Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Z-bHN9bmTdz8rqzELjmHkQ7ncl4.roa
File: Z-bHN9bmTdz8rqzELjmHkQ7ncl4.roa (raw, json)
Hash identifier: sydwybKraoFXMKmsMi8/nNE4ZF3T3E+nrDzzmRAbsi4=
Subject key identifier: 67:E6:C7:37:D6:E6:4D:DC:FC:AE:AC:C4:2E:39:87:91:0E:E7:72:5E
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019198ED20E6B38DA6C2FC3492B272861C51
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Z-bHN9bmTdz8rqzELjmHkQ7ncl4.roa
Signing time: Wed 28 Aug 2024 12:19:22 +0000
ROA not before: Wed 28 Aug 2024 12:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 12:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:ed:20:e6:b3:8d:a6:c2:fc:34:92:b2:72:86:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 28 12:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e6c737d6e64ddcfcaeacc42e3987910ee7725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:44:5c:23:db:58:ff:d1:6e:55:e8:1e:e0:
6c:18:40:f0:f4:88:2a:b5:8f:6b:37:b7:b8:77:0c:
c0:dd:4b:7f:2d:48:8a:5c:4c:44:4d:2d:ee:73:63:
d6:64:45:05:d4:25:75:09:ad:4d:08:41:3a:16:e4:
65:98:e1:ce:11:71:96:de:73:8e:10:34:9a:88:b9:
1c:ce:ed:f6:d0:d3:94:dd:5b:bf:fb:6a:86:8b:a8:
71:e4:4c:4b:10:60:d3:6f:44:f4:f1:a4:50:6e:a1:
00:9f:fe:c1:6c:20:f2:06:e2:b0:9e:4a:98:e7:07:
73:fc:ee:e8:07:e0:e6:00:0d:39:50:53:08:ac:df:
0a:7b:1a:e8:df:35:5b:65:ef:d2:5b:f2:37:c8:b4:
fb:83:34:0b:85:ab:bc:cd:da:4b:7d:9c:20:52:a1:
db:72:8f:fb:36:62:2b:59:d9:c6:48:bd:73:3c:de:
f9:6f:a4:06:40:db:00:df:9a:2a:bb:7f:3a:e4:69:
e0:bd:0e:6d:f6:7b:fc:66:06:6d:22:48:b2:27:eb:
e3:fa:e6:e0:f2:7b:a4:fa:87:2b:57:34:2c:61:c1:
bd:e0:23:15:cf:ea:d9:e3:9d:f9:3e:b2:67:d3:57:
f8:d7:a5:93:7e:bb:2e:40:45:1f:ba:55:f1:9e:12:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:C7:37:D6:E6:4D:DC:FC:AE:AC:C4:2E:39:87:91:0E:E7:72:5E
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Z-bHN9bmTdz8rqzELjmHkQ7ncl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.110.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ff:20:3e:e1:47:8b:17:7e:f6:15:2e:7b:3c:5f:dd:52:6c:
3b:77:72:1d:b5:25:ad:70:ee:f9:93:bd:49:6b:a9:15:1f:37:
aa:ad:a1:95:90:dd:89:0c:df:77:4b:f4:ef:73:bd:44:f6:88:
ee:77:70:53:83:aa:93:c0:7c:25:e2:9f:a8:b9:84:53:d6:00:
b6:d6:13:ab:dd:07:ca:80:a8:4a:74:7f:39:da:75:74:80:4d:
8a:c5:1e:90:5f:42:0b:73:33:04:d6:e1:57:ee:bf:d5:bf:71:
68:d8:01:20:9e:10:3b:46:11:38:92:35:ec:fd:c6:a0:3c:99:
ea:d5:6e:bb:80:2e:54:4d:67:2f:51:da:e3:67:f7:84:f8:2b:
55:d0:de:ea:d0:d3:83:70:34:89:d8:34:65:16:dd:cb:6d:f6:
a0:f0:d8:ac:46:a3:af:35:17:ec:7c:ca:15:db:45:68:8b:ca:
ad:31:99:e4:e8:46:f7:09:f4:e7:9c:77:47:be:ea:ba:30:df:
56:36:b1:04:ef:2b:c2:69:dc:9a:3c:52:ef:6a:21:7e:dd:9b:
0a:f2:f9:d1:44:5c:c9:97:36:d7:b3:61:37:63:29:99:4e:ea:
7d:0d:a2:80:5a:36:1a:37:2a:81:ff:21:d5:a9:e6:fd:4f:4e:
f4:df:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 15:22:51 2024 by rpki-client on console-ams.rpki-client.org