Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa
File: mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa (raw, json)
Hash identifier: tFkf7GxiLPLQkQjo3j3j5ZBw+U+eiQMuxpdPlUoNs8o=
Subject key identifier: 98:4C:33:B0:C3:CD:E5:A3:CD:41:94:B1:86:F2:D2:DF:33:EB:56:3A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DBA14F80D2863338FBCE9441B3D3E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59961
IP address blocks: 87.107.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ba:14:f8:0d:28:63:33:8f:bc:e9:44:1b:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=984c33b0c3cde5a3cd4194b186f2d2df33eb563a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:e0:82:88:43:3c:42:76:c9:a3:46:00:ca:
5d:66:04:d8:81:16:2c:ae:50:a7:d5:95:36:ed:d9:
f3:4d:6e:60:3f:fb:eb:1d:04:fc:6f:13:1c:78:4b:
35:5b:15:7d:1b:f1:06:9e:f0:ac:6e:c9:a7:86:e6:
06:ad:55:96:0e:35:a7:89:5d:32:f5:52:90:58:0f:
0c:ba:c0:0d:33:05:5e:f5:28:c3:a9:85:68:51:81:
25:5e:c5:02:81:8b:4b:32:98:6d:ed:86:50:32:1e:
61:c4:1e:e3:82:ae:ec:38:9b:0d:a1:32:42:ec:1d:
a3:9f:7a:83:ef:a4:65:2c:86:63:45:39:ea:27:0b:
e5:2e:d9:99:c2:2c:a2:7f:f2:7b:76:57:a7:b6:9e:
dc:cf:d9:29:1d:c1:4f:5c:58:74:5e:a1:90:6d:79:
21:c8:12:6c:94:09:4c:7f:e0:01:ba:9e:86:ee:4e:
6b:1f:8c:21:1c:22:74:9e:f1:4e:d1:1b:e9:79:e2:
b9:0d:c8:53:17:4d:8b:8c:46:e2:70:d5:74:a9:bc:
b4:e1:80:19:17:4a:08:3e:b4:b7:a2:b6:cb:c4:30:
46:40:83:81:da:2f:07:54:9c:0c:a4:5a:c8:c9:1e:
ed:1b:2c:9d:f0:c4:df:c7:72:8e:5d:96:1b:81:b8:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:33:B0:C3:CD:E5:A3:CD:41:94:B1:86:F2:D2:DF:33:EB:56:3A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5d:c8:56:4c:2a:83:55:c4:c2:26:16:7d:14:af:41:9e:df:
94:30:b4:24:ed:5e:0f:9b:34:a4:a8:12:55:bc:ef:ca:40:81:
db:7e:49:1c:23:98:f3:65:75:29:17:f1:95:d9:fa:53:36:94:
af:46:6c:56:9b:d8:78:d9:d8:2a:f6:63:7d:8e:20:c7:7b:86:
be:15:8a:41:ee:69:b7:99:f8:2a:32:25:b9:32:5b:ea:fd:08:
18:93:8c:39:7f:ab:ab:0e:5b:32:d9:71:8a:40:6a:8e:16:b8:
a1:45:1e:e5:83:e4:0c:58:8b:83:ac:4f:f9:78:9c:d6:72:44:
12:f8:54:a5:a8:7c:13:4b:03:44:74:3f:c4:9f:b3:c5:42:c3:
75:3f:65:3e:6f:7c:1e:c6:1d:32:ee:c0:6c:58:0d:c1:72:c2:
c2:24:f3:6a:f6:75:ce:50:fd:a0:fd:3c:a0:78:b5:0d:14:ed:
ef:fb:32:a3:98:1d:cc:c6:2c:51:a8:70:45:fc:7a:09:23:a0:
8a:50:4b:02:7e:ca:83:77:a2:eb:52:7c:80:9d:27:ae:8c:8b:
f2:fb:19:69:95:f7:df:cd:7c:cc:12:23:0b:85:a2:e6:18:27:
6a:79:f4:6b:bd:4f:62:69:be:ae:9b:b7:54:2d:07:e6:6c:10:
b8:11:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org