Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/djEmQsXazlNqCWjaZRltzM59NaE.roa
File: djEmQsXazlNqCWjaZRltzM59NaE.roa (raw, json)
Hash identifier: p77AtCAybggVs2nD0ndcZ6AFyaOeY4/rfIjIvLg3QUg=
Subject key identifier: 76:31:26:42:C5:DA:CE:53:6A:09:68:DA:65:19:6D:CC:CE:7D:35:A1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01918D7CE0C8381ED6324973AA2A73ACD822
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/djEmQsXazlNqCWjaZRltzM59NaE.roa
Signing time: Mon 26 Aug 2024 07:00:57 +0000
ROA not before: Mon 26 Aug 2024 07:00:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214361
IP address blocks: 87.107.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 26 Aug 2024 08:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:7c:e0:c8:38:1e:d6:32:49:73:aa:2a:73:ac:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 26 07:00:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76312642c5dace536a0968da65196dccce7d35a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:1f:03:5c:6b:73:1c:63:65:16:82:09:19:
a2:29:63:fd:d7:0f:d2:b3:83:6b:bc:32:ec:f4:1c:
90:d8:f7:1b:fc:16:0f:f7:19:14:ad:9c:52:dc:cf:
d5:9e:87:5c:9a:c7:45:d5:e7:f6:da:26:7d:73:70:
0b:4e:0f:45:a9:a8:b5:98:df:3b:65:55:04:4b:db:
33:e9:ad:da:23:e2:e4:11:5b:9c:6f:7c:fc:87:c1:
b2:0c:5c:11:a8:a7:c4:b5:a9:10:b9:ff:71:a7:03:
28:82:8c:af:df:a0:c4:5f:cb:5f:05:ec:62:88:36:
bd:16:21:a9:de:2f:fa:b7:cb:6b:fb:bc:c6:44:82:
2b:5d:62:e9:06:e2:72:99:8d:9e:bf:b8:65:78:90:
6d:a7:96:19:dd:b1:64:1e:1f:e6:06:02:ed:9c:9d:
08:1d:ae:7f:c3:44:0c:4f:1a:7d:df:2a:b2:1b:68:
a4:c4:d3:3b:2d:5b:cf:e6:9c:34:0e:93:60:ce:ac:
df:22:0c:ba:3e:4d:70:e8:14:b6:1d:d2:4b:56:f8:
de:d8:a5:9c:c3:29:c3:50:d0:86:28:84:ef:b9:1a:
ef:9f:5f:cc:97:c2:15:75:bb:5a:4d:95:91:22:eb:
85:76:62:ea:fd:cb:0a:32:0d:16:1c:f1:2c:4e:e1:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:26:42:C5:DA:CE:53:6A:09:68:DA:65:19:6D:CC:CE:7D:35:A1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/djEmQsXazlNqCWjaZRltzM59NaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:24:6d:25:36:9d:d5:c7:18:a0:2b:cf:4b:78:4a:62:f9:69:
b2:04:61:40:75:11:0f:e3:2e:6c:dc:9b:a7:3c:e8:89:58:e1:
a5:a7:e5:8a:55:27:ef:ab:f7:79:67:1f:2f:b5:35:64:44:e3:
d1:1b:0d:ec:4c:95:26:35:ea:73:03:b5:5f:00:c3:cf:6c:7c:
45:43:27:12:af:c1:77:40:80:6a:34:a0:70:fe:cf:8d:f6:65:
b0:62:31:7e:75:6a:fe:06:15:b0:ad:0e:0e:8f:6b:06:40:c3:
12:f7:a4:5b:b4:93:83:20:31:90:c9:d1:63:8a:b9:19:be:e9:
89:eb:52:2d:22:64:77:bb:9d:3b:06:8b:2a:f4:0f:44:50:98:
d4:9a:2f:60:ba:13:d0:79:98:38:88:f7:28:13:a1:2f:22:67:
b4:d6:31:80:19:19:87:3f:6a:d5:86:76:cd:a9:76:ae:a5:5d:
bc:c1:25:6c:33:d8:0a:48:d2:be:9c:d2:ef:56:ea:6f:56:7a:
f8:6b:59:4c:83:35:c4:25:61:e2:3e:5d:fa:a5:bb:59:ec:15:
de:a9:fd:5a:7d:00:1f:3f:56:75:0a:1a:b8:0e:70:26:72:89:
0e:bc:22:6f:aa:51:f8:41:e4:04:11:c3:f7:8a:ca:5f:5d:bc:
9e:6a:15:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGNfODIOB7WMklzqipzrNgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjQwODI2MDcwMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjMxMjY0MmM1ZGFjZTUzNmEwOTY4ZGE2NTE5NmRjY2NlN2QzNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0AfA1xrcxxjZRaCCRmiKWP91w/S
s4NrvDLs9ByQ2Pcb/BYP9xkUrZxS3M/VnodcmsdF1ef22iZ9c3ALTg9Fqai1mN87
ZVUES9sz6a3aI+LkEVucb3z8h8GyDFwRqKfEtakQuf9xpwMogoyv36DEX8tfBexi
iDa9FiGp3i/6t8tr+7zGRIIrXWLpBuJymY2ev7hleJBtp5YZ3bFkHh/mBgLtnJ0I
Ha5/w0QMTxp93yqyG2ikxNM7LVvP5pw0DpNgzqzfIgy6Pk1w6BS2HdJLVvje2KWc
wynDUNCGKITvuRrvn1/Ml8IVdbtaTZWRIuuFdmLq/csKMg0WHPEsTuGv1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYxJkLF2s5Taglo2mUZbczOfTWhMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvZGpFbVFzWGF6bE5xQ1dqYVpSbHR6TTU5TmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV2u4MA0G
CSqGSIb3DQEBCwUAA4IBAQChJG0lNp3VxxigK89LeEpi+WmyBGFAdREP4y5s3Jun
POiJWOGlp+WKVSfvq/d5Zx8vtTVkROPRGw3sTJUmNepzA7VfAMPPbHxFQycSr8F3
QIBqNKBw/s+N9mWwYjF+dWr+BhWwrQ4Oj2sGQMMS96RbtJODIDGQydFjirkZvumJ
61ItImR3u507Bosq9A9EUJjUmi9guhPQeZg4iPcoE6EvIme01jGAGRmHP2rVhnbN
qXaupV28wSVsM9gKSNK+nNLvVupvVnr4a1lMgzXEJWHiPl36pbtZ7BXeqf1afQAf
P1Z1Chq4DnAmcokOvCJvqlH4QeQEEcP3ispfXbyeahW6
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:41:47 2024 by rpki-client on console-fra.rpki-client.org