Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IS1eglEITAAem8ITOqmVxwR9O48.roa
File: IS1eglEITAAem8ITOqmVxwR9O48.roa (raw, json)
Hash identifier: OZT6JQW7/3xmtBgQEn7o/mG6QPJxvI5YTpdMjkmfUKg=
Subject key identifier: 21:2D:5E:82:51:08:4C:00:1E:9B:C2:13:3A:A9:95:C7:04:7D:3B:8F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018580E57F92E0B40254A29849331566C7D6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IS1eglEITAAem8ITOqmVxwR9O48.roa
Signing time: Thu 05 Jan 2023 07:46:41 +0000
ROA not before: Thu 05 Jan 2023 07:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/23 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.155.0/24 maxlen: 24
87.107.164.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:e5:7f:92:e0:b4:02:54:a2:98:49:33:15:66:c7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 5 07:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212d5e8251084c001e9bc2133aa995c7047d3b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:56:76:1e:21:a6:3d:1b:40:15:c5:cf:24:
d1:16:33:ab:09:ab:74:66:19:f7:64:74:91:8b:60:
6b:8f:fc:b3:6f:74:b7:b2:48:e8:3d:56:eb:f6:99:
aa:5e:26:6e:ee:90:fd:70:91:19:70:6b:33:07:b1:
ef:f5:aa:71:81:f6:9d:e7:c6:a9:ed:92:d0:8f:5c:
7a:49:f6:c2:9a:7b:2d:fa:29:a0:fd:72:56:98:95:
29:3a:c4:68:0a:e1:36:64:b7:d2:c3:9e:bc:f0:40:
a4:d9:5a:fc:55:2c:c2:96:25:45:9f:07:f3:04:ba:
f9:76:c0:82:77:f2:96:63:df:af:29:cb:38:27:3b:
8a:eb:8e:fd:2f:4f:d6:bc:b6:51:51:2f:8a:7a:ff:
be:07:f4:05:db:60:9f:57:a0:f5:97:5a:b5:e5:d1:
de:58:95:43:0b:77:56:06:21:b4:d5:96:be:15:6c:
b1:01:5e:87:c0:7a:de:d6:52:0d:13:0b:62:b8:8f:
4f:e8:e6:4a:b4:3b:25:15:28:ba:82:89:2c:ab:8c:
74:f3:9e:18:b0:58:a2:d5:52:99:0d:26:0b:e4:37:
52:45:7c:4b:ab:1b:69:5b:4a:7a:67:f2:f8:f1:f2:
c7:cb:4c:98:d1:84:e8:bc:5b:70:a3:e7:9a:f0:63:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:5E:82:51:08:4C:00:1E:9B:C2:13:3A:A9:95:C7:04:7D:3B:8F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IS1eglEITAAem8ITOqmVxwR9O48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
97:64:8f:0a:f2:e2:11:45:5d:d5:9e:47:ee:37:f5:bb:0b:63:
d5:17:c8:8c:d4:ea:cd:e0:36:c8:c9:7c:c8:18:8e:48:78:76:
d3:38:9e:4d:9f:31:7e:1d:99:38:2d:90:03:a1:88:47:76:a8:
5a:31:37:33:44:fc:49:bc:da:97:f7:9d:3d:6e:6f:a5:67:5d:
df:4a:df:a7:08:a3:36:4b:08:04:2f:e3:6c:15:dc:9d:0a:04:
7d:4d:41:18:13:19:b2:2c:73:11:7e:f8:e6:7a:91:5a:07:45:
f5:cf:1a:33:26:c3:af:a5:82:3e:9d:b5:22:2f:b2:66:ef:24:
a7:b0:4d:de:4d:08:99:cc:76:19:ca:38:36:89:b0:87:3a:f0:
1c:63:ff:6c:6f:68:e7:82:96:39:45:c3:c6:49:67:72:96:5f:
51:37:a4:4a:a6:36:34:4f:f3:d5:ae:d9:e9:c4:29:41:7f:80:
1b:ab:ba:01:a7:7b:af:80:d8:47:6d:df:48:9c:25:76:7d:89:
cd:bb:b2:36:0b:4a:11:05:29:ce:ee:fa:d8:cd:0a:5d:2b:6f:
e0:7b:0e:41:b5:41:8d:0a:86:71:e7:10:9b:cc:05:a1:52:a8:
0b:16:da:23:fc:67:37:92:b0:d0:b3:2f:d1:5e:e1:6f:1b:cf:
c3:0a:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org