Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AERtnNXrVqJDFyzgFO86p5YyQmM.roa
File: AERtnNXrVqJDFyzgFO86p5YyQmM.roa (raw, json)
Hash identifier: l8HUhPiOr2ysRjZKsfDKU8/H/5inPcWhFe5gNn221C4=
Subject key identifier: 00:44:6D:9C:D5:EB:56:A2:43:17:2C:E0:14:EF:3A:A7:96:32:42:63
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEE6250018BC7EF2B18773180CD8C1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AERtnNXrVqJDFyzgFO86p5YyQmM.roa
Signing time: Sun 01 Jan 2023 06:04:56 +0000
ROA not before: Sun 01 Jan 2023 06:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211516
IP address blocks: 77.65.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:e6:25:00:18:bc:7e:f2:b1:87:73:18:0c:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00446d9cd5eb56a243172ce014ef3aa796324263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:ee:25:e8:ee:fd:4e:7c:db:f6:3a:ec:82:
bc:26:a5:ee:0a:7a:87:1b:c0:47:77:7f:94:de:b9:
8e:d0:b4:c2:63:0d:0c:85:47:fc:b0:ab:d3:db:8a:
65:0a:47:b2:17:e1:fb:86:04:ee:ab:ec:70:8b:f7:
b7:e5:76:a7:3b:b8:9f:2c:4e:ea:3a:36:e4:8a:c2:
67:35:88:43:a2:60:45:38:c5:4b:b2:92:16:c2:2c:
4f:24:25:ce:dc:79:2f:0a:d4:c0:c3:35:cd:26:bd:
b7:4c:7d:f5:59:59:3d:3f:b7:57:a9:03:5b:0f:68:
b5:76:b6:07:82:2b:e2:2c:08:bd:12:49:ef:87:4c:
2d:8c:2b:f4:ad:f2:1c:be:0a:59:8c:31:6b:01:a4:
68:66:95:cd:fb:d5:08:79:8c:be:72:a4:82:50:06:
98:4e:0c:5b:3c:71:5e:c5:c6:de:16:d4:06:6b:14:
fd:fa:9b:93:20:12:da:2a:d2:2f:07:ac:21:65:3f:
35:42:39:a5:af:c5:9d:43:62:c4:b0:3b:cb:30:85:
74:b1:7f:07:fb:86:1f:ed:d8:fd:c6:b0:3f:01:a1:
cd:06:56:79:d3:63:08:5b:0d:37:bd:5f:49:5f:44:
e4:48:24:5f:e0:07:83:07:49:2b:62:b9:20:bf:b5:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:6D:9C:D5:EB:56:A2:43:17:2C:E0:14:EF:3A:A7:96:32:42:63
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AERtnNXrVqJDFyzgFO86p5YyQmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.220.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a1:87:c5:ba:a5:f7:0f:20:12:07:e0:f2:c2:c3:c8:d4:5e:
95:5a:18:16:22:9c:86:41:94:20:a2:13:96:ae:9a:28:9b:ba:
bd:1a:64:8c:f0:b0:81:cb:4d:7d:c5:ef:7b:27:28:8a:73:8f:
74:4e:91:a8:62:60:99:e6:9a:a8:fc:b5:c6:36:f7:cd:c4:26:
32:cf:de:06:30:94:77:44:1c:08:cd:44:2f:92:ba:33:5f:d9:
7c:38:f7:4d:a4:5e:cc:b0:f6:35:6d:4a:40:cd:de:d1:c1:a2:
b5:fb:bd:23:3f:08:52:60:ca:c1:a6:07:24:de:c1:cd:6a:4e:
e3:5d:52:a9:f3:85:35:2c:69:7c:bf:31:b3:cd:9c:dd:ec:84:
07:62:92:43:91:68:44:65:3c:b5:0d:72:c1:58:29:63:2a:2d:
ca:8a:84:1c:a0:44:f5:2d:27:f0:67:9d:77:d5:a9:91:dd:40:
e8:24:2b:56:43:89:8e:a6:c7:88:f7:d1:eb:74:e0:5f:ba:76:
f4:52:52:17:74:62:57:b8:6d:81:84:bf:b6:97:a2:57:20:aa:
ab:eb:23:7e:85:b4:47:65:8d:45:6b:7b:a9:df:30:45:4e:5b:
83:ea:b3:58:e3:fd:e2:2b:a3:1f:c4:e4:3e:23:a5:fb:7f:ae:
53:11:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org