Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_uQmi5kkYSucZpQsldhJ3QhTEgU.roa
File: _uQmi5kkYSucZpQsldhJ3QhTEgU.roa (raw, json)
Hash identifier: VRhTdhJcKdccUbqo9BKA57L7o8L9FQE44fF0JwV5lzw=
Subject key identifier: FE:E4:26:8B:99:24:61:2B:9C:66:94:2C:95:D8:49:DD:08:53:12:05
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0187F0D1ABE2B00F4DAE9B2C783537AC85B9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_uQmi5kkYSucZpQsldhJ3QhTEgU.roa
Signing time: Sat 06 May 2023 11:28:05 +0000
ROA not before: Sat 06 May 2023 11:28:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12660
IP address blocks: 87.107.156.0/22 maxlen: 24
87.107.184.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:d1:ab:e2:b0:0f:4d:ae:9b:2c:78:35:37:ac:85:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 6 11:28:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee4268b9924612b9c66942c95d849dd08531205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:b2:0f:05:94:c4:f2:ca:9f:51:0f:f6:f5:
22:9d:2e:83:08:02:35:26:ae:9a:61:bc:e1:ac:ba:
e8:1f:e8:52:5b:90:3d:e2:99:96:69:85:b9:2b:64:
62:30:36:79:b8:32:10:eb:63:db:e8:0a:0f:70:7c:
43:08:6c:7e:aa:9a:6f:9a:1d:2f:f0:4c:0c:bc:58:
3c:4d:ee:f8:84:8a:c7:58:9b:d8:68:4b:97:c7:9f:
a3:8d:60:88:b1:57:bc:e5:32:10:9e:92:f1:6e:54:
f9:e3:d5:d3:18:6b:ec:14:d0:dc:05:b2:b7:ca:9f:
d9:93:92:53:1f:e4:8d:a0:39:bc:0f:aa:bb:d7:9c:
d9:f2:1e:19:a7:57:be:9d:e0:bb:d0:ef:cb:66:9a:
1a:cc:ec:53:44:46:0f:ff:7c:1a:48:8f:65:dc:be:
87:04:46:99:57:8c:0b:d1:78:d5:0b:f5:28:39:8f:
2a:aa:e0:bd:ed:a9:bd:3c:96:c5:9b:8f:cf:d5:fb:
c7:2c:27:2d:cf:40:ce:9e:56:f6:6f:69:ad:e1:e8:
95:63:e9:e1:d6:1e:72:a7:3c:d5:37:dc:58:c1:05:
86:a0:76:fa:f7:3f:de:aa:d1:04:e6:75:4d:8c:62:
29:e6:be:7e:b3:4e:56:b6:15:4f:dd:06:9a:8d:ff:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E4:26:8B:99:24:61:2B:9C:66:94:2C:95:D8:49:DD:08:53:12:05
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_uQmi5kkYSucZpQsldhJ3QhTEgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.156.0/22
87.107.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:d1:4c:fb:d4:ee:f9:32:06:d4:0a:50:b1:52:b5:63:57:c4:
3f:b3:b0:70:45:5a:6f:09:38:5c:9a:f1:79:93:2f:98:36:e8:
8d:02:b8:69:f3:ba:d5:90:e4:81:9d:c2:e2:c8:40:34:8b:f5:
49:3d:05:2c:22:68:80:6c:4b:0a:b8:bd:65:b0:75:5a:d8:7e:
74:a8:cf:54:28:22:4d:a8:ee:a2:0a:9a:e5:74:33:04:6a:5b:
50:97:e3:4a:21:20:95:7f:9d:75:37:d2:fa:b6:cf:a7:2b:2b:
13:7f:b8:d6:05:68:eb:65:0a:9c:74:6b:9d:14:48:e7:46:ef:
bf:5f:cd:b1:0d:b6:f8:0c:2c:2a:0d:ba:0e:26:16:3a:5c:da:
5e:2f:fc:e6:c0:38:ee:16:22:54:21:c3:ee:fc:2f:0e:44:c7:
c5:31:01:f1:64:f0:22:7f:e1:34:eb:b5:c8:1e:1d:3a:21:1a:
1d:c6:20:f0:55:1a:9e:5b:52:34:7d:f4:67:df:45:35:a8:e5:
0f:34:53:67:51:a1:eb:bf:d1:99:d1:d7:2a:a2:5b:34:ff:41:
e4:14:62:4c:99:d5:e1:7c:9a:40:f3:c8:28:a7:a5:e7:74:50:
4c:11:43:0d:18:57:cb:dd:94:45:a5:a4:a2:7e:c3:74:b6:af:
5d:a0:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org