Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3nyNeMgNg5A8Zp_m4XuxlHbVgs0.roa
File: 3nyNeMgNg5A8Zp_m4XuxlHbVgs0.roa (raw, json)
Hash identifier: ZuAhgIR2TqRGAlRydRV/+fHFxMNVykrRkqetN8hqdtM=
Subject key identifier: DE:7C:8D:78:C8:0D:83:90:3C:66:9F:E6:E1:7B:B1:94:76:D5:82:CD
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0188614C38EE54F548591D5D48925016945F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3nyNeMgNg5A8Zp_m4XuxlHbVgs0.roa
Signing time: Sun 28 May 2023 07:39:25 +0000
ROA not before: Sun 28 May 2023 07:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59962
IP address blocks: 87.107.56.0/21 maxlen: 24
87.107.176.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:4c:38:ee:54:f5:48:59:1d:5d:48:92:50:16:94:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 28 07:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de7c8d78c80d83903c669fe6e17bb19476d582cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:f2:eb:92:3b:25:e1:4a:5a:bb:cf:b7:98:
e3:02:b6:71:51:e1:fa:2a:ba:7d:fb:fa:f3:26:d0:
ed:36:c8:1c:73:77:66:e9:71:69:bf:b0:24:46:4d:
39:b5:0a:54:04:74:6b:4e:a2:90:59:5f:e5:38:7b:
af:f7:33:82:b0:ab:1e:be:90:4d:ae:b3:c1:cf:a0:
a9:5e:ef:2e:99:43:a0:8f:55:fc:cd:b3:08:a9:d7:
e8:82:0c:b0:ec:62:5e:ce:42:8d:c0:ab:6e:8f:97:
4b:e5:fc:a3:c7:6b:4a:1d:8e:29:ca:65:89:a3:ff:
41:c5:f8:bd:a1:cf:a9:45:87:83:fb:77:58:98:2c:
e0:45:99:31:46:3c:65:10:9b:86:9a:06:46:b3:dc:
db:ce:1d:e2:bb:c8:09:d6:ad:d4:4f:94:76:37:3d:
ea:8d:fb:0c:a2:bd:5a:cd:fc:79:ee:66:42:81:84:
9d:35:51:3e:a0:46:8a:48:77:9d:57:66:5b:42:c0:
bf:f4:4e:d4:6b:62:40:b3:e2:66:d5:ba:06:c4:b3:
19:df:fd:9a:51:ae:06:94:5a:3f:bf:5c:f7:17:ac:
7c:3c:4c:57:df:7e:14:23:49:21:c5:7b:88:da:5e:
8d:03:f8:a3:77:dd:e1:e1:b1:d5:02:85:4a:9b:83:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:8D:78:C8:0D:83:90:3C:66:9F:E6:E1:7B:B1:94:76:D5:82:CD
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3nyNeMgNg5A8Zp_m4XuxlHbVgs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.56.0/21
87.107.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:6a:a2:fe:dd:93:3b:6d:bb:53:45:78:22:1d:0a:cc:66:4e:
7a:5f:fc:47:95:c6:5f:2b:fb:ea:d2:85:b7:98:69:50:b2:be:
3d:e4:c4:20:bd:ec:a9:00:0a:3a:8a:f5:bf:9d:87:0b:bf:30:
4d:21:5c:c7:35:8d:cf:8a:be:34:7a:44:0c:1d:d1:dc:74:b6:
b4:c1:b7:4b:39:54:6d:e9:ec:aa:dc:8c:66:dc:4b:32:6b:9d:
45:97:39:9b:ab:77:75:04:19:36:48:98:0a:c5:90:65:a3:83:
7b:6f:ea:10:1d:f6:70:f3:01:61:65:4b:89:80:91:dc:5b:b9:
1c:2d:6a:29:67:a4:40:46:12:5d:7b:17:95:f8:62:b9:9d:01:
4f:02:87:3f:bf:99:59:47:79:07:d7:0e:31:95:ab:22:cd:77:
50:e3:b9:35:42:3b:f8:18:15:33:c9:c4:43:da:46:fc:0b:1f:
ea:05:54:0c:f9:82:19:fb:9b:d8:67:48:db:8e:dc:6d:24:49:
3c:2e:d5:70:11:01:f7:9b:ac:f1:ca:d8:be:08:7f:f7:7f:f4:
39:99:5f:fc:40:4a:25:bb:ce:aa:5b:49:68:3e:16:f3:73:a0:
07:00:6d:36:00:5b:dc:0b:ac:55:b3:84:fb:56:46:2a:93:0c:
64:8e:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org