Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QPdqHMW5Y8b3I6ihxEWIASTKWMM.roa
File: QPdqHMW5Y8b3I6ihxEWIASTKWMM.roa (raw, json)
Hash identifier: 4V8VHQIaHfibiD60wMdtHXyih7WRW3MbVmE7cEWmE1A=
Subject key identifier: 40:F7:6A:1C:C5:B9:63:C6:F7:23:A8:A1:C4:45:88:01:24:CA:58:C3
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED154D8F3C41BAA028BD1010633E6
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QPdqHMW5Y8b3I6ihxEWIASTKWMM.roa
Signing time: Sun 01 Jan 2023 06:04:51 +0000
ROA not before: Sun 01 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202228
IP address blocks: 77.65.128.0/22 maxlen: 24
77.65.132.0/23 maxlen: 24
77.65.131.0/24 maxlen: 24
77.65.133.0/24 maxlen: 24
77.65.204.0/24 maxlen: 24
77.65.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d1:54:d8:f3:c4:1b:aa:02:8b:d1:01:06:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40f76a1cc5b963c6f723a8a1c445880124ca58c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:f7:83:bc:13:86:8d:6b:e8:35:a9:92:52:
5b:5d:cc:e7:25:f6:f1:ed:6a:49:83:b0:19:2c:36:
2d:5f:22:28:40:cb:b1:71:d5:8c:66:e6:80:00:bc:
05:7d:81:af:0f:83:15:20:c6:dd:b1:4e:29:f9:eb:
fb:40:e2:12:aa:27:c3:39:4b:dc:7e:12:7a:dc:b0:
77:0f:e6:88:3b:73:f2:8a:55:51:c4:7d:b6:8c:54:
2e:6c:33:e1:b4:e7:3f:60:ff:bf:3e:b7:79:5b:89:
8a:44:85:d1:8d:b2:33:b2:8b:3a:0b:16:ba:e1:d3:
79:d4:84:6d:36:19:19:b3:db:2d:e6:f2:ab:72:76:
a1:28:b3:de:e8:7b:09:0c:f9:96:fb:d7:94:3d:43:
18:6b:55:e0:93:1e:ca:fd:2b:1f:96:76:57:ac:2b:
98:08:26:d0:dc:bd:60:28:57:31:02:f2:f7:a2:5a:
6a:59:35:9f:a3:5b:ff:84:cd:d8:3a:94:e7:0e:26:
53:f1:76:e4:51:83:d2:a8:a9:f9:71:af:5d:0a:3b:
8b:f3:d2:66:01:60:98:9b:c9:87:ed:60:73:22:d1:
ef:95:39:3a:f8:4a:74:ee:da:2c:00:80:2c:ed:6d:
c8:f3:3a:eb:57:74:1b:a5:70:b9:d6:10:55:db:18:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:6A:1C:C5:B9:63:C6:F7:23:A8:A1:C4:45:88:01:24:CA:58:C3
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QPdqHMW5Y8b3I6ihxEWIASTKWMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.128.0-77.65.133.255
77.65.200.0-77.65.204.255
Signature Algorithm: sha256WithRSAEncryption
3f:44:9b:2a:dd:e4:90:c1:c3:19:a0:f0:2d:6e:9d:8d:50:be:
02:10:3a:13:30:5d:ad:ae:a0:fe:25:bd:37:c4:b9:9c:c0:50:
7e:ce:22:f6:04:cc:a7:27:75:1b:56:42:40:5f:ae:92:73:e8:
1c:d0:e6:4d:c8:76:3c:29:b0:a0:25:38:42:61:b4:c8:da:39:
fc:91:5e:d4:62:e7:3b:38:45:66:b8:0f:3a:84:09:0a:7a:77:
db:04:26:84:3f:e3:6d:8a:af:0e:fc:c2:6a:d5:4c:56:22:8c:
9a:e4:47:3b:8c:39:bd:69:d9:53:fc:d7:3b:87:99:b0:2f:c1:
da:8e:22:c9:0e:ca:90:d4:c3:57:dc:9d:c8:b9:e5:78:73:1f:
8b:77:bf:5d:60:cc:c3:ee:3a:ab:71:6f:cc:a9:ed:cc:5c:56:
ce:6e:a1:dd:53:f7:c1:0a:06:64:15:77:45:4a:d0:7a:f8:64:
38:e4:b1:ca:96:ae:5d:54:1e:c6:7c:16:0b:ec:5c:a0:57:49:
ed:97:9e:ea:65:cb:62:0a:fe:72:fe:8b:8b:30:e5:f5:75:be:
95:25:4d:3b:c3:0a:7b:8a:5d:56:ae:80:39:21:df:14:1f:d0:
33:2b:71:d9:43:25:fb:a2:bf:c2:21:83:ea:65:60:ab:5c:4b:
97:a0:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org