Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ljCb7kzfzv3eBGddZJoXSP44lIQ.roa
File: ljCb7kzfzv3eBGddZJoXSP44lIQ.roa (raw, json)
Hash identifier: 90zzNKWtMSsXAgcqe+OwlEV0c6dOvn9TvQ+7uIekUxE=
Subject key identifier: 96:30:9B:EE:4C:DF:CE:FD:DE:04:67:5D:64:9A:17:48:FE:38:94:84
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DC1CA65A94479622095E7E937AFAD
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ljCb7kzfzv3eBGddZJoXSP44lIQ.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/23 maxlen: 24
87.107.154.0/23 maxlen: 24
87.107.164.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c1:ca:65:a9:44:79:62:20:95:e7:e9:37:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96309bee4cdfcefdde04675d649a1748fe389484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:f5:77:17:56:1a:ae:9c:04:90:9f:cd:91:
71:a5:65:2f:a7:89:eb:88:9a:9f:95:c1:3e:2b:84:
42:01:9b:93:91:df:f2:7f:f0:71:7d:aa:ca:82:0e:
16:7f:c7:eb:5f:36:ea:d5:cc:c6:45:c0:72:b1:ee:
63:6d:56:03:d9:01:b4:72:90:7c:e5:6a:fb:5f:7b:
98:b9:5f:9b:0c:e6:f6:9e:63:a8:30:4c:34:59:45:
8a:53:ba:ff:09:66:95:6b:8b:9e:a5:e2:bb:17:3a:
86:07:61:6c:fd:b9:05:90:b7:41:bc:2b:6d:07:d1:
0a:81:00:40:1f:0a:df:da:d1:fd:c8:ea:17:f1:1a:
2f:22:27:be:1b:b7:88:f8:00:d2:6c:15:9a:10:3d:
97:7d:23:90:1f:e3:27:f7:1a:bb:d8:67:e6:8a:55:
40:8b:62:bf:67:fc:ab:82:3e:18:95:48:34:7d:dd:
f3:7d:f3:eb:56:8a:50:bc:fd:bd:a3:f2:3a:5a:47:
af:2a:64:1f:bc:2b:12:f5:94:f5:3b:bc:06:4b:92:
dd:12:9e:15:9b:1c:3c:1f:2d:48:81:8e:9c:f5:62:
f8:89:18:0f:bc:d6:b5:90:04:96:6a:44:2f:db:e6:
53:20:f2:60:ce:93:79:e0:ee:2b:d9:09:bb:28:42:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:30:9B:EE:4C:DF:CE:FD:DE:04:67:5D:64:9A:17:48:FE:38:94:84
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ljCb7kzfzv3eBGddZJoXSP44lIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:24:8c:0b:1f:20:6c:29:76:8a:da:39:35:df:81:5f:58:1a:
84:05:62:fb:f4:01:b0:60:e8:4a:b4:38:91:2d:ba:bb:59:d0:
20:5f:50:c2:f9:50:f1:ed:cd:7d:65:67:2f:54:d4:db:6d:cf:
fd:73:be:9e:9b:5d:bd:d0:00:38:37:b1:8f:e8:44:3d:2d:b4:
e9:8a:ba:37:14:31:00:a5:b1:f4:b1:ed:2a:f4:a7:fe:b2:c2:
7d:ee:cc:6f:fb:8d:ad:bd:37:19:bf:83:1e:08:e6:15:74:a9:
56:76:94:27:6c:ba:1e:53:a5:01:c1:6a:23:0f:9c:73:1d:2f:
99:eb:c2:9c:89:18:20:91:1c:48:ca:61:89:03:de:03:3a:f2:
b4:b1:d6:8b:72:d9:1e:77:f9:c6:f1:3b:fa:38:14:eb:64:c3:
25:26:59:4f:ff:ca:bc:ff:4a:bc:a8:3b:2e:76:02:c7:88:d9:
db:76:20:7e:34:a5:f7:02:b8:ff:76:e3:f2:1b:85:5d:cc:2a:
4a:dd:57:f2:f2:0b:3b:6e:e0:56:a4:8b:12:48:1c:8e:ff:1e:
62:94:e0:ce:a3:a0:81:6b:2b:41:08:fa:c9:9a:bc:0a:c1:06:
2d:69:de:5f:55:84:7c:fb:23:c2:2f:10:8c:3f:f8:86:e6:c4:
5b:c3:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org