Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8CAk8Kyj5vZ6CzClsbNRUgEd3FY.roa
File: 8CAk8Kyj5vZ6CzClsbNRUgEd3FY.roa (raw, json)
Hash identifier: CtvXd5MYM9IA1RF0etbRPXMymhH8i/qpGrnIQfD+Jng=
Subject key identifier: F0:20:24:F0:AC:A3:E6:F6:7A:0B:30:A5:B1:B3:51:52:01:1D:DC:56
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0189029926E746436B198E0869851C80BB68
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8CAk8Kyj5vZ6CzClsbNRUgEd3FY.roa
Signing time: Wed 28 Jun 2023 15:22:18 +0000
ROA not before: Wed 28 Jun 2023 15:22:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208555
IP address blocks: 87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
81.12.24.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:99:26:e7:46:43:6b:19:8e:08:69:85:1c:80:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 28 15:22:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02024f0aca3e6f67a0b30a5b1b35152011ddc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:6d:55:a8:07:7d:a2:e0:a6:1f:0e:1a:2a:
e0:63:bb:0f:94:aa:43:d9:86:cf:05:2c:d4:9d:5e:
49:c1:18:e3:d9:ba:1d:1a:73:37:1c:01:20:ef:fb:
f9:f3:53:eb:2d:c6:99:ea:d5:6a:bc:f0:30:05:15:
30:12:85:b8:85:74:24:59:0f:e7:99:1f:56:2d:fe:
28:d5:f4:eb:cd:e7:09:77:91:86:94:5f:65:83:2f:
50:3c:35:18:e6:ff:75:6d:02:16:f1:fc:44:1a:18:
b2:e7:65:04:89:db:76:50:d8:94:0e:c7:ab:d5:34:
46:94:ac:3c:7d:ad:ab:77:6b:fa:42:7b:75:75:2c:
0f:6b:da:38:05:16:98:a6:12:5e:89:2e:3c:e7:56:
15:80:d2:f0:88:d4:08:c3:5d:c3:f1:e9:76:4e:dd:
94:8f:8b:0f:84:57:a1:43:a7:f0:d5:a1:46:44:e7:
1c:3f:b5:ae:5a:e7:da:ef:84:b7:3e:96:4c:78:bf:
5c:39:50:19:c2:a7:ef:ab:3b:54:cb:cb:ee:5d:4b:
01:59:d3:87:2e:4b:a0:7f:aa:bc:82:b0:25:59:56:
07:47:34:1a:74:e0:ad:64:b3:07:25:67:88:35:61:
f9:32:d3:d5:de:4f:84:53:a5:5e:d7:56:5c:a9:30:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:24:F0:AC:A3:E6:F6:7A:0B:30:A5:B1:B3:51:52:01:1D:DC:56
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8CAk8Kyj5vZ6CzClsbNRUgEd3FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/23
81.12.30.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
91:95:b0:f1:da:d8:d1:9b:1e:0b:9e:9e:fc:6c:03:b7:b3:4c:
b1:68:3e:58:bd:a7:97:58:76:30:2e:48:c5:4e:b0:c8:6d:51:
99:b3:77:a7:53:45:06:3a:26:63:6b:c7:b5:f4:c1:9b:1b:a3:
9c:a6:dd:83:52:6b:21:f4:09:bc:ce:09:29:3b:ca:b4:5a:65:
80:3a:e8:f9:21:7d:80:3a:d6:68:f5:0a:9a:1b:1c:b1:22:50:
cb:6e:59:13:4d:8e:84:16:13:12:49:2c:5b:2b:b6:64:62:e6:
5a:c1:a8:4d:19:dc:85:bd:b8:26:57:53:c7:1b:f8:f1:a8:59:
1a:a2:6f:ac:e1:f9:f8:44:fa:0f:83:fb:8e:47:f7:5f:fe:15:
4b:5f:0e:be:71:ec:4d:77:e0:ab:29:65:13:18:b9:df:81:79:
ab:b9:e5:75:95:78:b8:43:ed:15:6c:fe:6c:95:3c:fe:03:4c:
0c:13:bc:ce:6b:07:e7:e9:db:29:2b:50:5b:97:b0:18:d3:d1:
5d:60:7d:b5:fa:ed:56:6c:b9:a3:db:4b:32:91:a0:28:c0:29:
04:fb:67:1b:d4:65:6c:02:8a:da:21:26:84:72:9d:dc:eb:f3:
07:cc:85:8c:79:23:89:15:60:72:63:9a:62:e7:5d:23:f3:b3:
ce:b8:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 11:14:41 2023 by rpki-client on console-ams.rpki-client.org