Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/cM0j9HvilJaTsn756ofqELdFrT8.roa
File: cM0j9HvilJaTsn756ofqELdFrT8.roa (raw, json)
Hash identifier: yMIiAy8rcLMOhXQEnJHg9xdrSB5pF0fI3efhW2IoAVc=
Subject key identifier: 70:CD:23:F4:7B:E2:94:96:93:B2:7E:F9:EA:87:EA:10:B7:45:AD:3F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DC2B093870F0E9236C78403488F5F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/cM0j9HvilJaTsn756ofqELdFrT8.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209079
IP address blocks: 87.107.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c2:b0:93:87:0f:0e:92:36:c7:84:03:48:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70cd23f47be2949693b27ef9ea87ea10b745ad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:de:7d:b4:95:8d:3f:d5:91:70:e0:b7:f3:
10:df:1e:fa:4b:33:1d:a2:10:b0:1e:a9:47:c4:96:
43:ac:da:86:2b:24:a3:f2:28:9f:e9:79:98:6c:43:
3d:8c:35:fc:0c:2e:fd:0d:b0:5d:f3:aa:c0:97:cf:
54:05:b3:0b:2b:a2:7c:7c:73:83:10:7c:fa:86:77:
50:0f:c6:b3:09:9b:1a:69:27:4e:16:f7:9b:97:a8:
c0:bf:d3:70:83:7b:93:6e:eb:d7:dd:b8:42:ed:5f:
9d:2c:5d:b9:f2:62:12:90:af:48:b4:61:11:16:e7:
41:98:77:8a:fa:14:67:32:b7:65:0c:46:23:d2:6d:
1d:9f:ea:7c:ea:56:31:b2:c4:5e:7a:1b:cd:22:1b:
75:a4:3e:40:e3:0c:6f:e6:ee:27:cf:87:e6:52:39:
c4:0e:5d:59:e6:55:03:f6:3d:39:f2:0e:ee:21:68:
71:8f:a9:10:29:56:83:92:e4:25:59:ed:8e:10:43:
76:b7:7c:b5:e4:09:e0:6d:e7:19:82:dc:d2:01:5f:
7a:a3:9b:1d:9a:7e:e5:30:03:44:f3:29:b6:fb:37:
c5:47:09:ed:3e:4a:70:d6:ab:cd:95:98:82:4b:84:
3c:55:86:9e:84:9b:b2:9d:82:52:d6:42:ec:b9:20:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:23:F4:7B:E2:94:96:93:B2:7E:F9:EA:87:EA:10:B7:45:AD:3F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/cM0j9HvilJaTsn756ofqELdFrT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.20.0/22
Signature Algorithm: sha256WithRSAEncryption
52:f3:5c:c7:27:20:05:df:5e:74:bc:02:0f:28:7d:9d:b9:ec:
1e:17:e7:a4:9d:f4:a6:53:1b:d8:71:1c:92:f8:97:05:27:aa:
9c:df:18:b4:c5:b4:06:1f:da:4a:f8:65:38:24:1e:73:f4:a6:
ab:01:0f:eb:90:cb:5f:a8:c5:85:ec:53:b8:c0:26:88:f6:15:
a6:77:92:1a:06:a0:2d:7b:b8:82:66:12:54:e1:3d:f4:ee:00:
ac:6f:0f:6e:18:ae:f5:ef:43:3b:16:de:fa:ab:bd:78:fe:f5:
e8:9b:2e:4e:16:47:bc:c7:7e:41:f1:d6:9a:42:f9:14:da:6a:
e3:d1:01:91:f3:13:3d:a2:2b:32:8f:32:c6:e2:63:61:b3:31:
71:75:30:67:6f:cd:fb:40:a4:62:3c:c5:6c:e2:2d:c9:3f:07:
5e:5a:a6:3f:8b:15:c3:03:88:91:06:c8:b7:58:48:2b:de:f5:
6d:b1:6c:f7:7c:72:b4:23:3c:6a:75:5d:e4:9a:05:b6:cc:4f:
a2:78:5c:5b:13:c0:dd:d3:d2:b5:2d:98:5e:3d:7d:34:49:68:
7e:bf:a5:bb:fa:64:fd:ce:2a:0f:3e:35:bc:d7:73:c3:af:e0:
ef:35:aa:b4:42:fa:dc:bc:25:cb:c5:c6:50:fe:82:d8:b1:d9:
1a:ff:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org