Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CdXOHygNgPdH4t_Oeckb1OCSjwg.roa
File: CdXOHygNgPdH4t_Oeckb1OCSjwg.roa (raw, json)
Hash identifier: Jc5t4mYcmr1ujDNlPy6jTVJRuWDH+ZrqOr+MQ+pq2pI=
Subject key identifier: 09:D5:CE:1F:28:0D:80:F7:47:E2:DF:CE:79:C9:1B:D4:E0:92:8F:08
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED51CA94DAE5F9896CC4E38D8916B
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CdXOHygNgPdH4t_Oeckb1OCSjwg.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204063
IP address blocks: 77.65.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d5:1c:a9:4d:ae:5f:98:96:cc:4e:38:d8:91:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d5ce1f280d80f747e2dfce79c91bd4e0928f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:92:7d:cb:8a:75:c7:ef:80:91:5f:9f:1a:
c4:c5:e3:fe:50:0c:14:81:5e:71:fe:05:29:ad:8b:
4e:c4:88:33:40:a2:74:f1:ea:cd:58:08:14:27:e8:
24:e7:3a:03:a6:83:4a:f4:fe:b1:4f:97:4a:d8:fd:
bf:a3:d1:d7:80:16:c5:e4:43:5c:98:d1:ac:72:6a:
2b:67:f7:1b:0b:24:0b:4b:6e:f1:a9:c5:d7:7a:04:
bc:2b:2f:88:49:eb:d9:c3:74:d6:17:6a:17:cd:57:
ae:fc:03:b5:74:c4:64:79:4b:ce:1f:1e:f4:42:af:
eb:8a:5e:4f:c6:09:2b:7a:8c:e7:19:14:3f:cc:80:
a8:24:49:3d:d1:5c:f1:8a:ef:7a:11:9a:8d:81:5c:
97:9a:cb:4f:f3:ca:f1:38:ae:d5:ed:8d:79:8e:ef:
85:6d:89:ab:df:ea:d0:08:67:37:01:f3:70:51:e7:
01:8b:6c:bf:27:fd:99:88:c1:e7:29:65:2f:28:b5:
9c:f3:03:3e:9a:39:81:58:f0:48:57:b8:f1:49:1e:
02:96:04:00:5b:f6:3a:07:fe:af:2f:da:f4:75:2a:
82:78:2c:c2:95:5e:6f:79:cc:65:c7:23:13:c4:0c:
a9:5b:be:fa:fb:44:55:c6:9f:96:94:a3:83:1e:54:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:CE:1F:28:0D:80:F7:47:E2:DF:CE:79:C9:1B:D4:E0:92:8F:08
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CdXOHygNgPdH4t_Oeckb1OCSjwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:10:65:b6:cd:a1:77:87:b7:62:df:db:9f:95:5f:13:4a:8c:
e8:42:da:13:89:dd:31:55:b9:70:58:57:fb:f4:48:41:e7:05:
eb:5d:f5:c2:cc:ea:9a:28:66:de:11:cb:43:b6:88:53:80:95:
7f:2c:96:bd:18:b3:79:74:d4:7b:58:e7:7c:99:61:d5:80:04:
c0:5a:5f:2d:0f:e2:f8:be:4b:0d:b3:b3:50:7c:8f:9c:c6:70:
27:9d:a1:a4:dc:4d:f0:59:03:23:60:d5:58:b8:e1:23:7d:3a:
ea:43:c7:60:2e:f0:68:9d:2d:92:7e:92:1c:5d:f8:4b:35:63:
1a:77:1f:31:74:66:28:4d:bf:5a:89:5f:ca:25:b0:f0:48:c7:
ab:1b:61:c7:9b:eb:28:24:a3:7a:e4:c7:a9:ec:2b:a8:83:05:
9e:6a:16:23:11:e6:cc:36:5f:65:a6:c1:12:9b:94:66:1b:e6:
21:ad:96:f2:f7:31:2d:8c:52:2d:fd:5f:47:88:d2:49:30:23:
f0:4a:0b:07:5d:b4:68:18:37:9b:ca:06:f5:ca:f3:e1:9c:3f:
4d:a5:0f:b2:22:57:7f:56:ad:14:83:a4:dc:f4:bc:1a:16:02:
de:bc:bf:88:2a:1f:88:02:58:32:60:94:ea:d4:cc:47:a8:4f:
e4:57:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org