Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/e9IrUpSoDysGyaKXZaEcpBTPPzs.roa
File: e9IrUpSoDysGyaKXZaEcpBTPPzs.roa (raw, json)
Hash identifier: kLPasG3TcxdtNOife1ybt6PxfreYGO63pxk5jUxOG7o=
Subject key identifier: 7B:D2:2B:52:94:A8:0F:2B:06:C9:A2:97:65:A1:1C:A4:14:CF:3F:3B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA9933BC735D2C4F45B6F90060D89A28
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/e9IrUpSoDysGyaKXZaEcpBTPPzs.roa
Signing time: Tue 02 Jan 2024 14:34:47 +0000
ROA not before: Tue 02 Jan 2024 14:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 87.107.172.0/24 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 09:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:33:bc:73:5d:2c:4f:45:b6:f9:00:60:d8:9a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bd22b5294a80f2b06c9a29765a11ca414cf3f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:52:c7:3d:97:bf:ff:51:d1:86:af:e3:11:
68:56:76:44:d4:96:73:e3:11:18:b5:19:54:e0:ee:
ad:3c:be:1a:b2:18:6b:1a:cd:fd:aa:a2:cc:01:dd:
2e:f4:f3:81:8b:75:4e:96:fc:18:f5:a8:98:1e:7e:
85:14:7a:50:ff:75:68:e9:0c:da:48:99:9d:92:eb:
42:0d:82:a5:7d:24:cd:9f:e5:c6:0a:12:1b:fa:ba:
db:f7:71:3f:9e:57:f2:82:33:12:8c:47:4f:98:b7:
9d:ef:69:73:27:55:35:c4:cb:66:60:8d:76:ae:c7:
25:0c:0b:7c:03:cd:68:ba:cd:fd:97:ad:bc:2c:6c:
fd:d1:20:b0:20:53:d3:19:b1:94:52:c9:eb:22:26:
c2:9c:6b:d3:10:fb:6c:28:6a:b4:e4:c8:a9:da:3c:
10:58:38:84:73:18:79:e0:e2:4c:f6:c7:50:d7:9e:
fc:d7:ad:c6:ca:28:11:c1:09:b9:f9:11:cc:83:69:
7b:53:da:ca:b9:71:83:08:f9:ad:78:e2:cb:e1:41:
58:95:b6:5a:3b:14:c1:d7:28:6a:1c:9e:e5:12:9f:
7b:02:04:2a:45:74:82:9e:67:7e:be:9a:4b:a7:2e:
ee:ab:7b:dc:4c:11:05:90:30:82:35:f2:56:dd:37:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:2B:52:94:A8:0F:2B:06:C9:A2:97:65:A1:1C:A4:14:CF:3F:3B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/e9IrUpSoDysGyaKXZaEcpBTPPzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.102.0/24
87.107.172.0/24
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:05:10:3d:ee:71:0b:04:80:03:ef:28:67:7a:cf:0a:8f:f1:
d5:91:d2:7f:2c:dd:48:29:dc:b2:73:2f:6e:26:be:fb:5c:2c:
c3:7f:8e:21:81:fe:fc:8d:16:a3:83:21:3e:79:a0:42:4b:c1:
a6:2c:75:3a:68:b4:1b:fe:9e:4e:e1:af:ee:9a:a4:0c:b4:39:
97:03:55:cf:1c:21:46:91:33:1f:15:13:1d:41:35:63:c4:25:
b3:d1:aa:bc:77:fa:5d:a8:31:94:69:01:a7:d1:e6:a8:39:5d:
9c:b0:76:e0:f0:3b:cd:8a:60:a1:ad:0b:98:f1:89:ff:e1:dd:
dd:ee:e1:6a:67:b7:bf:62:08:f5:43:c0:b6:bf:e8:70:64:16:
f1:76:90:f0:23:3f:14:55:56:5f:7e:70:8d:a8:ae:f4:0b:28:
97:9f:09:c7:11:b5:72:02:7b:1d:dc:ba:b3:d0:4f:10:93:6b:
f8:26:8a:7e:9d:5c:49:3a:c5:30:68:26:93:9c:e9:78:e2:55:
8e:d5:49:ae:d2:d3:92:55:e2:75:3c:1b:e7:6f:f5:5a:48:3d:
4d:48:a3:cc:d6:eb:6e:aa:ad:7a:b3:bd:af:57:44:67:76:e2:
89:56:37:8d:38:b0:c5:98:53:ef:79:3e:19:78:85:74:7e:fb:
7d:aa:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 14:54:00 2024 by rpki-client on console-fra.rpki-client.org