Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CIb1NsGV3OeQn9JbZy6fh59wFHQ.roa
File: CIb1NsGV3OeQn9JbZy6fh59wFHQ.roa (raw, json)
Hash identifier: RXOVKSjhkPczPCpzdFLv6Kfs/yPY8vrETy/ey+qgYS8=
Subject key identifier: 08:86:F5:36:C1:95:DC:E7:90:9F:D2:5B:67:2E:9F:87:9F:70:14:74
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0186AC6B07C74F5A3A7C774162F021FA9B77
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CIb1NsGV3OeQn9JbZy6fh59wFHQ.roa
Signing time: Sat 04 Mar 2023 11:39:00 +0000
ROA not before: Sat 04 Mar 2023 11:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 81.12.0.0/21 maxlen: 24
87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.72.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.112.0/21 maxlen: 21
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 23
87.107.92.0/22 maxlen: 24
87.107.100.0/22 maxlen: 22
81.12.60.0/22 maxlen: 24
81.12.72.0/21 maxlen: 24
81.12.80.0/20 maxlen: 24
81.12.96.0/19 maxlen: 24
87.107.136.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:6b:07:c7:4f:5a:3a:7c:77:41:62:f0:21:fa:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Mar 4 11:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0886f536c195dce7909fd25b672e9f879f701474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:89:e1:29:3c:8a:02:50:2e:8c:27:f4:b1:
ae:0e:db:ab:4d:b4:6c:da:54:37:ea:c9:96:26:1d:
95:60:56:df:c3:21:6f:74:d4:43:e8:15:f8:97:43:
10:6a:89:f4:05:37:2a:24:cf:70:09:33:ce:17:2d:
ba:f6:ae:75:9f:a6:a9:2a:68:27:24:29:7b:60:00:
c6:1e:5e:4b:78:f3:2d:4b:3f:53:cf:85:b6:f9:29:
61:40:5e:ff:0a:d7:0b:c6:a7:c0:46:cc:b7:87:4a:
ee:be:58:58:bb:4f:3d:f1:72:74:33:a9:1b:04:d3:
20:15:d1:1a:b1:75:da:6b:c5:f5:34:37:94:88:cb:
fe:a5:14:e0:a4:d1:f3:97:c2:d4:b6:e4:2a:7f:b1:
66:ab:d4:85:30:2d:70:d7:99:a7:18:89:25:38:e6:
fa:10:5b:9a:e3:de:c9:da:ac:f7:13:38:07:a9:87:
fb:7b:36:54:c3:e7:dd:be:70:98:f5:fb:2a:77:2d:
4d:68:de:e4:0d:33:84:33:e4:e0:ba:77:f9:ff:2d:
b0:f0:2b:28:51:b3:78:44:65:1c:d9:62:ba:8e:63:
33:f7:0e:34:59:54:2f:d2:2d:40:66:3c:6f:5a:4d:
60:e5:23:63:e6:a6:00:f5:31:d3:07:d4:ef:e8:21:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:F5:36:C1:95:DC:E7:90:9F:D2:5B:67:2E:9F:87:9F:70:14:74
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CIb1NsGV3OeQn9JbZy6fh59wFHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0/22
81.12.72.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0/22
87.107.136.0/21
Signature Algorithm: sha256WithRSAEncryption
86:d7:1f:d7:11:86:5c:27:d7:2a:d5:bb:a4:09:89:fe:25:f7:
ee:cd:22:30:3b:8c:21:00:ea:85:68:d4:08:4e:a0:6f:65:34:
75:63:db:83:5b:2c:5b:34:13:c8:12:49:3e:a3:3e:f7:25:32:
81:12:66:78:13:4f:b2:d8:77:ae:56:e9:7d:ba:4e:c4:ca:37:
84:f1:5c:a5:80:42:25:63:d5:8c:24:31:c2:61:75:c4:bb:ed:
9c:b8:04:4c:fe:c0:7d:2c:d0:00:fa:7e:67:bb:b7:a1:e9:27:
af:3f:1d:19:9e:51:c6:2d:e2:85:91:42:1b:fe:cb:f5:6a:c9:
75:b5:37:89:7c:c1:09:01:89:d3:63:a0:a6:51:fe:3d:14:f1:
b3:56:dd:7c:90:a3:e8:bc:2a:43:7b:d3:ec:43:9f:d4:4a:cc:
e1:78:a5:c3:a4:73:e0:4b:7d:f7:c1:61:5a:06:d6:f3:10:b2:
b1:e8:0d:de:ec:40:e0:4f:fe:34:fe:7d:ee:b0:64:b0:20:d5:
67:fa:54:ae:ba:78:be:1f:aa:d9:59:14:69:a2:2a:ed:57:47:
f0:b8:56:53:20:b0:de:2d:bf:49:a4:d5:0b:a0:d7:4d:9d:b9:
b5:61:9c:b7:38:01:a9:79:20:1e:26:3f:df:80:cf:2c:65:cc:
29:f7:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org