Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/9AV4sGL340DOuLyFu8742m75wuE.roa
File: 9AV4sGL340DOuLyFu8742m75wuE.roa (raw, json)
Hash identifier: viQB/3MRU5mYousVIF7BeITXoPjzDvkk2/cEbIO+lSI=
Subject key identifier: F4:05:78:B0:62:F7:E3:40:CE:B8:BC:85:BB:CE:F8:DA:6E:F9:C2:E1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DC4DBDCEF459E391ACD5A0555805E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/9AV4sGL340DOuLyFu8742m75wuE.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212036
IP address blocks: 87.107.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c4:db:dc:ef:45:9e:39:1a:cd:5a:05:55:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f40578b062f7e340ceb8bc85bbcef8da6ef9c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:1e:02:d7:04:63:62:cf:ba:1f:6b:f7:e0:
95:b5:a9:35:88:a2:5b:e9:e6:f3:31:64:8e:79:1a:
58:ac:6c:76:75:32:56:c3:64:df:45:e6:3a:f6:c7:
30:27:82:71:bb:01:26:41:b1:19:f6:fc:77:d4:f3:
37:53:04:b5:70:fb:c6:3d:aa:5a:a5:3c:43:c1:48:
35:08:e8:3c:f2:e0:d6:2b:e1:0c:37:95:06:68:72:
b6:a7:f8:01:98:ce:a4:b0:f7:9a:6e:de:85:7f:e8:
43:fb:05:36:3f:17:15:cf:9a:78:bf:03:46:ca:95:
5b:05:82:49:24:70:89:c6:c2:0d:85:f3:7c:e3:fa:
72:bb:92:dc:66:62:a0:b6:e5:0a:31:5a:a5:df:9c:
13:a8:e8:35:41:7c:dd:10:09:c0:fa:11:57:21:22:
8f:6d:b1:13:1b:45:30:c3:6d:2f:aa:8b:3c:2c:0f:
f6:35:a6:a4:2c:0f:68:92:8e:85:db:35:4c:0f:cb:
18:92:5d:f7:c4:ac:5c:c7:f1:00:e9:6e:ef:88:27:
b3:17:dc:db:d0:68:2e:0c:64:9c:ea:ad:2f:f1:b0:
b6:9b:88:c0:f5:53:f1:7e:ff:0c:ea:ac:f2:0c:86:
d5:38:45:ba:39:a7:07:c3:15:55:d0:ed:b6:70:93:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:78:B0:62:F7:E3:40:CE:B8:BC:85:BB:CE:F8:DA:6E:F9:C2:E1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/9AV4sGL340DOuLyFu8742m75wuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:59:de:37:47:c0:ef:f1:96:6f:af:3d:44:47:16:06:a1:aa:
50:ed:c3:dc:77:94:42:54:38:6d:eb:7f:83:de:a9:58:52:d8:
d0:b7:cc:d9:ba:1b:1e:b8:c6:cc:97:79:2e:f3:3a:d1:c5:ed:
75:e4:80:83:09:3f:13:36:0c:dc:c4:52:29:5c:42:39:e4:a3:
5f:bf:76:6f:95:ff:6c:00:fb:b1:08:f0:96:aa:38:a2:2c:d6:
fb:cd:30:41:a4:4b:79:50:dc:ab:33:09:66:7e:86:cb:c0:ca:
85:6d:29:47:63:2a:48:91:ba:62:3d:ab:94:3e:b3:87:2f:36:
ac:78:36:d5:b0:9d:fa:80:54:f9:ae:e9:55:91:54:af:97:45:
b4:f4:0f:65:a6:ed:52:a0:be:63:5a:fc:16:4e:4d:e5:51:74:
9f:38:98:9d:f4:16:f1:42:f9:96:47:70:85:53:07:4a:50:6f:
8a:c8:d8:0d:6a:57:d8:f9:7d:b9:bd:f8:bc:ef:49:f6:99:08:
92:d4:61:0c:3d:66:60:13:23:de:8f:44:3c:c9:95:57:3c:87:
d2:2e:5d:56:ff:2a:0a:6b:4f:e3:45:8f:9b:ce:1a:a2:fe:c6:
2c:b0:1a:cd:f0:58:9e:d2:2c:d9:08:a7:93:4b:60:11:71:79:
42:52:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org