Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AKUmEihd3oNXNo7jaZWdKs3VRaI.roa
File: AKUmEihd3oNXNo7jaZWdKs3VRaI.roa (raw, json)
Hash identifier: 0alcjHUpDGKWnnH/OD/We0rVWifPYNEH12c92W44nNs=
Subject key identifier: 00:A5:26:12:28:5D:DE:83:57:36:8E:E3:69:95:9D:2A:CD:D5:45:A2
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DBCAACCF3DE288716286FEFA21FB0
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AKUmEihd3oNXNo7jaZWdKs3VRaI.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200370
IP address blocks: 87.107.0.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bc:aa:cc:f3:de:28:87:16:28:6f:ef:a2:1f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00a52612285dde8357368ee369959d2acdd545a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:fa:d6:9d:59:89:66:2f:f4:4a:10:4c:fc:
96:36:d9:1a:9e:2d:5f:62:ab:ac:62:7c:52:ff:ab:
57:08:65:2e:57:49:1b:39:0e:2e:65:e2:2e:de:17:
46:eb:20:4e:f1:94:b6:cd:84:85:d4:2b:c8:7f:f6:
1a:83:df:a0:2f:8b:fb:b0:4c:9d:73:b6:2a:55:c5:
d6:49:d4:e3:09:b4:56:df:85:d6:98:b4:ff:ee:fc:
49:95:d8:25:29:9f:7c:1d:5c:a2:bc:a4:fb:b6:2c:
c1:b5:7b:39:db:8d:8e:3a:a0:8a:c9:18:a8:2f:a7:
27:04:31:e5:d4:7c:e2:b2:39:33:da:4a:3c:03:4d:
a4:95:b4:19:72:d7:53:d6:96:59:d0:f0:8c:9a:89:
fa:89:4f:15:93:65:da:28:28:61:1f:55:ab:ff:ce:
83:b8:d2:1c:93:4c:88:16:eb:8a:be:75:58:b0:c1:
53:5b:5a:e8:16:60:63:dc:83:f3:aa:00:74:e7:a9:
25:0a:e3:f6:24:cd:29:94:61:48:d2:41:88:67:b6:
c3:d3:aa:c4:ee:d5:07:5b:1e:19:36:7d:64:4b:88:
62:ff:2a:71:4d:ce:3b:60:84:e2:ff:d3:25:c2:de:
af:70:60:c1:42:ec:62:75:03:20:93:b3:3b:d5:78:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:26:12:28:5D:DE:83:57:36:8E:E3:69:95:9D:2A:CD:D5:45:A2
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AKUmEihd3oNXNo7jaZWdKs3VRaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:4b:20:1e:cc:7d:9d:b7:d6:af:ec:39:7a:80:fc:55:59:9b:
92:2a:ec:7d:24:91:76:67:5d:82:7e:cd:71:ae:f6:d3:55:23:
3a:e0:e8:c5:a5:fe:70:f3:70:46:e9:fe:43:9f:b8:d5:16:36:
1a:83:0c:89:84:db:cf:0d:5d:46:d0:a2:48:e2:a1:1e:58:37:
c1:fd:13:44:a1:db:da:51:6b:bf:f7:3e:9d:21:16:02:63:a3:
ce:92:e8:52:98:9c:90:bc:da:16:5d:76:63:56:e9:03:16:73:
cd:09:bb:e5:bc:a3:2d:df:8b:ae:9e:aa:4c:13:2e:2a:83:42:
38:ac:d2:5b:23:f3:23:d8:98:8b:6e:f4:55:90:02:62:aa:e1:
35:60:ed:9d:f4:a2:e6:6e:33:08:56:7e:71:76:84:36:25:46:
9b:84:aa:2c:08:15:1a:e7:a7:e5:8f:2b:b7:00:9a:7f:38:64:
68:65:f8:04:78:b2:83:4a:7c:2e:14:23:6e:90:f2:1e:34:d3:
0c:8f:82:5e:07:8e:da:03:a7:a3:cb:a1:66:51:a5:73:e6:a0:
81:2e:b3:64:e9:02:4f:34:6e:9e:63:d7:96:47:9b:ee:a1:da:
a8:94:13:41:46:23:ca:59:6f:a0:6c:fa:4a:ed:9a:e3:27:c1:
72:08:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org