Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ewipynukMe4rykrgp_WUSnX4uRU.roa
File: ewipynukMe4rykrgp_WUSnX4uRU.roa (raw, json)
Hash identifier: IOTjColHRchOOvsiJev7/sN9rE0dg2yijqgvRepUjMs=
Subject key identifier: 7B:08:A9:CA:7B:A4:31:EE:2B:CA:4A:E0:A7:F5:94:4A:75:F8:B9:15
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018911961D78A9DBB87E1ABBE2784F0FCF32
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ewipynukMe4rykrgp_WUSnX4uRU.roa
Signing time: Sat 01 Jul 2023 13:13:17 +0000
ROA not before: Sat 01 Jul 2023 13:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 24
87.254.17.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:96:1d:78:a9:db:b8:7e:1a:bb:e2:78:4f:0f:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 1 13:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b08a9ca7ba431ee2bca4ae0a7f5944a75f8b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:d1:96:aa:fd:4a:a6:6f:ca:96:99:91:2d:
cf:bb:0a:7c:c8:ed:89:cc:b1:19:b4:1c:24:f5:76:
c7:86:23:17:60:4d:21:bc:67:79:cc:e0:d0:61:de:
fe:3b:ea:5f:27:ec:75:f2:e2:dc:54:bc:76:53:f9:
b5:a5:a6:f3:88:87:54:cf:ab:a7:e2:a7:1c:bb:80:
9b:9a:95:d9:c0:43:44:9a:df:52:90:7b:6b:a5:8c:
9a:5d:0b:f9:b9:0d:24:e8:60:0b:4f:83:aa:ec:2b:
e8:3f:e8:5a:73:16:b9:d1:cb:cf:87:68:d1:c9:16:
1e:36:73:32:12:3e:30:7a:85:fa:68:11:fa:a9:83:
ba:9f:a9:81:6e:68:b9:9d:59:54:29:51:9e:85:47:
b1:0b:89:ed:df:73:59:16:5f:52:91:00:60:8f:bc:
12:18:5b:b7:e2:58:64:38:03:22:75:35:4a:9b:86:
48:8a:04:87:bc:48:5e:72:34:6d:8b:d1:3e:90:1f:
b8:c0:89:a7:86:88:3b:13:51:c1:d0:79:dd:7b:a3:
2e:83:5a:b6:a4:b7:46:1d:5d:d5:0e:6f:47:d6:fc:
0d:ec:bf:3d:39:e8:19:b9:76:c7:b8:50:39:30:8f:
f6:21:db:ee:88:45:b0:4e:a0:77:ba:72:9f:a9:83:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:08:A9:CA:7B:A4:31:EE:2B:CA:4A:E0:A7:F5:94:4A:75:F8:B9:15
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ewipynukMe4rykrgp_WUSnX4uRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
87.254.10.0/24
87.254.17.0/24
87.254.19.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
45:0c:d7:7e:de:65:05:e8:f3:d8:7c:2a:64:e5:ac:cc:e7:10:
b6:4d:df:63:90:4d:b8:4b:7f:16:e9:85:11:6e:16:f2:8b:24:
2f:df:c5:36:35:da:b6:91:a4:96:23:46:c0:6e:46:f1:42:2f:
22:7a:3f:92:f7:7d:e9:94:a2:d2:fc:ef:fb:7f:3c:f8:57:55:
ad:d7:4e:3b:ea:23:b6:f3:54:c9:8e:c4:8e:4c:57:af:2d:66:
78:aa:98:eb:39:44:9c:65:af:bf:c1:88:5c:88:22:e3:2d:d7:
d7:e2:3b:17:37:c1:d0:3d:37:74:b4:86:65:5b:05:b6:aa:70:
bb:96:37:6c:7e:c7:ad:93:27:fd:96:5d:c8:a1:12:7a:a9:65:
3f:d1:b6:51:d9:68:13:be:fe:aa:1b:5f:a9:d4:b6:6c:62:84:
39:5b:99:cd:f9:7c:b4:36:08:3a:3f:f9:5d:5e:b2:98:1e:05:
34:49:65:62:0b:45:d8:e5:ae:6a:58:d2:7a:bd:34:37:07:91:
65:0d:f4:71:1c:01:c8:b2:a9:98:92:f8:48:cf:ab:d3:57:d3:
34:4f:e0:d0:52:b4:fd:a1:b3:e3:81:b8:8c:96:dd:71:b4:49:
af:0d:6e:b5:02:f2:ef:83:74:9b:8f:4a:37:b5:a5:ea:30:e1:
61:07:32:e8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYkRlh14qdu4fhq74nhPD88yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNzAxMTMxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjA4YTljYTdiYTQzMWVlMmJjYTRhZTBhN2Y1OTQ0YTc1ZjhiOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM7Rlqr9SqZvypaZkS3Puwp8yO2J
zLEZtBwk9XbHhiMXYE0hvGd5zODQYd7+O+pfJ+x18uLcVLx2U/m1pabziIdUz6un
4qccu4CbmpXZwENEmt9SkHtrpYyaXQv5uQ0k6GALT4Oq7CvoP+hacxa50cvPh2jR
yRYeNnMyEj4weoX6aBH6qYO6n6mBbmi5nVlUKVGehUexC4nt33NZFl9SkQBgj7wS
GFu34lhkOAMidTVKm4ZIigSHvEhecjRti9E+kB+4wImnhog7E1HB0Hnde6Mug1q2
pLdGHV3VDm9H1vwN7L89OegZuXbHuFA5MI/2IdvuiEWwTqB3unKfqYN7zwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHsIqcp7pDHuK8pK4Kf1lEp1+LkVMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvZXdpcHludWtNZTRyeWtyZ3BfV1VTblg0dVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAV/4IAwQA
V/4KAwQAV/4RAwQAV/4TAwQCudKoMA0GCSqGSIb3DQEBCwUAA4IBAQBFDNd+3mUF
6PPYfCpk5azM5xC2Td9jkE24S38W6YURbhbyiyQv38U2Ndq2kaSWI0bAbkbxQi8i
ej+S933plKLS/O/7fzz4V1Wt10476iO281TJjsSOTFevLWZ4qpjrOUScZa+/wYhc
iCLjLdfX4jsXN8HQPTd0tIZlWwW2qnC7ljdsfsetkyf9ll3IoRJ6qWU/0bZR2WgT
vv6qG1+p1LZsYoQ5W5nN+Xy0Ngg6P/ldXrKYHgU0SWViC0XY5a5qWNJ6vTQ3B5Fl
DfRxHAHIsqmYkvhIz6vTV9M0T+DQUrT9obPjgbiMlt1xtEmvDW61AvLvg3Sbj0o3
taXqMOFhBzLo
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net