Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/KlVvinYeoJN9c-6-OX4MzWcYY48.roa
File: KlVvinYeoJN9c-6-OX4MzWcYY48.roa (raw, json)
Hash identifier: 8KcskcVInqi+0eFk3hLkZz19JgsMIOdP5iyRJw5WvGM=
Subject key identifier: 2A:55:6F:8A:76:1E:A0:93:7D:73:EE:BE:39:7E:0C:CD:67:18:63:8F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DB03D1FAA52D256BF51FF4A5EC5D7
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/KlVvinYeoJN9c-6-OX4MzWcYY48.roa
Signing time: Sun 01 Jan 2023 22:04:49 +0000
ROA not before: Sun 01 Jan 2023 22:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6736
IP address blocks: 81.12.12.0/24 maxlen: 24
87.107.117.0/24 maxlen: 24
87.107.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b0:3d:1f:aa:52:d2:56:bf:51:ff:4a:5e:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a556f8a761ea0937d73eebe397e0ccd6718638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:cc:3d:81:9f:2b:65:ec:c8:15:e0:d8:58:
46:f8:02:0b:f6:8a:3e:d8:92:ee:5d:f8:e0:a7:d1:
1d:46:b5:18:e5:f2:b9:d2:cd:da:77:70:2d:c3:51:
bb:ce:ab:61:8d:88:07:ca:95:5c:73:aa:f7:c9:d2:
0d:2f:fc:45:1c:8d:04:75:19:49:b8:c2:be:05:63:
8b:f1:14:a6:e4:92:97:9e:6c:8a:39:84:7e:0a:1c:
f0:0c:f0:0a:27:ca:dd:a0:cb:0f:30:a9:6f:8f:c5:
3e:d3:d0:49:2c:4c:d8:f7:99:f3:d3:b5:bb:5d:17:
3f:7c:5a:db:92:86:20:79:f9:fc:5d:8f:87:33:bd:
8b:58:95:79:09:22:60:7b:4a:ed:43:2c:89:c8:a7:
35:b5:57:a9:b3:44:c6:87:e4:ca:5f:d1:52:4d:f3:
2b:13:2c:72:d5:fa:8c:b2:b6:41:ea:73:69:c6:20:
41:f8:d3:42:79:b3:68:a7:a3:17:78:6a:55:fe:e8:
c5:2e:71:0e:b1:f3:28:0a:58:0e:37:9b:f5:d1:91:
f6:24:59:81:57:c0:e9:85:00:fc:0f:d8:69:80:15:
d9:c1:db:9f:47:c0:be:b4:a8:eb:eb:42:85:82:61:
49:cd:65:c4:93:35:78:05:8b:44:e4:ba:d0:54:0e:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:55:6F:8A:76:1E:A0:93:7D:73:EE:BE:39:7E:0C:CD:67:18:63:8F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/KlVvinYeoJN9c-6-OX4MzWcYY48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.12.0/24
87.107.116.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0d:7d:fb:7e:29:3c:74:fb:db:97:4a:49:c5:2c:23:00:5b:
ba:e8:e4:39:6c:a1:14:81:4f:20:97:2c:0a:8b:5b:f7:61:3a:
94:c4:e8:c3:65:96:04:d1:96:b8:6e:a7:e5:db:b5:cc:0d:41:
2e:52:5f:f7:53:0e:b0:dc:d1:b0:30:45:67:0c:c7:3a:e0:1f:
40:d8:08:5d:fe:7f:b7:43:c4:9d:87:ee:61:e1:0d:4a:ec:18:
14:d1:7e:38:46:78:58:91:0d:93:5a:b5:84:1e:d5:60:56:f2:
3e:c7:06:75:1b:fd:dd:1e:55:58:dd:31:ae:9f:8c:38:0c:7f:
15:18:24:47:d1:f7:a0:14:ab:44:03:b2:3f:93:0c:e6:63:5f:
a3:86:64:b0:c1:f6:40:ae:e2:1b:46:88:97:1b:3e:6e:f1:1d:
fe:b5:77:fc:b1:64:1c:8a:62:c4:5b:bc:d0:52:ad:75:c8:4e:
b1:29:00:21:4a:6f:b8:43:28:2f:35:93:7a:9c:1e:c6:7b:14:
11:48:17:e0:2a:6f:b7:f3:5c:5d:e6:24:7c:d4:a8:10:86:10:
de:99:e7:88:83:09:32:01:26:73:08:81:7c:ed:88:80:6f:5e:
4f:13:4d:22:16:5f:35:95:23:12:be:e0:9b:88:67:f6:d3:2b:
a1:b3:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org