Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/SS99M_JSM5U4XSPADAd6FNG2cRU.roa
File: SS99M_JSM5U4XSPADAd6FNG2cRU.roa (raw, json)
Hash identifier: w1uR13b09f8bLZwdCwottZq1YfSP61v1S4mXA2JXnX8=
Subject key identifier: 49:2F:7D:33:F2:52:33:95:38:5D:23:C0:0C:07:7A:14:D1:B6:71:15
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DBB3C2A5C706131E100026785B15D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/SS99M_JSM5U4XSPADAd6FNG2cRU.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62367
IP address blocks: 87.107.134.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bb:3c:2a:5c:70:61:31:e1:00:02:67:85:b1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492f7d33f2523395385d23c00c077a14d1b67115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:0c:90:45:6e:02:9c:26:79:6a:83:7e:b9:
63:14:24:0e:96:0b:63:36:f6:f8:99:1b:45:6c:24:
03:3c:92:5a:7f:54:82:06:d3:fd:f7:75:03:64:33:
76:7c:c5:61:2b:e7:f4:2b:90:18:bb:33:e4:e1:0b:
ca:3d:cf:c6:db:49:e4:fc:39:b2:9a:29:30:4c:3b:
6e:d0:81:a9:43:0d:c5:21:cc:f3:3c:21:4a:36:a0:
1c:fd:ed:c4:07:59:e6:01:08:43:cb:54:74:df:99:
98:56:87:0e:cf:a7:c2:55:d8:20:2a:1c:fe:ec:b3:
5b:34:8b:84:6a:45:ea:99:9c:b3:9d:6e:7d:ab:12:
3c:93:e2:df:b3:d7:3d:9f:64:7c:e9:df:b7:43:17:
4d:26:41:5b:d0:23:df:01:c1:2a:88:9b:bc:20:1d:
04:07:7f:f4:83:d5:97:8a:43:ef:a6:ab:3f:da:37:
2a:47:61:42:d8:fa:d5:ac:30:d8:ff:f0:e1:f0:7a:
50:53:e0:bc:58:36:e5:f8:3b:59:94:25:e8:59:15:
bd:50:fa:34:0b:2f:84:a4:d4:d4:85:cd:1f:3e:2b:
fe:48:c7:6d:c6:31:f6:ec:33:84:cf:49:31:d5:db:
55:07:cd:be:a8:c7:6d:26:92:b1:00:cc:f2:86:81:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:7D:33:F2:52:33:95:38:5D:23:C0:0C:07:7A:14:D1:B6:71:15
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/SS99M_JSM5U4XSPADAd6FNG2cRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.134.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b6:2c:52:a2:cc:40:fd:c0:1c:91:de:4c:e7:40:13:eb:3f:
2a:0c:27:ff:6c:b5:bf:79:9c:39:15:71:6c:3b:c4:96:0f:c1:
20:e8:45:9d:c5:94:28:d9:70:2c:0f:37:c8:00:15:3a:cc:68:
8f:88:6f:35:ce:a7:2a:41:7f:7a:6b:90:b4:2d:2b:b1:36:52:
6f:c5:a3:fb:9c:5e:7e:f7:33:a6:cc:1c:94:41:1e:2c:04:0f:
c1:e1:2f:b7:2f:6a:ca:bd:de:0c:01:82:fc:a7:7d:ea:d1:52:
24:f8:72:1b:4a:60:79:ba:a4:39:6e:53:8f:44:f4:8b:2b:fc:
21:b7:e6:16:84:ea:69:21:38:f5:f4:8e:77:0c:c5:07:50:91:
d5:19:a0:57:b0:7c:77:fe:a9:0c:46:51:44:15:f9:d2:ae:22:
6d:19:4a:7b:7e:ed:01:ec:ef:aa:64:e4:1f:89:12:fc:a5:30:
f2:3c:d4:12:09:26:ef:12:6a:20:14:36:5e:be:b2:06:34:cb:
e3:dd:91:0a:d3:35:14:8e:e6:ae:ff:75:ec:b6:8c:ce:ac:d8:
12:3c:87:c2:d6:56:46:41:7b:1c:0d:da:4c:cb:52:49:47:51:
13:4d:97:79:12:f5:69:9b:b4:27:57:37:d3:a7:e9:25:0f:67:
24:2d:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:54 2024 by rpki-client on console-ams.rpki-client.org