Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bl6cjtatcGeFoGgXEKG02ZWGGVg.roa
File: bl6cjtatcGeFoGgXEKG02ZWGGVg.roa (raw, json)
Hash identifier: KmI9X+dkr4QOASFIuJclWB1b/GRw0dMiDCMP7SMgbZs=
Subject key identifier: 6E:5E:9C:8E:D6:AD:70:67:85:A0:68:17:10:A1:B4:D9:95:86:19:58
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01882FE93B3A3779A3D82BFC626C8A452F00
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bl6cjtatcGeFoGgXEKG02ZWGGVg.roa
Signing time: Thu 18 May 2023 17:29:54 +0000
ROA not before: Thu 18 May 2023 17:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6736
IP address blocks: 81.12.12.0/24 maxlen: 24
87.107.117.0/24 maxlen: 24
87.107.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:e9:3b:3a:37:79:a3:d8:2b:fc:62:6c:8a:45:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 18 17:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e5e9c8ed6ad706785a0681710a1b4d995861958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:ce:d0:a5:52:26:79:93:4c:08:4c:e8:31:
1d:6b:da:a5:c0:76:c7:d2:29:cf:0d:99:d1:3f:c0:
9c:82:3a:43:8b:cc:96:5d:1c:bd:33:a3:1a:e8:ef:
c2:d3:fe:3d:4c:a3:71:8c:23:cd:df:a1:62:e7:29:
b9:92:99:d5:78:ba:7c:d9:ef:77:3f:fc:05:20:54:
07:ef:b1:10:3f:14:69:00:c6:c1:7e:91:0b:ab:32:
db:22:fb:a4:50:c9:bb:09:24:a0:fe:e6:92:29:29:
40:4b:06:ee:59:e1:3a:45:e9:d5:cd:60:9c:0a:a7:
89:6a:8b:30:64:3f:65:98:78:e4:97:a8:79:a7:45:
9b:97:93:87:e1:90:de:f2:f3:ef:25:f8:63:68:30:
7c:6c:43:06:e0:5b:1d:c5:1d:67:9a:1c:1f:2f:36:
c2:35:30:39:f3:71:d4:10:dd:ec:ae:b0:d3:42:84:
59:94:4c:ab:35:04:d0:57:c9:11:cb:99:1c:9e:5f:
36:f8:45:9a:dd:3d:b2:2c:f7:88:15:ee:28:80:53:
66:74:98:78:63:6c:88:50:22:27:31:fe:47:93:8b:
18:f2:3b:2c:f2:53:59:3f:20:d5:c1:68:db:b3:72:
ab:0a:a5:cb:82:f2:00:8d:ba:e1:0f:c2:42:2b:94:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:9C:8E:D6:AD:70:67:85:A0:68:17:10:A1:B4:D9:95:86:19:58
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bl6cjtatcGeFoGgXEKG02ZWGGVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.12.0/24
87.107.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:1f:26:c0:bd:40:ec:de:d3:3f:57:c5:5c:03:05:46:7a:c4:
ed:f2:f5:a8:37:ff:0b:2a:e2:27:26:02:75:96:c0:80:b0:03:
7e:be:64:e7:9e:1d:6b:54:e9:a6:3e:a3:92:f5:1b:d3:00:f6:
f3:c6:b4:aa:d6:95:82:d2:a4:e5:23:0d:14:aa:4e:c0:71:dc:
7f:55:b4:ce:46:d0:46:06:bf:11:3c:75:dd:fa:a1:cc:7f:d4:
40:4e:ac:b6:07:e6:9c:a4:14:f7:70:47:29:12:d3:7e:6e:de:
65:b5:fa:a1:78:26:45:dc:a1:a4:e9:63:4b:97:5d:54:ee:3d:
e9:fc:0e:a0:4d:15:58:cb:af:1e:40:b4:1e:18:f0:dc:99:5e:
1d:b1:e6:d0:d0:7f:8b:23:2f:e3:e2:e8:d4:d6:1a:dd:4d:da:
ef:6c:2a:02:af:1f:af:88:30:1c:28:3e:08:1c:12:a5:71:a7:
d6:7b:91:2d:d8:d7:7f:ca:5f:7a:b9:36:ce:a1:69:b7:8a:97:
b1:09:e9:50:da:70:80:48:bd:9c:2e:3c:fb:4d:01:61:07:76:
c8:1f:65:ba:f4:9c:bd:ae:03:7b:41:3b:e0:74:b8:60:e1:de:
75:4f:27:a9:8c:f5:0c:0e:f3:84:7a:b5:ab:88:20:29:81:fa:
46:1d:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org