Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-O2dCq-FQznKYsyQeIm8H84wFws.roa
File: 1-O2dCq-FQznKYsyQeIm8H84wFws.roa (raw, json)
Hash identifier: NOlNeEKJ0cza0g8OiOSMeScfCKvF15e48P/MMO5OH4M=
Subject key identifier: F8:ED:9D:0A:AF:85:43:39:CA:62:CC:90:78:89:BC:1F:CE:30:17:0B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC9437F7F91D89A07596A066DD756
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-O2dCq-FQznKYsyQeIm8H84wFws.roa
Signing time: Sun 01 Jan 2023 06:04:49 +0000
ROA not before: Sun 01 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199896
IP address blocks: 77.65.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c9:43:7f:7f:91:d8:9a:07:59:6a:06:6d:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ed9d0aaf854339ca62cc907889bc1fce30170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:09:71:cb:0a:8b:e0:1c:3f:c0:73:f2:25:
0a:cb:4c:d3:24:0d:12:8d:5f:3c:1b:ae:c7:97:39:
bd:6e:73:44:d6:a0:d6:69:70:b8:1b:72:2b:ef:31:
df:81:c2:67:b2:4c:ba:99:a2:09:67:9b:8f:aa:73:
a2:f2:d1:2f:58:f4:9d:aa:0e:25:51:01:6b:fe:56:
22:86:14:db:e6:f0:c9:ad:32:85:a6:f3:64:22:38:
a2:20:c4:8e:06:48:4f:66:8a:7f:c1:f5:d0:56:53:
db:df:01:84:39:76:aa:7d:63:9c:d9:32:33:8a:bd:
05:9a:26:1e:7c:4d:03:a2:81:cf:85:24:0a:5d:f2:
47:19:5a:4a:80:30:44:71:15:c0:e3:b4:ff:94:4f:
28:2c:82:5c:70:fb:45:4a:90:6b:ac:00:81:8f:8d:
4e:b8:cf:52:d7:c6:ab:44:b8:86:1b:70:b5:b5:78:
95:a0:cf:21:bc:4b:e1:af:8c:f1:b6:2b:2f:d6:97:
d6:d4:ca:56:3c:72:2c:8f:a2:0b:0e:12:0e:d0:10:
84:0a:0f:41:7c:a6:15:eb:c2:ef:64:74:00:ed:74:
97:2b:f8:58:25:08:34:e5:25:f1:f7:bf:f8:a5:6d:
bf:49:44:44:52:9d:a3:38:19:3b:4d:70:9d:54:14:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:9D:0A:AF:85:43:39:CA:62:CC:90:78:89:BC:1F:CE:30:17:0B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-O2dCq-FQznKYsyQeIm8H84wFws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:da:53:d0:fb:aa:8d:93:72:6d:85:ec:c5:8a:e7:40:c6:0c:
52:0b:dd:33:7f:5f:d9:e9:45:7b:7b:97:b0:58:df:cf:d7:17:
49:32:94:f1:9f:68:f7:10:6e:a0:27:d8:97:d3:d4:75:62:a8:
94:22:27:ca:05:44:c8:b6:2e:3c:2d:e0:71:c3:dc:3b:a9:d1:
7f:0f:f0:07:ff:ef:62:87:01:c3:0e:3e:f3:83:13:0d:ed:01:
0c:39:a1:c7:52:a5:bf:c8:99:03:13:17:75:cb:f7:1e:78:64:
dc:3e:e0:78:14:59:ca:7f:1e:8c:06:18:26:b2:a9:85:fd:cb:
0e:26:b9:4b:11:13:16:cb:db:b0:65:29:cc:ed:ee:15:24:64:
99:5a:90:26:37:23:8e:3f:5a:d2:20:85:bd:7b:f0:70:f6:84:
49:14:4d:4a:36:d3:f8:41:42:73:a1:74:34:8e:76:51:21:a5:
de:20:af:c8:a1:0c:83:8b:bf:e5:d6:c5:7d:20:98:ca:c5:0f:
59:1c:6f:1a:e8:91:db:67:42:c2:32:36:af:61:7d:b1:2f:40:
c3:fb:5c:68:a9:c2:17:70:99:ce:f2:4d:cf:8c:71:ed:13:8f:
1b:3f:f4:01:bf:da:47:b9:01:e7:91:20:39:ce:e0:3c:a5:b3:
dc:d0:3c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org