Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hh9dER26g3IVtqT5dWvAUbeHqX8.roa
File: hh9dER26g3IVtqT5dWvAUbeHqX8.roa (raw, json)
Hash identifier: 6Fq7de7sai9S82YvBCId6dQEU3vMkWuLicxjBtJTBDI=
Subject key identifier: 86:1F:5D:11:1D:BA:83:72:15:B6:A4:F9:75:6B:C0:51:B7:87:A9:7F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018692759B116929ED2AD08413F76C4A40B1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hh9dER26g3IVtqT5dWvAUbeHqX8.roa
Signing time: Mon 27 Feb 2023 10:40:26 +0000
ROA not before: Mon 27 Feb 2023 10:40:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207033
IP address blocks: 77.65.171.0/24 maxlen: 24
188.114.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:75:9b:11:69:29:ed:2a:d0:84:13:f7:6c:4a:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Feb 27 10:40:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861f5d111dba837215b6a4f9756bc051b787a97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:83:ed:fb:4c:5e:fa:a6:1c:43:11:c0:39:
ea:f0:02:b9:cc:f6:87:90:49:0d:9c:76:fc:1d:ee:
82:38:a8:df:62:df:52:2e:ae:b2:b6:e5:1c:4e:a9:
c1:67:5c:11:60:7e:76:f2:40:48:69:98:e6:de:eb:
6d:8d:4e:f4:03:de:62:89:8b:b0:68:34:6f:76:eb:
3a:1d:2e:71:0b:4e:b8:d2:f6:e3:79:e1:98:24:c7:
e1:e9:18:d6:f5:d1:dd:aa:80:ec:80:59:66:a6:80:
30:f0:ab:b2:88:70:7d:f3:58:6d:04:44:f6:18:55:
d6:c3:bd:35:15:5f:f3:01:e4:d1:66:4b:96:a3:bc:
54:a7:2e:00:c3:b8:60:89:6e:d6:f6:e1:9e:a5:7b:
8a:9d:96:3f:50:45:85:ad:36:33:34:bf:c3:a1:fd:
83:7e:37:97:0d:cb:23:79:15:1c:c9:21:8c:7e:82:
67:97:1f:56:64:3f:0e:5b:b4:f8:7e:78:f5:2b:40:
c7:da:9b:b3:50:52:bf:3b:4c:85:35:a7:fc:93:8c:
92:dc:59:3c:34:09:5a:65:71:e3:5e:0e:fd:7f:30:
31:c7:02:c0:88:8b:17:7e:08:c6:12:a8:98:66:9e:
cf:9e:47:30:27:fa:82:de:07:36:b8:06:2e:69:1e:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:5D:11:1D:BA:83:72:15:B6:A4:F9:75:6B:C0:51:B7:87:A9:7F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hh9dER26g3IVtqT5dWvAUbeHqX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.171.0/24
188.114.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9a:08:e2:53:0f:fc:b2:03:f1:d6:b7:46:42:29:3d:da:b6:
bb:2e:a7:ef:35:f4:e6:de:f0:51:c5:97:74:65:04:20:9d:b4:
64:41:af:78:6f:74:c3:74:a7:e4:4e:c2:1f:95:00:77:78:de:
00:31:2b:41:70:37:8e:a2:fa:9d:de:d5:7c:ab:f7:26:0c:d8:
9a:31:de:44:99:22:73:b7:b7:a5:94:da:42:7e:6f:11:2d:cf:
7b:fd:74:91:58:00:8b:bf:f0:e8:a0:a6:c4:de:3c:f2:ab:d1:
57:0e:15:ed:1e:47:b8:9d:03:3f:ee:fc:32:d9:5c:97:85:19:
10:05:9f:80:15:af:2f:36:a1:8e:5c:e4:77:d9:dd:e2:0f:ef:
32:70:35:46:a7:4d:6a:32:11:65:95:96:88:35:6b:30:8a:0c:
d7:47:d1:3e:55:38:2d:a2:69:f9:5d:36:60:94:b9:ee:28:0a:
ba:a9:e1:e2:17:e2:44:e1:d7:5a:d2:9b:fa:7e:ee:d9:e5:8b:
18:a3:fd:b9:6a:74:b5:05:89:2b:96:ad:4a:e2:5b:87:e8:5b:
1c:90:ce:b6:9c:a9:03:6d:54:bc:24:2c:a6:d3:26:05:e1:bb:
62:17:46:01:c6:29:36:70:9d:9f:5f:06:81:82:2b:58:63:53:
ce:f5:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org