Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/PqAheXD5q3M2X-jbc7k2XW0MJGY.roa
File: PqAheXD5q3M2X-jbc7k2XW0MJGY.roa (raw, json)
Hash identifier: F9g9WOWOBfys79jHYYYNnvVgqInEM1hbkYaotX159NM=
Subject key identifier: 3E:A0:21:79:70:F9:AB:73:36:5F:E8:DB:73:B9:36:5D:6D:0C:24:66
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01881FF28D913AE7E741528CFBB2BCC8BB68
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/PqAheXD5q3M2X-jbc7k2XW0MJGY.roa
Signing time: Mon 15 May 2023 15:06:09 +0000
ROA not before: Mon 15 May 2023 15:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.56.0/21 maxlen: 24
87.107.64.0/22 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
87.107.148.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.112.0/21 maxlen: 21
87.107.176.0/21 maxlen: 24
87.107.184.0/22 maxlen: 24
87.107.92.0/22 maxlen: 24
87.107.104.0/21 maxlen: 24
87.107.100.0/22 maxlen: 22
87.107.136.0/21 maxlen: 24
81.12.0.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 23
81.12.64.0/21 maxlen: 24
81.12.60.0/22 maxlen: 24
81.12.64.0/18 maxlen: 24
81.12.72.0/21 maxlen: 24
81.12.80.0/20 maxlen: 24
81.12.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:f2:8d:91:3a:e7:e7:41:52:8c:fb:b2:bc:c8:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 15 15:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ea0217970f9ab73365fe8db73b9365d6d0c2466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:9e:5d:e2:9a:a9:6c:9b:70:d0:46:5f:db:
2c:ed:a3:b0:60:04:1c:c5:91:31:18:40:5e:b0:23:
2c:cf:85:46:cb:d3:14:cc:e0:96:98:f8:b4:ac:8b:
a6:ef:c8:43:6e:39:fd:c9:46:b4:0c:11:36:14:63:
27:58:fb:01:ce:23:af:df:7a:62:1c:b8:81:b6:09:
d0:71:e7:b9:43:12:43:b5:53:19:21:12:3b:30:0f:
fa:f8:5d:0c:c0:55:bf:38:6d:d4:82:65:61:34:6f:
fe:a7:f9:48:53:df:e1:c4:8b:f7:15:0d:35:3e:17:
9b:e4:78:bc:8c:fb:ef:42:e6:69:54:1d:3e:ca:67:
44:fb:4f:09:b0:ce:c6:26:0a:c6:47:7d:ed:a6:9a:
80:61:ae:45:3d:5c:ac:fd:27:48:c9:5a:39:74:1c:
f0:cd:0c:9e:75:51:53:f3:4a:cd:f7:23:c5:e6:25:
99:b4:82:55:ad:f8:e3:cf:53:f8:b2:dc:9f:93:df:
f9:c0:6e:1d:e0:1f:22:5a:02:1e:72:09:7c:4e:8e:
41:01:c5:2b:f6:e0:43:10:b5:66:8e:21:d5:d2:8b:
15:a4:a2:a8:ea:22:7f:2b:38:36:3a:93:f6:18:5d:
5e:bc:fc:61:cc:ec:67:8d:13:53:64:01:8e:28:01:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:21:79:70:F9:AB:73:36:5F:E8:DB:73:B9:36:5D:6D:0C:24:66
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/PqAheXD5q3M2X-jbc7k2XW0MJGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.56.0-87.107.67.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0-87.107.111.255
87.107.136.0/21
87.107.148.0/22
87.107.156.0/22
87.107.176.0-87.107.187.255
Signature Algorithm: sha256WithRSAEncryption
ba:94:76:7f:18:38:82:6d:d9:e2:10:b5:59:50:4e:14:17:65:
e0:34:3f:31:16:0e:4f:33:19:cb:55:63:56:3f:db:cc:3d:0b:
37:66:92:8b:e4:b3:00:a1:b7:0c:ad:b1:5e:ee:4b:10:e1:7a:
94:4b:62:f4:9c:8f:37:1c:4a:53:17:b6:9c:71:ec:b2:9c:31:
16:df:67:04:e0:3b:1d:5a:4b:f0:cc:16:5e:45:93:4a:b8:fc:
fd:79:62:a9:34:af:65:97:e5:95:66:92:28:ad:03:ff:a4:fd:
da:05:67:bb:48:e9:30:8e:d3:6f:e1:d8:02:45:04:4e:4b:7c:
34:24:fe:86:c4:73:6a:6b:cc:5a:6c:e8:a3:bc:04:56:71:52:
95:98:72:dc:22:97:7c:c1:15:40:9e:50:cb:1f:67:ae:48:c4:
5b:ea:f7:03:a7:e9:20:d6:96:02:7f:77:95:2d:94:f3:64:79:
3e:82:08:4f:1f:98:d2:3d:a8:5e:b4:43:46:b3:81:21:69:14:
19:bb:e3:05:f3:0f:27:38:4e:c7:0c:18:4d:de:a1:51:b2:ab:
87:1d:97:b2:a2:1d:53:b9:0f:b4:b2:dd:c8:bc:4f:ba:95:06:
87:eb:08:25:8c:c6:83:5a:8c:27:0b:c5:ed:aa:64:78:25:04:
03:bd:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org