Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/GfknQEJqPGvJar_oVw8zQjpSVv0.roa
File: GfknQEJqPGvJar_oVw8zQjpSVv0.roa (raw, json)
Hash identifier: 2zPPdms49I8HsC9E35D5EWsJyUFb20ajfUI+QdKbDik=
Subject key identifier: 19:F9:27:40:42:6A:3C:6B:C9:6A:BF:E8:57:0F:33:42:3A:52:56:FD
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0186EA3F1169294A5F09878607AC957F2D33
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/GfknQEJqPGvJar_oVw8zQjpSVv0.roa
Signing time: Thu 16 Mar 2023 11:47:27 +0000
ROA not before: Thu 16 Mar 2023 11:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21341
IP address blocks: 87.107.42.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.40.0/24 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.50.0/24 maxlen: 24
87.107.50.0/23 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 22
87.107.88.0/22 maxlen: 22
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
87.107.96.0/22 maxlen: 22
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 21
87.107.122.0/24 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 22
62.220.96.0/21 maxlen: 21
62.220.104.0/21 maxlen: 21
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.24.0/22 maxlen: 22
81.12.48.0/22 maxlen: 22
81.12.58.0/24 maxlen: 24
81.12.52.0/23 maxlen: 23
81.12.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Apr 2023 11:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:3f:11:69:29:4a:5f:09:87:86:07:ac:95:7f:2d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Mar 16 11:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f92740426a3c6bc96abfe8570f33423a5256fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:86:45:d8:95:93:f0:91:ef:f3:af:0f:fc:
1e:02:12:3a:f5:ae:64:c0:5d:50:39:7f:b8:df:4b:
23:7d:eb:2f:4f:25:73:d1:6f:5b:98:0e:c9:38:9e:
dc:a3:2a:21:4f:ae:a0:16:00:f3:56:ca:6c:9a:6d:
9b:49:b4:e3:71:31:94:8e:43:b2:2f:54:8e:d2:c2:
ef:05:92:e7:56:d5:92:19:f5:e7:73:a7:da:2b:d4:
46:25:c7:65:5b:89:4b:77:f5:19:86:e3:39:e5:6d:
12:2a:dc:28:3e:3e:3c:5e:31:a4:b3:ee:39:4e:d0:
91:60:9d:af:6e:13:9d:9a:e9:cc:e2:a7:ac:86:c2:
4d:ea:8c:f9:0a:c8:2b:77:30:05:7e:aa:a1:1a:14:
7a:68:4d:a0:85:b1:68:86:a1:82:6c:bb:98:fc:5e:
13:8f:24:16:c2:89:29:ce:8c:bf:7d:95:c9:d9:50:
2f:5f:88:bd:62:55:b9:10:be:de:6a:e7:d3:cb:f0:
19:0a:55:01:2f:96:48:e2:07:3b:d2:d6:ff:e8:51:
90:18:2c:a7:1e:e8:b9:e7:89:fc:21:3e:09:ca:7b:
ad:dc:c4:d1:f6:1a:05:8c:09:d1:46:8b:be:85:0a:
50:5c:02:df:e7:7a:4d:50:de:d6:58:fb:71:86:0f:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:27:40:42:6A:3C:6B:C9:6A:BF:E8:57:0F:33:42:3A:52:56:FD
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/GfknQEJqPGvJar_oVw8zQjpSVv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.27.255
81.12.48.0-81.12.53.255
81.12.58.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.168.0/22
87.107.173.0/24
185.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:a0:d8:53:37:2c:7d:39:fc:1f:5f:e6:6e:9b:af:0c:04:22:
07:80:4c:35:10:96:0a:80:ea:45:45:98:e8:a5:89:d2:86:a9:
35:bc:e6:5b:c3:14:d4:64:03:f8:d6:ed:6f:89:6e:b4:4c:1a:
27:34:22:49:c6:df:33:ee:d7:44:e7:fd:08:38:49:1e:88:ad:
b8:16:f0:6e:28:86:85:ab:ff:49:7f:b4:59:19:8c:a0:84:73:
b8:71:37:d9:18:81:00:e5:b9:5f:fa:aa:86:54:5f:59:75:6e:
5a:32:06:47:08:a8:e1:74:75:9a:83:84:e6:82:8a:0b:eb:0e:
ff:b7:d6:ad:0b:7c:b5:53:c8:81:10:53:52:01:84:bc:75:2b:
76:1b:e1:a8:5a:49:22:a2:af:57:0d:b8:7a:7f:a5:95:fb:a0:
09:94:c2:8f:ce:6c:b0:2c:7e:35:35:92:23:53:1d:bc:3a:eb:
5d:9a:d9:ae:aa:98:3b:bd:63:3c:f7:d2:c0:bd:11:db:8d:00:
d7:44:03:5b:46:0e:4c:ce:cf:4e:d5:af:3c:5a:8c:ce:05:29:
9f:2b:e7:d6:21:24:88:c2:27:8f:85:b7:90:eb:cc:8b:7f:dc:
a1:17:97:e4:52:18:65:a2:af:4e:3f:96:0f:8c:6b:ee:18:ef:
e2:76:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org