Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_6eeIB2OB0yO6D5eSE2nah5CsMc.roa
File: _6eeIB2OB0yO6D5eSE2nah5CsMc.roa (raw, json)
Hash identifier: AnjVwVdvVpGFWV8pHLti9RAm9mkS9b9LnJIzud2Nmk4=
Subject key identifier: FF:A7:9E:20:1D:8E:07:4C:8E:E8:3E:5E:48:4D:A7:6A:1E:42:B0:C7
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993D4D6FB59A1ADDE9EC80134B0F6F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_6eeIB2OB0yO6D5eSE2nah5CsMc.roa
Signing time: Tue 02 Jan 2024 14:34:49 +0000
ROA not before: Tue 02 Jan 2024 14:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212063
IP address blocks: 87.107.172.0/24 maxlen: 24
87.107.189.0/24 maxlen: 24
87.107.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 09:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3d:4d:6f:b5:9a:1a:dd:e9:ec:80:13:4b:0f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffa79e201d8e074c8ee83e5e484da76a1e42b0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:35:c3:7d:13:78:7d:2b:97:b5:02:70:b0:
f6:81:f9:97:df:51:e9:88:d9:fe:a0:92:42:1e:f2:
af:b8:4a:19:84:bc:8b:ae:b1:ac:7e:3b:f7:a2:ef:
62:2d:8e:38:6e:15:b8:49:67:ca:ec:49:ab:84:72:
99:97:6a:19:6b:59:83:b5:4f:7f:33:73:3e:1c:7b:
95:68:81:8e:9d:e0:2c:40:dd:2f:1b:2e:0f:97:7e:
71:8e:27:9c:5d:f6:b1:9e:e7:73:08:b3:a4:57:71:
23:cf:17:7b:8b:df:94:c6:75:1d:cf:70:49:70:4f:
d1:49:e4:3a:8b:ce:42:bb:25:ba:29:30:1e:96:cd:
6a:69:8c:e5:e3:86:70:18:7c:9a:92:ce:7d:b6:31:
03:99:5e:5b:e2:2b:a4:65:dd:53:e3:02:fe:cf:33:
24:b6:e9:02:8f:e3:98:67:de:37:46:42:37:1d:d8:
65:d9:7e:6c:41:e1:d5:c7:9e:db:8e:b8:58:3d:6a:
d0:5c:13:eb:5e:da:8a:0f:13:63:07:cb:c2:da:c0:
a9:bd:19:41:0c:9a:70:4f:33:75:7d:26:b6:78:cf:
60:9d:24:79:9e:83:3f:9a:ae:83:57:10:49:b8:b5:
e4:05:26:ae:bc:da:1f:2d:ea:8b:cd:05:df:58:0b:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:9E:20:1D:8E:07:4C:8E:E8:3E:5E:48:4D:A7:6A:1E:42:B0:C7
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_6eeIB2OB0yO6D5eSE2nah5CsMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.172.0/24
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
57:84:e2:ff:f7:26:9e:11:3a:c2:07:1c:91:a5:91:84:74:61:
e2:89:7c:5b:d5:05:84:10:8f:5d:86:3e:d9:e5:02:1d:c5:ba:
6d:52:94:b9:95:6e:4b:25:f2:9c:3f:92:98:ac:b1:af:6d:f6:
ed:aa:5c:4f:26:2b:cd:ae:5b:1d:dc:97:e4:d4:fc:89:2c:4c:
27:23:fe:be:56:f7:e6:00:28:e2:01:14:29:41:b6:b1:2f:75:
fe:e8:fd:7a:1b:7d:e2:8d:55:f9:02:47:99:bc:91:23:2c:e8:
87:77:af:fb:df:89:6d:af:d1:91:83:a3:7e:05:a9:43:3e:81:
6f:83:b1:45:78:ab:f2:08:79:ad:8b:4c:18:79:c1:eb:96:00:
e1:c5:d4:56:87:54:17:b8:7f:a8:4b:a6:bb:19:43:6f:d2:ff:
60:ea:2d:77:5c:04:28:d8:d4:0a:05:fa:45:50:38:49:9e:bd:
7c:d3:60:dd:bb:94:d2:35:b7:00:46:bf:93:fc:28:91:91:f4:
c2:c7:6d:6c:68:92:4a:54:0c:4c:d2:25:b8:1d:26:97:7f:da:
01:d8:6a:91:27:4e:b5:15:31:7b:7f:a3:1f:ee:fb:45:27:b0:
4b:aa:00:e1:a3:ef:d2:f5:e0:1f:7f:ac:25:77:01:db:a9:a7:
d6:fc:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 14:54:00 2024 by rpki-client on console-fra.rpki-client.org