Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DV57tqXwNLUQDKNjV2qo-ARnTiQ.roa
File: DV57tqXwNLUQDKNjV2qo-ARnTiQ.roa (raw, json)
Hash identifier: I7fTlnhWqzBLwXOICu2VTkLTJxPlSj0zL/tk4qGkTy0=
Subject key identifier: 0D:5E:7B:B6:A5:F0:34:B5:10:0C:A3:63:57:6A:A8:F8:04:67:4E:24
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0189B57C708C39D8CC0547D17C69DD217F84
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DV57tqXwNLUQDKNjV2qo-ARnTiQ.roa
Signing time: Wed 02 Aug 2023 09:02:58 +0000
ROA not before: Wed 02 Aug 2023 09:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 92.119.164.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:7c:70:8c:39:d8:cc:05:47:d1:7c:69:dd:21:7f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 2 09:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d5e7bb6a5f034b5100ca363576aa8f804674e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:1c:0b:fa:bd:27:2a:cd:ed:a5:7b:bb:15:
10:ce:9a:85:20:ea:37:bb:9a:f1:66:3a:18:2b:e1:
39:a5:6d:ef:cd:93:80:fa:cc:fa:f6:5a:21:7c:d4:
cd:00:b1:e6:e7:df:e7:98:db:ad:18:2f:7c:b7:bc:
ba:0b:93:19:c8:da:1f:1f:63:9d:45:2a:e8:96:d6:
8b:b3:3c:2c:33:01:54:71:5e:c5:65:15:d6:45:8a:
27:b6:5e:69:71:f6:4d:95:45:dc:07:0c:99:8f:df:
39:dd:8d:58:3e:aa:c5:07:55:86:4c:3b:e0:b0:e3:
59:f4:ff:af:be:e0:8d:0a:18:bf:d0:4b:f3:44:ba:
6e:20:32:c9:5a:8d:64:93:97:e8:19:29:60:ac:08:
f2:ef:60:99:35:ca:be:29:47:93:a5:fe:6c:66:ac:
28:82:e1:7f:62:98:c3:fc:fa:a7:38:c0:25:a5:83:
fc:ac:30:93:f8:be:c7:cf:e5:be:8c:d7:8e:d6:a1:
6b:11:74:16:93:62:a8:07:74:6b:dc:35:5e:53:99:
65:84:68:6c:16:fd:bb:bc:ee:24:6e:65:19:92:f2:
af:c2:75:99:b0:d4:8c:c8:1a:e8:e4:1a:e7:b2:8b:
27:5b:5b:e4:df:b7:cf:59:e4:b9:54:cf:03:f3:4d:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:7B:B6:A5:F0:34:B5:10:0C:A3:63:57:6A:A8:F8:04:67:4E:24
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DV57tqXwNLUQDKNjV2qo-ARnTiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.32.0/22
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f9:db:e2:c4:fa:5a:1c:df:87:9f:95:0d:c5:6e:a3:45:93:
c8:5d:1a:50:35:60:28:bc:db:8f:f7:b0:f0:e6:90:3e:1f:70:
84:34:ea:b3:de:65:ff:ae:23:97:31:26:1f:24:70:60:5d:3a:
be:d5:29:58:6f:63:d0:80:c9:e4:81:8e:a1:e8:74:b6:21:8b:
7e:ea:5d:7c:4d:32:56:f4:89:51:4a:7b:ec:89:8b:e2:f0:e4:
48:79:09:84:8b:25:84:f5:fa:4c:5b:a5:5a:ed:42:6b:03:74:
e4:0f:40:19:62:e6:ec:05:54:8c:42:db:23:41:42:1b:ab:80:
27:37:f3:24:38:25:78:ba:1a:54:ce:ef:f3:9f:d5:15:92:0c:
97:5d:0d:e3:42:cd:18:87:9c:ca:96:5e:bb:bf:a6:c9:82:85:
82:d6:20:de:d5:35:14:aa:76:34:84:b4:9d:f3:a2:a5:70:a0:
2a:27:3a:56:c4:9b:0f:77:ad:a0:43:69:a7:da:d4:22:03:c1:
62:54:67:8c:62:9e:f5:be:e8:f6:ec:74:d0:34:6b:30:b3:a9:
8c:19:e4:c6:7b:38:99:08:d8:60:76:23:76:08:38:05:e7:0b:
8f:50:c3:1b:a6:af:92:d7:63:aa:04:c1:d3:5f:a2:f5:71:07:
c4:0f:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:13 2024 by rpki-client on console-fra.rpki-client.org