Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/tobg7Bg9oBbUNCKDkFjhgAQoxxA.roa
File: tobg7Bg9oBbUNCKDkFjhgAQoxxA.roa (raw, json)
Hash identifier: B6FcKYxwbnwuEWo1vxzBq8mBEpPQYwVevZMPcXRjkqE=
Subject key identifier: B6:86:E0:EC:18:3D:A0:16:D4:34:22:83:90:58:E1:80:04:28:C7:10
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DC250E2BEF46B3070542FF8D40E7F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/tobg7Bg9oBbUNCKDkFjhgAQoxxA.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208555
IP address blocks: 87.107.152.0/24 maxlen: 24
87.107.153.0/24 maxlen: 24
87.107.166.0/24 maxlen: 24
87.107.167.0/24 maxlen: 24
87.107.174.0/24 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.175.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 08:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c2:50:e2:be:f4:6b:30:70:54:2f:f8:d4:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b686e0ec183da016d43422839058e1800428c710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:3e:ec:38:68:da:15:76:80:c6:a8:25:43:
3b:04:1f:7e:a9:66:6f:cd:0f:bd:7a:b6:90:b6:67:
45:6e:59:86:c6:eb:39:8b:88:37:8a:47:ad:96:a5:
61:97:c5:8e:34:7f:81:3d:96:70:f5:83:1f:e0:e1:
b6:19:6c:8e:ca:f9:3e:8e:1e:30:9d:34:d7:93:cc:
ad:59:4a:57:48:6d:78:24:03:b2:00:8e:38:a2:3e:
23:ef:ac:24:77:16:22:5d:d1:f1:4c:29:11:c2:75:
6a:a2:00:ce:1b:1f:ca:35:fc:9a:18:e6:e4:63:1b:
66:fe:50:10:6f:92:b5:b7:dc:95:68:0e:2c:b7:22:
d8:41:bd:58:6d:f4:e7:67:42:7e:48:d4:26:2e:c5:
e5:5c:61:21:01:25:91:af:5a:78:af:b8:52:2b:09:
d7:3a:32:1b:bd:ab:1e:a5:f0:3f:41:26:7c:13:16:
3e:ee:72:4b:2f:8e:01:d1:17:3a:2a:b0:af:b2:67:
7a:16:cf:e9:32:07:72:3d:27:75:d9:5f:0d:e4:d0:
81:5f:a0:b9:50:a7:71:cb:da:46:5a:6f:8a:ea:69:
d4:83:2b:72:f9:90:bf:95:ee:12:2f:89:91:87:05:
ea:02:49:c6:0a:51:59:59:ce:c5:e3:3b:b2:c6:b1:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:E0:EC:18:3D:A0:16:D4:34:22:83:90:58:E1:80:04:28:C7:10
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/tobg7Bg9oBbUNCKDkFjhgAQoxxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.30.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
79:9a:ed:14:4b:7c:a1:b4:6a:39:44:3f:28:7d:71:36:70:0f:
48:f8:3e:96:0c:8c:26:be:25:2d:ae:2c:87:fb:00:3f:28:68:
10:c4:ef:95:8e:d6:1d:de:b6:9a:78:b9:c0:0e:69:5d:5b:35:
8a:31:ea:ce:1a:a5:6c:c7:38:8f:7c:1c:f1:62:38:3f:65:a6:
c4:a7:25:ee:6e:c6:17:9f:13:c4:c3:c3:00:68:d7:dc:80:a1:
8f:c5:1d:b1:4a:72:0d:55:7c:21:ee:fd:d6:9a:d2:14:ab:04:
cd:26:c9:39:5d:d3:88:db:3b:c8:e8:ce:00:bf:9a:c1:93:8e:
20:c3:1a:e6:1c:da:0b:ff:28:61:4c:c8:7b:7e:ae:c6:d0:03:
db:1d:7d:15:2f:4d:0c:d8:29:cf:85:11:2f:40:db:ba:66:13:
07:81:a1:56:93:7e:ef:89:78:71:d7:6e:2f:92:dd:22:12:b6:
aa:44:a0:0b:66:bb:c6:03:92:be:38:dd:f6:ee:be:0d:e0:66:
8b:c0:54:3f:e3:fa:6b:5f:78:70:e5:71:f0:15:3f:29:2c:f2:
4e:80:3d:81:0e:34:f3:02:32:ff:e7:d7:f1:6f:e5:93:f1:a0:
6b:4b:ac:37:33:49:78:06:f7:bf:30:29:e3:e8:8f:f6:9a:97:
1c:1d:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:59 2024 by rpki-client on console-ams.rpki-client.org