Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TWbC3nsibzoGFzHSuwpypPDvgug.roa
File: TWbC3nsibzoGFzHSuwpypPDvgug.roa (raw, json)
Hash identifier: mU2e/dxZN5gMzal8EL9kGD3iGU9L1Xjn9180EB2afoQ=
Subject key identifier: 4D:66:C2:DE:7B:22:6F:3A:06:17:31:D2:BB:0A:72:A4:F0:EF:82:E8
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993A4BEEDDF87FF48849D37DE5F15E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TWbC3nsibzoGFzHSuwpypPDvgug.roa
Signing time: Tue 02 Jan 2024 14:34:48 +0000
ROA not before: Tue 02 Jan 2024 14:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/23 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.155.0/24 maxlen: 24
87.107.164.0/23 maxlen: 24
87.107.54.0/23 maxlen: 24
81.12.52.0/23 maxlen: 24
87.107.104.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 08:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3a:4b:ee:dd:f8:7f:f4:88:49:d3:7d:e5:f1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d66c2de7b226f3a061731d2bb0a72a4f0ef82e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:1e:e0:1c:c7:2d:f6:e7:af:a6:b2:27:53:
da:f7:fb:81:f3:b4:b5:a6:09:f2:3f:aa:0d:b9:e1:
a9:df:e6:f6:b5:bb:1f:32:9d:16:f7:4c:d7:2f:01:
40:58:98:14:2c:86:a7:47:7b:25:09:28:78:19:a6:
ef:d3:20:1e:b4:dd:9f:0f:01:41:22:6b:13:f8:35:
4f:5a:2a:59:7d:44:78:61:38:5f:3e:33:ee:7e:c3:
ed:eb:1a:95:dc:d3:3e:11:f1:7e:82:06:84:4b:1a:
4b:62:32:8f:9e:a4:df:fc:ce:1b:23:30:9d:ca:4f:
28:cb:dc:cb:b0:4f:96:42:e9:b8:80:1b:ef:c2:03:
3e:7f:de:d5:72:38:81:c2:63:41:60:67:d0:e0:21:
a2:b3:a3:69:a1:ab:52:54:3f:05:9c:dd:8a:b1:e3:
2d:ce:7d:4d:df:33:d5:1c:1b:69:3c:bf:dd:0b:f8:
c6:03:95:63:ee:5a:ce:44:32:36:f6:29:79:b2:d8:
c0:85:c5:43:98:fd:e5:ca:c9:2c:13:fa:54:7d:1c:
6e:a6:45:d1:c8:ea:4b:f5:ff:70:94:16:1c:c6:d6:
28:eb:56:6b:4a:8f:9e:6b:15:8d:8e:35:2b:33:87:
18:71:7b:7a:5f:71:6a:cf:cd:24:5c:be:9a:94:26:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:66:C2:DE:7B:22:6F:3A:06:17:31:D2:BB:0A:72:A4:F0:EF:82:E8
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TWbC3nsibzoGFzHSuwpypPDvgug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.52.0/23
87.107.54.0/23
87.107.104.0/23
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:b3:a0:c8:d5:42:38:15:2c:60:57:ed:7b:b8:24:4b:55:e4:
5e:c4:6a:18:5d:3f:85:93:9b:7b:bf:75:02:82:80:48:bb:fe:
4d:70:92:ac:f8:20:2f:f8:85:1c:6e:59:ad:1e:2a:31:1a:d3:
01:ab:4a:bf:32:12:42:76:ca:39:ce:9c:be:0a:69:b3:79:c5:
6d:f0:50:cb:5b:c6:5a:e6:6f:46:2b:b4:c3:4e:4b:47:ec:87:
cc:c8:4c:44:2b:96:1d:14:86:da:8f:cf:5d:18:c0:05:c1:27:
a7:f9:2d:4f:fe:74:62:8c:a9:d5:e8:07:46:c3:a1:36:93:8c:
12:06:35:fd:5d:00:d8:f0:a9:e1:3e:a3:c9:52:c9:a6:e2:26:
25:91:8a:1c:d9:fe:43:70:91:05:e8:1a:63:09:71:ce:17:b3:
26:46:8c:ca:c9:30:c6:13:13:ec:ce:c4:b7:14:72:50:b2:a7:
d0:a1:7e:1e:ae:a8:57:f0:51:7f:80:59:0f:34:b4:04:54:a0:
8b:0f:69:07:a3:e0:dd:33:e8:df:c3:14:ca:13:44:91:f0:84:
c6:b2:4e:a6:18:f3:11:ef:30:2e:9d:7f:55:13:63:c2:9e:c0:
55:4e:bc:65:18:da:0d:e7:11:bb:2e:b8:ce:69:57:f3:96:f9:
8e:da:3a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 09:31:10 2024 by rpki-client on console-fra.rpki-client.org