Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BjQtN_j6ToYnJsKiRKZty_kPl4U.roa
File: BjQtN_j6ToYnJsKiRKZty_kPl4U.roa (raw, json)
Hash identifier: wP126d+V1pnmieVO41XmLfjNhBmh5AfEwM2jJwHH3fI=
Subject key identifier: 06:34:2D:37:F8:FA:4E:86:27:26:C2:A2:44:A6:6D:CB:F9:0F:97:85
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEE468582437856532B6A38826E9E7
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BjQtN_j6ToYnJsKiRKZty_kPl4U.roa
Signing time: Sun 01 Jan 2023 06:04:56 +0000
ROA not before: Sun 01 Jan 2023 06:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210407
IP address blocks: 77.65.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:e4:68:58:24:37:85:65:32:b6:a3:88:26:e9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06342d37f8fa4e862726c2a244a66dcbf90f9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:82:0f:2e:16:30:6d:34:0e:46:11:ec:23:
b8:3f:13:34:55:fe:ac:81:1b:6b:5a:57:7f:74:37:
15:fd:d7:84:67:be:b6:34:0a:e2:53:31:26:ed:a0:
0e:6d:7f:df:f1:4d:70:e2:e2:cc:e4:b2:40:3a:24:
9d:84:31:1e:a7:57:ef:55:59:24:1e:4e:a3:d5:0c:
c7:a1:ff:25:33:48:3f:f4:b2:68:aa:58:fc:66:31:
d9:c3:3d:a9:05:71:cd:2f:6f:25:1d:8f:60:67:75:
73:f2:14:59:c8:81:87:67:d6:01:bd:aa:eb:22:20:
d9:10:99:48:78:93:62:3f:60:24:c3:21:f0:9c:c7:
b7:f1:ee:4c:69:53:24:81:33:67:b3:dc:df:c5:fe:
82:96:e7:cd:4d:0f:b8:bd:3a:8a:34:31:94:98:75:
3f:16:73:10:4e:38:ea:3b:4a:8c:2a:bf:8e:3a:fd:
a2:08:dc:01:58:12:8e:d3:b9:98:bd:cd:a7:d1:28:
31:75:ed:2a:21:96:57:aa:c5:89:5d:f4:8a:2c:74:
fc:9c:3a:9f:6b:f0:3f:9d:1a:b5:48:cd:a6:40:f3:
59:bd:36:75:6f:86:39:67:44:d8:24:e8:e7:ac:88:
41:39:f9:d5:19:9b:a3:dd:8f:5c:55:6c:9f:aa:17:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:2D:37:F8:FA:4E:86:27:26:C2:A2:44:A6:6D:CB:F9:0F:97:85
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BjQtN_j6ToYnJsKiRKZty_kPl4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.205.0/24
Signature Algorithm: sha256WithRSAEncryption
86:62:e3:75:a0:23:7e:b7:fb:c9:7e:72:a8:b2:b5:57:78:ae:
ab:de:f2:b6:22:aa:3d:b2:b2:4a:9a:ac:b3:88:30:f9:be:e0:
4b:b9:1c:cf:8f:37:cd:7f:ce:9c:64:9b:5a:49:bd:68:09:5d:
5c:ed:21:0c:c1:f1:6a:4c:3b:d8:a0:f1:41:cb:e7:3d:32:f4:
4a:0f:ad:b9:61:87:9c:a9:5b:d8:1c:a8:0d:55:9d:1e:66:cc:
64:92:af:47:43:b1:6a:3c:fb:7a:b2:46:9b:c0:0b:91:86:7c:
49:89:21:4d:49:14:e7:bd:6b:78:6c:03:7e:03:1a:fc:11:5e:
a4:3b:57:9e:9c:06:fc:ca:5c:c4:13:2f:0b:7b:bd:b8:4a:0f:
0e:5c:b8:b0:ed:8e:8c:38:25:e8:d6:9c:82:31:72:a9:5e:b4:
6f:7a:ef:f3:6c:11:33:47:ec:af:46:c1:d8:e5:42:64:1a:50:
b1:69:6f:0a:0d:81:79:42:f9:ce:5e:30:53:cb:be:ab:d7:e0:
0a:7b:f3:23:86:4a:d4:fa:aa:d3:8d:4a:0d:ff:14:01:5a:49:
28:45:dd:20:a8:11:77:8a:88:18:90:e0:31:77:53:59:3a:59:
62:44:ef:cc:ef:b7:02:fa:e5:d4:fe:80:ae:2c:86:ca:d1:d2:
88:48:86:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org