Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa
File: Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa (raw, json)
Hash identifier: XjbGQuC4tXZkbLfE1Lc+ujq0gjB7+GrwFbLvXDPNvRs=
Subject key identifier: 42:EE:EC:7F:55:9F:54:BA:73:00:90:05:FF:B7:64:90:70:28:7B:18
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEE543F896BBBE8C5C8F480F609383
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa
Signing time: Sun 01 Jan 2023 06:04:56 +0000
ROA not before: Sun 01 Jan 2023 06:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210910
IP address blocks: 77.65.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:e5:43:f8:96:bb:be:8c:5c:8f:48:0f:60:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42eeec7f559f54ba73009005ffb7649070287b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:35:7e:2a:4a:96:72:93:2f:30:28:9e:c5:
86:89:40:7d:c2:23:69:a0:cb:63:e5:84:1d:a4:85:
c8:18:23:f3:e3:aa:b6:54:0a:ea:52:03:8b:b6:10:
c9:4e:6b:73:f6:2a:9f:90:de:ea:94:2a:f8:4e:24:
eb:26:ec:99:3d:4f:03:f6:20:01:10:37:42:e4:64:
f6:59:3b:d5:3e:3f:7a:3f:09:42:5b:a6:9e:fe:0a:
fa:43:88:0c:1a:86:77:28:11:04:91:ec:da:1e:ff:
ab:d1:09:f1:36:5c:a8:d7:db:b0:fe:1f:c2:da:7a:
42:22:18:1e:a0:69:97:cf:59:b3:13:df:ee:85:51:
31:8c:37:83:bc:64:f1:89:6a:79:28:07:df:09:f8:
ee:9e:85:2e:4c:76:09:cd:9c:50:1c:d5:8f:98:1e:
87:1f:5c:4c:87:7e:03:76:65:8c:8f:10:9b:37:33:
5e:7d:39:9e:1d:c1:de:57:6e:8a:45:aa:7b:16:17:
3d:5c:25:b3:da:fc:b5:2b:7a:39:71:ae:8e:36:68:
b6:50:d3:87:e8:15:6f:02:20:b2:40:6a:b3:46:f4:
e4:8a:fe:cb:27:c1:06:ec:e4:f0:8a:c5:89:53:17:
d7:cf:89:a7:40:aa:df:a6:b3:4c:c6:cb:4f:34:26:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:EC:7F:55:9F:54:BA:73:00:90:05:FF:B7:64:90:70:28:7B:18
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.152.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bf:f3:3c:ef:cc:7b:48:d3:cf:59:69:a6:ec:ba:cc:70:27:
76:7d:a1:56:93:c5:a1:ec:04:0f:1a:a9:69:73:1e:74:16:d2:
14:77:2d:7d:08:01:8a:e2:5d:45:66:ef:ac:7b:7c:5e:ee:26:
3f:86:1f:71:61:0b:ed:bf:56:4b:a9:d7:02:5c:c2:35:71:36:
76:47:12:5b:ac:7b:af:45:4f:b1:b2:5b:44:db:4a:f2:9c:9f:
ab:94:45:7a:b8:4a:ce:9b:d4:75:f6:42:ab:61:b9:7c:4a:3a:
0d:84:8c:91:7a:c0:2d:73:d6:2b:fe:c2:3f:e0:f6:75:99:91:
cd:98:ac:3a:d6:b1:53:1f:50:bd:59:81:0a:b7:ab:af:36:30:
f5:53:7d:1d:a5:66:01:c3:5f:77:d6:ec:2d:d5:ae:a1:99:7f:
9d:5e:ff:d0:ea:f0:eb:e9:0d:26:27:16:06:c9:07:54:7a:bc:
f4:72:16:3b:38:42:4b:59:e9:b9:9f:8b:e6:47:38:b2:bc:0a:
fc:de:fc:46:41:b0:17:ab:35:44:f0:20:d1:6d:94:cf:1c:f8:
1a:d5:65:11:07:c0:a6:c9:7b:79:af:97:a3:fe:0d:7b:52:c0:
8a:0e:ef:6c:7c:a3:28:2f:e3:ef:5d:c5:07:ad:21:32:63:d7:
83:09:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org