Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VsK9qZ1dCULB_TME-lfhxXK97Fs.roa
File: VsK9qZ1dCULB_TME-lfhxXK97Fs.roa (raw, json)
Hash identifier: l9m7PpaGmCxiSkTPhwJxj51cdDiN+sWYAPWK19FauCk=
Subject key identifier: 56:C2:BD:A9:9D:5D:09:42:C1:FD:33:04:FA:57:E1:C5:72:BD:EC:5B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018578BFEBC03F7FE80E7B42E483F04EA340
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VsK9qZ1dCULB_TME-lfhxXK97Fs.roa
Signing time: Tue 03 Jan 2023 17:48:41 +0000
ROA not before: Tue 03 Jan 2023 17:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212063
IP address blocks: 87.107.172.0/24 maxlen: 24
87.107.189.0/24 maxlen: 24
87.107.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:bf:eb:c0:3f:7f:e8:0e:7b:42:e4:83:f0:4e:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 3 17:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56c2bda99d5d0942c1fd3304fa57e1c572bdec5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:54:27:09:6a:f2:28:84:f1:ae:18:47:92:
ed:ed:5c:3d:2c:42:50:ed:00:b6:07:c4:c3:5c:9d:
ab:51:e6:f9:c7:45:1d:55:bb:7e:d9:ac:5c:01:bd:
73:41:11:90:15:65:82:e5:c3:3c:85:58:a0:16:65:
d4:db:ee:2e:ae:45:62:7b:4a:36:69:3e:85:f9:e9:
a7:e4:f0:b7:92:dd:cd:17:13:44:d6:f3:d8:b4:f1:
46:15:c7:e4:e4:d8:50:00:65:18:3a:03:c9:15:8a:
b3:d7:d9:2c:86:0d:e7:11:14:6d:e8:7b:29:e4:db:
f3:2f:2a:95:47:2f:29:92:be:09:e9:b9:76:ef:66:
6e:1e:b2:1c:23:79:16:5e:16:4d:2b:7d:d7:73:7a:
56:1c:c3:59:ed:a9:56:08:30:ab:5e:1a:88:50:4b:
32:3d:4f:e1:84:f5:4d:c4:9a:29:70:7e:6b:77:4c:
61:4e:ed:0c:db:8b:7c:e9:51:5b:c6:46:95:2f:30:
0e:db:2e:e8:bd:ac:4d:93:a5:86:ef:7d:f1:8b:26:
bc:47:e9:98:48:7e:fa:77:ae:ce:0d:ff:09:df:70:
51:a9:2e:06:85:dc:b7:6d:c6:b4:fd:fa:c2:76:08:
70:f3:36:9d:1b:c6:f4:0e:c8:ba:49:4c:98:41:4c:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:BD:A9:9D:5D:09:42:C1:FD:33:04:FA:57:E1:C5:72:BD:EC:5B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VsK9qZ1dCULB_TME-lfhxXK97Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.172.0/24
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:70:87:54:74:19:31:0b:c8:7e:9b:b9:93:4f:92:07:a2:cb:
b0:7f:3d:89:4d:f5:27:33:00:64:d8:d1:ac:e5:74:3c:c5:d2:
cc:a2:8b:46:19:2f:f1:de:75:7c:de:66:2d:36:40:0c:0c:3f:
5c:36:68:de:9e:8e:1e:48:85:12:ed:59:3e:5e:0e:a8:ec:b5:
a5:b5:17:37:5d:7a:81:c0:c6:d8:94:da:fe:15:b2:52:a8:27:
06:eb:f7:61:83:10:3a:fd:c4:6f:d7:5a:42:65:c2:e7:6f:dc:
bd:c2:ad:2c:4f:7c:75:c9:fb:eb:f2:76:54:19:78:59:95:75:
6d:54:6b:b5:84:ae:c8:50:b6:53:32:f9:a5:8d:aa:fe:c9:bc:
eb:ad:9a:e3:82:cf:de:d3:7b:3d:75:41:46:a9:cb:6e:21:c5:
3e:f9:cc:d0:f5:f5:0a:e8:a3:aa:94:71:26:db:30:89:1d:93:
ff:6b:f2:97:b1:c2:de:fb:0f:c5:c6:7f:a9:98:d4:63:75:40:
fa:97:e0:65:51:78:86:a7:6a:90:8a:91:b6:5b:e9:1f:7c:72:
48:6c:f8:6f:b9:81:52:28:2b:88:b3:e7:c8:49:cc:70:d7:d6:
9e:a6:ec:63:3a:5a:dc:51:d8:7d:1b:ce:4c:23:74:43:3f:20:
14:aa:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:54 2024 by rpki-client on console-ams.rpki-client.org