD:19:48:81:FC:1D:2D:2A:F4:C0:FA:A0:92:84:27:63:10
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/HNwXrRlIgfwdLSr0wPqgkoQnYxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.8.0/24
87.254.10.0/24
87.254.17.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:3a:bd:7a:46:5d:13:24:08:c0:88:2f:93:8b:57:f9:76:8b:
e3:36:55:29:b8:13:8c:e7:4d:6c:44:3b:79:0b:9b:1f:d0:a7:
01:c0:4c:a3:29:b9:2f:92:41:d5:ec:8c:81:1d:b8:13:15:c5:
4c:ac:95:ea:15:86:d9:80:92:c9:9b:32:12:12:38:7f:7f:cd:
2b:1a:e7:de:a5:4e:39:fd:2d:b6:bb:f9:fa:61:0f:a3:df:10:
73:8c:f2:be:7a:58:09:85:15:21:3c:75:95:52:d9:c4:46:c4:
d0:a1:80:7d:8b:12:ee:bd:2a:62:20:17:5f:6e:93:cd:b5:a4:
5b:5f:58:69:54:a2:75:4e:ec:9d:82:6d:ef:03:80:ca:68:1f:
32:35:48:cb:e6:03:42:48:8a:f6:3f:a5:e1:3f:10:82:76:65:
e8:c7:06:85:7c:d8:2f:20:6d:3a:cf:f5:5f:b3:37:cf:bb:ae:
7c:71:12:45:e2:30:3d:0b:a8:60:aa:b2:27:77:30:6e:4f:5f:
c9:4b:15:50:c7:bc:b2:e3:d4:70:1f:0a:2a:8b:04:ca:f2:ad:
65:8c:6b:cd:4b:02:ea:c5:3e:ca:75:8b:42:87:01:71:a7:24:
a5:a1:45:ba:5d:06:3b:3c:30:2a:5a:53:43:9b:ec:b1:24:20:
80:c5:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net