Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/MFJp_1i5ZbVIlKm9oRrnm_YlFz8.roa
File: MFJp_1i5ZbVIlKm9oRrnm_YlFz8.roa (raw, json)
Hash identifier: 617kAJMxIKlIdvl6Ugk6IHOdIxhzXnjNqEZ0pYj8k8Y=
Subject key identifier: 30:52:69:FF:58:B9:65:B5:48:94:A9:BD:A1:1A:E7:9B:F6:25:17:3F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01918DB51D9921C68BE4E2AF53379F832A77
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/MFJp_1i5ZbVIlKm9oRrnm_YlFz8.roa
Signing time: Mon 26 Aug 2024 08:02:22 +0000
ROA not before: Mon 26 Aug 2024 08:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214361
IP address blocks: 87.107.159.0/24 maxlen: 24
87.107.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 08 Sep 2024 11:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:b5:1d:99:21:c6:8b:e4:e2:af:53:37:9f:83:2a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 26 08:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=305269ff58b965b54894a9bda11ae79bf625173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:ed:19:18:0c:a1:16:ae:01:40:d0:af:17:
79:56:84:17:64:1f:c5:89:e6:c8:bb:35:00:99:bc:
4a:4f:cc:23:0f:fd:e9:b0:ec:8f:44:9a:79:a2:d9:
eb:43:51:59:5a:af:00:32:ff:12:9e:ec:49:f4:08:
37:3a:4a:9d:5b:5c:91:74:d3:54:04:25:9a:de:ca:
23:61:fb:10:f5:51:af:6c:db:bd:af:1e:b0:3c:09:
74:16:47:69:04:78:ab:f3:31:f2:d1:0f:a3:20:81:
be:9d:fb:ba:63:4f:5b:06:58:b4:81:88:b5:47:9b:
96:7a:30:10:0d:5a:a5:31:53:85:ec:8b:1a:fa:c3:
ed:02:22:27:76:e2:b2:f5:f2:eb:2c:a9:eb:a0:83:
d0:cb:72:e6:62:9f:fc:f7:1e:ee:ed:54:b5:e0:78:
c8:66:fe:38:91:0b:a9:3f:cf:6b:13:d4:a4:66:8f:
10:ef:ef:e5:d1:ab:dd:49:85:5f:1b:dd:c1:3c:87:
44:83:dc:c7:3f:6a:9f:c2:48:ff:13:8c:0d:20:26:
f5:f4:da:47:f7:40:83:53:d8:b2:01:d3:ab:22:f3:
76:39:cb:d2:b8:1e:f9:df:34:0d:0a:66:fc:7b:cf:
88:b0:ef:6d:cb:21:a0:e0:ef:ff:ad:f0:47:56:f3:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:69:FF:58:B9:65:B5:48:94:A9:BD:A1:1A:E7:9B:F6:25:17:3F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/MFJp_1i5ZbVIlKm9oRrnm_YlFz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.159.0/24
87.107.184.0/23
Signature Algorithm: sha256WithRSAEncryption
54:a2:44:38:d2:23:42:11:75:15:af:d4:d9:5c:65:fc:b9:74:
bf:4e:6e:49:3d:97:d6:33:9b:7a:4a:8e:d0:b7:5c:f0:84:b1:
d1:e9:d4:28:f3:59:8b:94:06:7e:25:87:82:a1:60:fc:84:83:
19:70:28:b6:7f:50:7d:d5:ac:84:2e:08:07:c3:8a:e9:11:e7:
2c:d0:00:d5:77:4d:65:fd:fd:3d:7e:95:9b:f3:c5:be:df:f0:
e1:5e:8a:ee:de:87:b8:d7:0a:e2:98:e6:41:27:99:39:95:65:
97:5a:1c:ec:87:5d:ea:5e:2d:c8:ac:7f:e2:96:f5:52:bb:7f:
0f:c1:ca:aa:46:56:36:5c:7b:2c:30:5d:65:6c:62:61:2b:25:
cc:c7:90:d6:3d:57:59:f5:0f:09:d7:d1:f5:5d:b5:9f:28:0a:
6e:98:4e:97:17:cb:ca:91:81:e6:83:b0:13:d3:d6:f7:73:5b:
5f:0b:9e:e2:87:01:53:8b:9d:b7:b3:67:f7:6a:ee:0a:37:15:
c2:9d:82:35:bb:79:e1:b5:43:e1:a3:f3:31:7f:2f:88:ca:34:
f6:3f:24:b9:4c:3f:c8:24:88:db:e2:1d:03:73:fb:d3:1c:fd:
55:65:f7:50:ea:4a:12:44:02:af:68:9d:2e:02:63:02:7e:d3:
ab:fb:c9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 12:39:06 2024 by rpki-client on console-fra.rpki-client.org