Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sWPRl7-SFsQ04RpwyOVfVLtxozw.roa
File: sWPRl7-SFsQ04RpwyOVfVLtxozw.roa (raw, json)
Hash identifier: ETXJJT9LknqYj19mSK325JRSCIwDJPG4v7AchGRp5WI=
Subject key identifier: B1:63:D1:97:BF:92:16:C4:34:E1:1A:70:C8:E5:5F:54:BB:71:A3:3C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DB7AD20276F9087B740F042742137
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sWPRl7-SFsQ04RpwyOVfVLtxozw.roa
Signing time: Sun 01 Jan 2023 22:04:50 +0000
ROA not before: Sun 01 Jan 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51235
IP address blocks: 81.12.56.0/23 maxlen: 23
87.107.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b7:ad:20:27:6f:90:87:b7:40:f0:42:74:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b163d197bf9216c434e11a70c8e55f54bb71a33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:e7:cf:b8:57:27:57:8c:45:c4:85:46:2c:
97:ca:f9:e6:da:4f:77:b0:26:17:b3:2f:d6:76:76:
5f:68:21:fb:3d:44:a7:48:b7:a7:6a:66:7a:82:05:
7c:a8:63:5c:8e:3f:71:d7:d1:82:f4:43:2a:fc:a3:
ac:bb:3d:46:35:c4:86:08:65:d6:7c:95:9f:8a:ef:
b2:93:25:98:f1:24:ec:7e:3e:73:72:6f:0b:2d:92:
58:96:2d:6f:00:1d:48:5f:72:d3:68:81:36:61:95:
43:df:2f:15:0e:d8:34:57:3b:ad:51:c8:2a:d2:24:
10:b7:32:93:ad:28:af:5b:3d:6c:05:f0:e4:fa:56:
b9:52:0c:ad:2a:b5:81:17:4b:53:a0:41:e6:1a:5a:
d0:2a:7d:60:90:de:c1:c8:e4:c9:a2:28:0b:59:ad:
77:92:3b:3d:41:b8:13:51:1b:b1:31:f3:4e:a2:6b:
b7:0b:91:84:40:bb:7e:99:cd:95:a3:08:98:9a:5a:
9c:06:e6:0f:cc:e2:17:33:47:68:6d:f6:f5:07:01:
28:a2:46:ff:9e:8f:69:b1:14:c5:6a:53:ad:e2:05:
b6:80:0a:80:36:32:14:20:2c:b1:a9:43:77:69:ab:
57:f7:5e:61:d8:c5:b0:9f:f2:9d:3b:35:15:b7:dc:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:D1:97:BF:92:16:C4:34:E1:1A:70:C8:E5:5F:54:BB:71:A3:3C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sWPRl7-SFsQ04RpwyOVfVLtxozw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.56.0/23
87.107.139.0/24
Signature Algorithm: sha256WithRSAEncryption
67:97:6b:30:00:90:40:61:25:0d:62:68:b6:a8:e3:76:49:7c:
a4:3b:8b:e5:4a:4c:18:e6:c3:6f:e3:7a:49:04:cf:b1:d2:be:
e3:46:f8:3b:f4:03:48:9e:51:e7:4b:5e:1b:89:d7:40:8d:a1:
ea:38:3e:16:1b:ba:8d:5e:4e:44:4f:6d:4e:c5:07:9c:d9:85:
6a:a3:13:50:fa:96:e4:60:f8:ea:4d:0f:85:bc:f0:ee:84:f6:
ea:fb:24:d1:49:4a:c4:e5:f3:cd:bc:4f:b0:cd:bc:d2:32:e3:
d8:96:22:a7:5a:f9:f7:21:3f:35:5f:65:28:b8:6a:75:fd:a1:
88:b1:f1:3d:e0:23:2d:c1:54:e8:43:48:25:b6:da:2a:4e:98:
43:28:d8:55:38:02:b5:82:f5:33:b4:2c:fa:00:a4:dc:d5:25:
a9:b6:73:c4:d6:60:7a:66:8d:23:8e:0e:37:b3:da:6f:b6:9f:
cb:30:46:47:fa:73:a5:b1:26:84:0f:5f:cd:a9:bb:76:0c:66:
d6:82:5f:85:14:d0:52:43:85:43:17:da:fa:bd:d9:ee:25:92:
5c:b9:37:ee:5b:39:c4:f5:c8:e0:b5:2a:46:e0:6b:2e:5e:2a:
3d:dc:72:0e:58:59:68:c7:df:d5:50:28:3c:c6:b1:d5:af:60:
5f:0b:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org