Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/hDrPnBa1sU_a06W_ssxBFEuAFKY.roa
File: hDrPnBa1sU_a06W_ssxBFEuAFKY.roa (raw, json)
Hash identifier: HbwHyMwrtAGN9Fgscmb8c9vFRU1OfbOfF9HISygNEKI=
Subject key identifier: 84:3A:CF:9C:16:B5:B1:4F:DA:D3:A5:BF:B2:CC:41:14:4B:80:14:A6
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA99378EC25D66DEC73F4B1E0C006F3D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/hDrPnBa1sU_a06W_ssxBFEuAFKY.roa
Signing time: Tue 02 Jan 2024 14:34:48 +0000
ROA not before: Tue 02 Jan 2024 14:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200370
IP address blocks: 87.107.0.0/21 maxlen: 24
87.107.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:37:8e:c2:5d:66:de:c7:3f:4b:1e:0c:00:6f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=843acf9c16b5b14fdad3a5bfb2cc41144b8014a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:95:52:f2:59:a5:7f:61:fd:c1:7a:49:cb:
b4:c1:43:dc:3b:cc:da:ff:88:6a:6e:ca:03:23:d5:
4a:cb:2b:7e:d8:d9:a1:80:0c:68:73:a1:a3:c0:b7:
9d:3e:ec:5f:c0:fe:17:f0:6b:0d:3f:d0:32:02:59:
f1:7d:de:0e:77:51:ab:d5:cf:69:af:55:37:35:f2:
4a:9e:c4:1e:05:6a:5b:3c:f9:12:7b:67:d0:dd:22:
23:c0:78:8d:52:bd:3b:da:01:7e:7a:d1:88:97:7c:
56:4d:14:44:fa:69:ce:42:03:14:84:8f:a2:81:99:
03:78:84:51:f8:40:77:98:14:29:b1:d9:81:df:b7:
db:1b:0f:28:8e:4a:ad:8e:84:5d:e4:58:be:c1:b9:
da:6f:99:a9:75:d1:c1:44:9b:30:3a:eb:26:fe:b5:
5a:ff:76:5c:cf:61:4e:42:4c:b7:da:61:a1:14:3c:
24:29:e3:24:fc:37:fd:31:1b:6a:2b:9b:f1:6e:33:
c1:97:d9:02:0a:ec:8e:b8:75:a4:0b:79:74:71:1e:
a1:81:a8:0e:fe:71:ff:54:fc:1f:b7:66:e9:bf:8f:
ea:6d:33:b3:63:8b:60:4d:76:c7:f0:4b:0f:df:7e:
16:00:19:49:cb:6b:75:93:10:91:94:0d:41:dd:48:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:CF:9C:16:B5:B1:4F:DA:D3:A5:BF:B2:CC:41:14:4B:80:14:A6
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/hDrPnBa1sU_a06W_ssxBFEuAFKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:e0:8d:93:c1:ab:8e:83:9a:fe:b1:d8:6a:13:4e:24:ca:a7:
2b:bd:ef:b7:71:90:d7:3d:90:eb:cb:cf:ca:93:90:5b:56:15:
25:4a:b2:9e:da:3c:5b:68:e0:b9:69:16:0c:cb:92:f5:35:c7:
51:c3:3d:a5:5d:0d:5a:ed:7a:43:e5:8f:2f:de:56:55:28:41:
13:c9:6f:af:f8:0e:6f:43:ca:ea:99:3a:2d:0d:52:b2:65:91:
5a:6a:e5:ac:e1:e8:a6:9f:b7:a1:98:39:f5:cb:7f:a1:d1:b2:
30:f1:75:af:9a:cd:e4:ff:dc:dc:f8:82:44:55:4e:98:0b:b3:
fc:4b:aa:3e:e5:5d:e6:7e:55:46:77:fb:1a:4b:9a:db:ff:b7:
ca:17:b8:0e:29:0e:e7:6b:ce:2f:dc:bb:e9:dd:f3:d1:d2:d2:
1c:8e:71:ec:ca:fd:c1:cc:a8:d0:92:8e:e2:5c:fa:84:3d:ff:
d7:03:4c:88:8c:9f:aa:a8:de:7e:02:01:89:5c:b1:87:04:7c:
4c:6d:a8:b0:f9:10:41:85:8b:10:cb:04:0e:ee:bc:7c:d2:df:
85:eb:ec:7a:a9:47:e0:54:e4:a5:d1:99:81:3a:c7:48:6d:c9:
56:57:2f:e6:93:6f:ba:8a:f8:c2:00:72:e1:c1:bc:41:cf:63:
cd:69:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 14:24:01 2024 by rpki-client on console-ams.rpki-client.org