Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEpUR2WkTuF-YCX6nSxY-sT7rNc.roa
File: mEpUR2WkTuF-YCX6nSxY-sT7rNc.roa (raw, json)
Hash identifier: wrMnWnUs1qx2NmLilNCeTQp5ckKkiaDnDvHx7grSLRc=
Subject key identifier: 98:4A:54:47:65:A4:4E:E1:7E:60:25:FA:9D:2C:58:FA:C4:FB:AC:D7
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018D35C27099AFAA6761CBBD0DBCC07FC687
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEpUR2WkTuF-YCX6nSxY-sT7rNc.roa
Signing time: Tue 23 Jan 2024 09:59:11 +0000
ROA not before: Tue 23 Jan 2024 09:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 87.107.102.0/24 maxlen: 24
87.107.172.0/24 maxlen: 24
87.107.188.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Nov 2024 10:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:c2:70:99:af:aa:67:61:cb:bd:0d:bc:c0:7f:c6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 23 09:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984a544765a44ee17e6025fa9d2c58fac4fbacd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:06:27:40:bc:b0:12:58:04:17:08:55:06:
68:9e:c6:2d:74:d4:22:a3:95:0d:fa:c5:19:48:9c:
70:2d:0d:63:11:27:79:14:3d:b2:59:7e:6e:6b:da:
5a:84:60:45:bd:7d:3a:3c:b8:80:c5:cb:29:d4:93:
33:c9:19:18:14:9c:8b:90:e3:86:d3:e6:ed:49:bd:
d7:cd:15:94:72:20:b0:47:55:97:0f:e7:b2:48:04:
10:af:ac:14:3a:3f:21:28:66:5b:7a:07:47:b2:c5:
7b:1d:ef:be:1e:1c:fc:5e:f4:a2:07:d0:72:eb:a2:
2b:90:47:d9:95:12:bb:79:df:04:49:2e:4a:24:7f:
e6:b8:80:ea:ad:18:d9:0f:95:4d:de:0d:4f:90:ad:
3c:32:05:54:15:11:8b:7d:21:a8:60:c1:df:17:39:
72:61:2d:52:83:4d:cf:19:54:e9:ec:9b:94:9c:5f:
c6:6a:b4:9c:9c:47:6a:81:27:4a:b4:c0:d2:0b:22:
8b:74:65:4d:fc:b9:0f:1d:d1:3d:51:7f:0b:95:b3:
22:36:ec:56:7d:38:66:d5:30:f5:99:33:dd:16:7d:
a3:e4:7b:d1:5d:27:f0:8d:9c:ad:c4:6d:3f:1b:11:
d2:8d:3a:4e:39:76:01:3d:dd:31:cd:f8:5b:33:0d:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:54:47:65:A4:4E:E1:7E:60:25:FA:9D:2C:58:FA:C4:FB:AC:D7
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEpUR2WkTuF-YCX6nSxY-sT7rNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.102.0/24
87.107.172.0/24
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:ef:2a:bc:e3:74:05:27:13:4b:4c:16:02:70:53:0a:f1:40:
26:1b:54:b3:59:72:7e:e8:f8:1e:c4:30:b6:01:b4:c1:2a:d8:
9d:b9:20:b2:c6:97:68:7f:c3:c9:6a:f5:fb:b1:09:94:aa:2d:
85:c2:ba:94:5a:13:1f:a7:99:1a:b4:c4:cf:87:77:80:f3:b0:
04:0f:9c:6e:56:76:38:0c:b6:e9:bf:4a:01:de:c2:ec:65:7a:
19:a5:d5:1a:a2:bc:f9:af:ba:1f:24:9d:93:21:c6:3b:5a:fa:
d5:ce:db:3e:f6:65:4c:82:f6:cf:e9:ab:66:18:db:46:18:21:
43:5f:d6:84:e0:22:9f:e2:0d:e6:1e:15:88:46:80:d4:69:7b:
0f:d1:4e:70:3f:c0:45:7c:2a:04:71:20:db:37:da:b7:cc:bf:
35:43:5d:d8:1b:0a:58:13:89:20:97:7e:24:9e:59:b6:cc:7c:
7e:a5:6a:8d:d8:fc:98:c7:e2:d6:46:b4:4b:d7:95:4f:bd:5d:
5e:40:92:9d:5e:35:5c:94:57:25:a4:26:30:a0:b7:71:90:39:
aa:47:e8:bc:1c:dd:6b:c1:4b:d6:87:4b:74:ac:36:3c:9e:dd:
dc:df:ce:e6:db:ce:1a:a6:52:a1:4c:7b:26:ff:44:fc:be:d1:
e9:05:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:11 2024 by rpki-client on console-ams.rpki-client.org