Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uwkwrtFSYkfJRkOyVV4FV2mOIrQ.roa
File: uwkwrtFSYkfJRkOyVV4FV2mOIrQ.roa (raw, json)
Hash identifier: +VZqmGVb5a0ozrgmH0UORiywM2H5gS68jo3RdBQvBZY=
Subject key identifier: BB:09:30:AE:D1:52:62:47:C9:46:43:B2:55:5E:05:57:69:8E:22:B4
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0187E0F1E985739B260C7B965BBF8ED3C028
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uwkwrtFSYkfJRkOyVV4FV2mOIrQ.roa
Signing time: Wed 03 May 2023 09:29:22 +0000
ROA not before: Wed 03 May 2023 09:29:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51431
IP address blocks: 87.107.172.0/24 maxlen: 24
87.107.188.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:f1:e9:85:73:9b:26:0c:7b:96:5b:bf:8e:d3:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 3 09:29:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0930aed1526247c94643b2555e0557698e22b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:01:87:86:00:8a:3b:30:9a:6d:f2:6e:91:
0f:a3:ef:13:75:2b:a6:b2:a2:78:16:43:da:de:56:
49:50:8f:c9:85:e5:30:43:07:cf:26:06:e7:23:b0:
23:8d:e5:3e:89:86:85:0a:7e:18:b8:c3:91:04:56:
c6:43:b4:cc:92:58:74:fe:9e:1b:c6:9b:09:97:1d:
d6:8b:3c:b7:1b:f6:dc:f9:12:dc:e9:63:59:77:97:
8f:a9:72:92:23:8d:b3:a5:bd:ff:ba:b5:99:d5:c9:
21:24:2b:cb:83:90:70:a4:08:91:3f:8b:95:62:a2:
da:86:c9:ee:a8:1a:4f:b1:dc:c0:a8:c8:f5:64:49:
2e:43:f2:6c:7b:1f:9d:08:50:be:5d:3a:21:65:14:
df:a5:c8:37:2c:87:0f:33:3d:26:1f:15:a2:7b:c1:
12:a5:4c:00:84:e3:1d:92:2a:68:f4:60:54:97:65:
5f:1c:23:4a:72:fb:6b:e8:7d:19:d1:15:9a:67:62:
99:b9:d5:97:5c:54:88:70:b6:a4:62:d1:39:13:f2:
9a:00:b0:8a:54:b4:81:97:0c:f5:d9:4b:d8:b8:b0:
81:8e:e6:9c:0b:8b:dd:f8:f3:04:77:46:05:0e:28:
af:cc:05:ef:c4:2d:f7:79:8d:62:bc:83:09:66:8b:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:30:AE:D1:52:62:47:C9:46:43:B2:55:5E:05:57:69:8E:22:B4
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uwkwrtFSYkfJRkOyVV4FV2mOIrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.172.0/24
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
57:6a:41:7b:1c:40:09:09:b6:37:87:53:9c:5e:a7:b1:52:43:
e2:7c:07:d7:a4:03:c7:87:33:1d:8b:b1:f1:c5:3a:87:26:b1:
8a:f4:22:60:aa:67:06:1b:5a:70:67:47:6a:18:d1:dd:1d:3c:
88:9a:94:7c:ce:80:c0:d5:ae:93:b1:d0:f2:ba:57:f4:58:19:
b2:ca:99:cb:a8:57:b0:e4:36:b6:0e:a9:ab:37:08:df:11:ce:
13:62:1c:77:de:2f:f0:7d:f5:fb:ce:ac:5c:bc:4c:5b:00:88:
f2:e6:24:22:84:f4:ca:0a:ff:a6:cb:ae:1e:d4:f6:9a:58:54:
57:02:a9:d1:4f:09:d1:8d:f1:6c:60:e9:85:52:47:44:5c:b2:
ca:d8:5d:43:c2:fa:19:2f:da:af:13:2c:62:ab:35:ec:f3:9a:
52:67:25:e3:7c:d3:00:51:d3:14:b8:f9:ab:78:71:97:39:0c:
fd:c2:fa:c7:3c:44:4c:f2:13:2f:18:b7:98:39:a5:19:82:1d:
99:2c:1e:b8:24:1c:eb:8d:35:26:cd:5d:59:a4:f6:41:28:9c:
ec:a6:09:7f:de:3a:b6:77:c9:cd:00:03:f2:12:4e:ff:b4:c0:
30:95:4e:92:28:fc:40:65:82:d7:ff:02:d9:27:50:cf:3a:92:
e4:a3:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 14 09:36:16 2023 by rpki-client on console-ams.rpki-client.org