Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gbX6TbM85QDjaPlfD8XU9EDCSA8.roa
File: gbX6TbM85QDjaPlfD8XU9EDCSA8.roa (raw, json)
Hash identifier: DiRcNFIPvV9nqTectA1acQfftvWtY8Qv5F6T6GsghgI=
Subject key identifier: 81:B5:FA:4D:B3:3C:E5:00:E3:68:F9:5F:0F:C5:D4:F4:40:C2:48:0F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018E5229591750AF4938CCCAD8612BA7F62E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gbX6TbM85QDjaPlfD8XU9EDCSA8.roa
Signing time: Mon 18 Mar 2024 15:23:45 +0000
ROA not before: Mon 18 Mar 2024 15:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200370
IP address blocks: 87.107.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:29:59:17:50:af:49:38:cc:ca:d8:61:2b:a7:f6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Mar 18 15:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81b5fa4db33ce500e368f95f0fc5d4f440c2480f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:8b:7a:1b:1f:bb:c0:10:6a:d6:36:bf:98:
d6:55:04:2a:32:52:43:0a:3d:82:bc:06:cc:45:a6:
e3:01:0a:7d:4f:ab:7f:0e:44:57:67:c8:90:19:f6:
8c:69:7e:ec:24:90:87:6f:53:14:e8:65:55:5c:6a:
3f:ba:5c:1b:c0:18:29:3f:52:f9:ae:69:88:a7:ea:
8e:3d:b9:7a:6a:0b:f7:af:bc:d9:ff:00:6f:c2:45:
5c:7c:03:03:50:f8:10:d1:e2:a8:cb:4e:80:a2:3a:
66:a8:49:e9:76:3f:e2:cc:94:2b:ec:39:1b:63:3b:
43:84:a3:07:ad:fc:3b:bb:50:dc:5b:e4:4c:84:3f:
6c:71:2b:6a:b7:59:3b:e5:ce:68:36:59:57:7c:a7:
80:62:e5:d7:33:2c:02:59:41:cd:be:e0:d8:b0:15:
52:e2:ac:e1:c0:46:45:4e:17:6b:1f:a7:ce:93:af:
98:90:85:6f:c0:a1:b8:45:58:4a:b0:fc:c8:53:59:
25:94:00:78:1e:ca:9b:9c:c4:ea:05:55:72:32:27:
7a:5c:14:f5:aa:04:0c:f7:08:08:64:15:f2:a7:12:
30:3b:a2:9e:1d:82:53:6d:64:4d:ff:74:87:3d:5c:
18:f3:ad:a4:96:f3:7a:9b:f3:df:3c:8f:3f:9f:e1:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:FA:4D:B3:3C:E5:00:E3:68:F9:5F:0F:C5:D4:F4:40:C2:48:0F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gbX6TbM85QDjaPlfD8XU9EDCSA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.0.0/21
Signature Algorithm: sha256WithRSAEncryption
33:0a:e5:98:c7:97:7c:67:33:07:fd:7f:8a:3c:ad:c6:04:33:
28:5e:e9:7e:a7:fb:f7:c8:1c:79:f9:a2:39:19:35:be:2c:4b:
1a:24:81:ab:74:28:40:1e:b5:5d:bc:49:fc:99:b0:c4:e7:e5:
1c:1a:e4:3a:14:94:07:8c:02:bf:66:a7:8a:0a:12:d9:27:2f:
d6:9e:7b:bb:2c:0e:0a:8e:3e:f1:41:ab:37:a7:22:44:1d:50:
ee:06:d1:2d:36:9c:20:3b:5c:c9:c6:7f:49:95:27:ce:23:6a:
f8:b7:ce:c0:95:4d:1c:a1:02:d1:a5:be:ec:fe:96:40:14:dc:
61:dd:da:fc:10:5c:2f:eb:50:db:cb:bf:b0:bd:97:6e:1b:b8:
a6:2b:13:75:c0:26:5f:78:89:ac:78:96:3e:44:71:b8:04:9d:
7b:2d:ff:05:a5:58:8d:a7:f0:51:e5:84:ec:e0:d8:49:21:58:
7c:9d:58:fe:55:6f:29:e4:c8:8c:ab:58:44:9f:2f:c8:dc:a5:
72:19:4b:db:27:79:c1:f4:58:5d:0e:d0:19:93:1e:03:84:27:
4c:7b:50:01:a7:b5:31:6a:7a:23:9e:90:1d:dd:48:56:bf:a2:
d0:56:d0:50:c4:02:01:90:d3:78:1f:f7:c7:62:35:40:f8:20:
a4:37:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 11:49:20 2024 by rpki-client on console-fra.rpki-client.org