Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gUe-hP9T4IRCF0YfUlKg2wkr1t0.roa
File: gUe-hP9T4IRCF0YfUlKg2wkr1t0.roa (raw, json)
Hash identifier: uDZnM2SM5p3DmNiDS6j7rjct8ISWU4ZBzVToqGiaEgg=
Subject key identifier: 81:47:BE:84:FF:53:E0:84:42:17:46:1F:52:52:A0:DB:09:2B:D6:DD
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0186EA5161073F2DBA98BE748EF7707818FD
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gUe-hP9T4IRCF0YfUlKg2wkr1t0.roa
Signing time: Thu 16 Mar 2023 12:07:27 +0000
ROA not before: Thu 16 Mar 2023 12:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204544
IP address blocks: 87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
87.107.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:51:61:07:3f:2d:ba:98:be:74:8e:f7:70:78:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Mar 16 12:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8147be84ff53e0844217461f5252a0db092bd6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:ca:8d:ae:c3:af:7b:06:7b:0a:28:af:2a:
03:01:e1:bb:21:b7:5b:92:e1:6c:9e:0d:84:c4:e0:
f4:f4:a3:98:34:e8:a8:42:1b:c7:f5:7c:57:fc:26:
a6:2c:3c:a5:a7:a3:d7:e3:93:91:f9:1c:71:05:f8:
e9:5b:f0:a8:ec:60:13:f6:94:ef:94:0e:a1:6b:ac:
ab:6f:9e:e8:57:ee:50:fd:9e:65:a7:f6:60:77:b8:
a1:6f:01:b6:6a:21:0c:68:4c:0e:a9:3b:57:a8:75:
8c:b1:4e:dd:9a:7a:a5:96:ac:c0:51:08:1f:e6:07:
72:e3:df:c3:26:25:be:91:7f:a5:8c:84:c7:3b:16:
9a:0d:13:aa:71:33:e3:bf:01:28:2f:aa:1a:42:45:
ba:46:d3:52:74:a5:4a:75:8e:6a:ed:6b:f3:39:05:
63:29:d1:46:07:58:2b:e9:26:60:31:f4:6f:fb:c7:
6e:0e:26:df:88:3b:00:91:34:82:17:ac:84:68:c5:
c8:ec:f8:a2:58:5e:dc:89:3c:f1:e9:b5:3a:97:03:
8a:6a:51:cd:c9:07:6c:e0:29:b2:aa:8e:b3:d1:39:
eb:cf:3c:7f:8f:d7:f1:24:51:87:1b:26:02:6e:2a:
a5:d8:4d:3f:e4:00:c4:b0:9c:0d:6a:c5:bf:01:38:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:BE:84:FF:53:E0:84:42:17:46:1F:52:52:A0:DB:09:2B:D6:DD
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gUe-hP9T4IRCF0YfUlKg2wkr1t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.30.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:9b:a7:a7:98:5f:c9:82:88:8f:2e:a4:98:02:05:be:40:69:
6c:93:64:07:27:2e:0a:95:33:30:a2:9e:68:d5:04:13:74:20:
01:1a:56:2e:82:e7:2a:90:8d:40:50:c1:3b:45:e4:da:83:05:
1f:06:23:81:23:99:a4:13:9c:04:86:25:06:22:fc:51:85:1a:
c8:b1:9f:cb:20:a3:0f:2a:17:50:55:01:7d:4b:91:4d:4b:73:
7d:4d:12:df:dd:d9:67:ce:98:a5:b1:9e:10:1f:8c:7d:95:0a:
67:89:16:04:2e:c0:0f:05:43:22:39:65:af:f1:97:dc:df:e6:
d4:f9:56:45:6a:39:9c:db:cc:c9:96:1c:a9:2d:8f:99:d9:a3:
b3:2c:a0:31:c6:43:e6:1c:a1:28:4a:8b:5a:a9:a0:e2:a3:be:
0b:ce:1a:46:bf:d7:24:c9:96:da:e0:e6:16:fd:6b:66:bb:3e:
cd:ee:b3:5e:d6:6b:0b:dc:38:4b:07:03:0b:85:50:d1:20:64:
49:74:79:ce:bf:ea:11:fc:4c:3e:e6:4e:df:fe:b8:40:7c:62:
e2:6e:90:ce:af:fb:f1:2b:27:b6:c2:3e:9e:97:d2:31:ab:d1:
ec:b9:c9:cc:d3:a4:11:58:56:87:d9:13:48:35:cd:74:8b:28:
1b:04:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org