Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QblF0wu4JUbyu2P36MY5d_xMnDo.roa
File: QblF0wu4JUbyu2P36MY5d_xMnDo.roa (raw, json)
Hash identifier: t/zDsQW4yMFEj7R0iOKlf36BhBeYGFMwAwLWR/xTiXQ=
Subject key identifier: 41:B9:45:D3:0B:B8:25:46:F2:BB:63:F7:E8:C6:39:77:FC:4C:9C:3A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB38814167D746D6373F970BE4423
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QblF0wu4JUbyu2P36MY5d_xMnDo.roa
Signing time: Sun 01 Jan 2023 06:04:43 +0000
ROA not before: Sun 01 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28732
IP address blocks: 77.65.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b3:88:14:16:7d:74:6d:63:73:f9:70:be:44:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b945d30bb82546f2bb63f7e8c63977fc4c9c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:45:80:63:f5:c6:03:9a:2a:c0:c6:2d:db:
0e:d1:3f:29:71:9f:59:9b:0c:cc:3a:22:9c:85:ec:
f1:bc:39:d7:52:dd:6d:41:3a:22:2b:f3:b5:bc:19:
6f:4a:ac:53:9e:18:e1:bd:0b:30:23:8a:80:5b:c8:
7b:66:64:0f:a9:bb:d5:75:af:43:00:1c:12:2f:ef:
77:1b:a7:02:24:13:3d:b2:23:30:1f:d5:f6:5b:84:
f5:97:d3:5f:6c:ab:34:73:bc:f6:74:24:84:f7:4e:
77:8f:98:fe:97:91:21:62:33:51:f4:b0:84:58:c6:
b1:3f:af:2a:9d:f3:42:4f:ea:f7:5b:c7:a4:4a:11:
c8:56:ad:69:6a:16:c4:68:ba:45:72:7a:39:93:b9:
dd:a7:8a:99:df:8e:3c:96:27:75:36:90:e8:6b:50:
b5:c9:4c:dd:43:dc:8b:5b:13:75:0f:28:6b:9f:ed:
7b:e7:c4:7c:ae:44:85:58:a7:f6:e5:a3:b1:68:29:
45:87:1c:c1:78:0b:2a:39:0f:04:9b:1a:9c:42:91:
03:e6:10:95:ed:26:58:ce:2e:06:53:97:84:77:3f:
88:f1:b4:d1:3e:72:c8:ec:6c:7e:a9:40:b6:2c:3d:
38:cf:4b:db:47:8f:f6:50:30:c8:d2:67:29:e0:88:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:45:D3:0B:B8:25:46:F2:BB:63:F7:E8:C6:39:77:FC:4C:9C:3A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QblF0wu4JUbyu2P36MY5d_xMnDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.153.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a9:9d:75:96:86:a7:a2:17:f9:c5:b1:ff:c6:19:90:16:94:
45:6c:c6:27:c5:bb:b6:cd:91:87:ec:13:c3:a1:0b:2b:dd:83:
7a:20:08:a2:c8:53:ca:52:09:7f:23:9f:53:01:b3:bb:99:de:
99:1b:b1:73:01:28:fb:d0:2f:dc:8f:24:98:97:c2:84:be:08:
25:e3:2a:de:2e:d1:93:d7:20:a0:fa:32:12:ce:cc:6b:c6:c2:
d7:d7:2e:ec:5a:43:c3:fe:54:c7:80:cd:84:de:39:97:d3:6a:
dd:d3:d3:1e:88:0e:96:1c:1e:91:10:b0:96:fe:1b:5e:3b:b8:
17:9d:49:3d:ca:5c:8b:3f:7f:b3:de:f5:c2:65:64:01:b7:07:
a5:37:3e:97:6d:5d:cf:a5:6a:f1:53:ce:9a:bc:ab:cc:1d:13:
ae:8f:df:5a:8d:35:13:68:09:70:ce:7a:eb:04:77:49:d0:75:
5c:e8:56:27:8d:98:63:f5:7f:00:4f:57:75:1e:aa:2b:08:cf:
3a:67:7a:f9:2c:2a:3b:34:48:7b:4c:39:27:08:89:17:fe:02:
11:e0:b4:55:30:63:94:f5:00:5c:af:81:a3:53:67:57:68:c5:
04:3d:df:94:51:6d:ab:75:b4:b6:9a:b4:d1:64:cf:e5:0d:c0:
b5:83:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org