Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/i9z6Hr-i9R82dC9-TN2WD814FKU.roa
File: i9z6Hr-i9R82dC9-TN2WD814FKU.roa (raw, json)
Hash identifier: onfYjebn/T8+/St55f4UpH+AybzUnSp+p2LrKh5mXHw=
Subject key identifier: 8B:DC:FA:1E:BF:A2:F5:1F:36:74:2F:7E:4C:DD:96:0F:CD:78:14:A5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01882946ED52D756B7E3A5BAED13C2FA9EC7
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/i9z6Hr-i9R82dC9-TN2WD814FKU.roa
Signing time: Wed 17 May 2023 10:34:54 +0000
ROA not before: Wed 17 May 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6736
IP address blocks: 81.12.12.0/24 maxlen: 24
87.107.117.0/24 maxlen: 24
87.107.116.0/24 maxlen: 24
87.107.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:46:ed:52:d7:56:b7:e3:a5:ba:ed:13:c2:fa:9e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 17 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bdcfa1ebfa2f51f36742f7e4cdd960fcd7814a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:a0:09:4e:45:39:6e:e3:50:47:55:b0:f7:
89:b5:8a:a3:5b:bc:e3:48:11:71:ab:dd:23:f3:0e:
57:65:4a:1c:85:ee:e4:db:40:05:44:0b:01:8f:53:
fe:75:79:45:26:b7:d1:28:0c:a1:c7:85:4a:04:3f:
4a:60:d2:5c:86:b5:71:f8:f4:a9:45:ec:27:a4:ee:
7d:b1:b9:46:51:2c:c0:25:44:47:17:b8:1f:5b:d9:
2c:29:8c:cc:65:0c:2e:9f:fe:a8:e1:46:53:35:12:
68:ed:9a:74:0f:05:68:6a:fc:57:2c:8b:11:e6:a2:
00:03:7e:8d:d7:3b:15:4b:5d:11:e7:9e:23:25:76:
ce:ad:d7:4b:a0:48:94:f6:e2:2f:05:ec:f5:81:ea:
eb:6b:f2:79:93:53:4b:9d:62:65:f2:f3:49:56:56:
e3:fa:87:8d:f5:d6:13:ec:3d:94:6a:35:15:c1:bc:
80:d2:ca:00:d8:e4:94:96:ca:1b:e5:2d:1e:41:de:
90:aa:b8:7c:b1:d5:49:bb:86:93:89:24:89:c3:81:
e7:7f:a9:46:ef:12:50:f5:d5:b9:68:f6:ef:6e:56:
ce:b6:2c:98:02:fd:3c:8c:9d:3b:3f:47:5a:3f:8c:
3a:44:69:3d:60:61:30:f5:84:ef:db:67:b8:90:ee:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DC:FA:1E:BF:A2:F5:1F:36:74:2F:7E:4C:DD:96:0F:CD:78:14:A5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/i9z6Hr-i9R82dC9-TN2WD814FKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.12.0/24
87.107.34.0/24
87.107.116.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ee:12:cb:b0:91:15:94:0d:74:3a:93:b6:a2:7f:46:a3:11:
70:97:ee:2a:7f:1b:8a:7e:f8:ce:6a:6e:85:23:bf:51:bb:f3:
c7:f8:ff:7d:c7:d8:a3:8e:0a:1e:3d:32:e4:1a:61:8d:4a:9a:
f3:ef:bf:f1:7e:4a:7a:48:fb:5b:c1:c7:cd:5c:9e:ef:c4:11:
85:54:7d:f5:df:c8:e2:ce:2a:a0:eb:0d:51:cb:d9:0d:0f:12:
c2:46:e6:b1:74:d3:72:a9:78:c9:f3:4c:c5:73:8d:b7:73:43:
89:c9:7e:61:7f:87:ad:47:7b:ea:23:49:1e:6b:39:ea:9f:5c:
32:80:d9:5f:90:70:fd:97:9c:56:69:f8:08:42:74:4a:34:29:
32:a9:ca:18:31:6b:39:fc:5c:5f:54:70:74:d0:83:63:45:9d:
cb:7d:87:02:56:3d:22:20:52:ae:d5:29:73:bb:4c:b9:46:5f:
c9:72:3b:3a:19:bf:92:5b:57:ee:43:38:ce:2d:ca:85:51:a7:
60:cc:d4:86:bc:f6:0d:49:c9:47:7b:af:f1:9c:bc:4e:5e:57:
ee:a9:83:70:30:d5:58:55:9d:f5:69:1d:5a:da:d4:b1:08:11:
88:07:79:5c:eb:3f:50:6c:cc:41:c9:9e:83:ec:62:c0:2a:73:
83:d9:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org