Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kBixkzf15qYlc76O6omQVsQHFGI.roa
File: kBixkzf15qYlc76O6omQVsQHFGI.roa (raw, json)
Hash identifier: IjNTubAYyOtJcYpfMLwInDh2Fr85mYwJN7zUkIFHUhQ=
Subject key identifier: 90:18:B1:93:37:F5:E6:A6:25:73:BE:8E:EA:89:90:56:C4:07:14:62
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01875A7B50E07442E36991904447B3DE7E7D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kBixkzf15qYlc76O6omQVsQHFGI.roa
Signing time: Fri 07 Apr 2023 06:50:43 +0000
ROA not before: Fri 07 Apr 2023 06:50:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202050
IP address blocks: 193.192.178.0/23 maxlen: 24
193.192.176.0/23 maxlen: 24
193.192.180.0/24 maxlen: 24
77.65.142.0/23 maxlen: 23
77.65.194.0/23 maxlen: 23
77.65.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:7b:50:e0:74:42:e3:69:91:90:44:47:b3:de:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Apr 7 06:50:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9018b19337f5e6a62573be8eea899056c4071462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:db:95:c7:99:22:b4:8e:de:76:09:ee:77:
5c:8b:78:3e:ba:aa:6f:e4:f8:83:bf:c9:7d:00:4d:
d7:39:b9:3c:63:19:ff:04:52:46:58:2e:1f:ac:51:
67:95:69:e3:ed:17:01:f3:07:9c:fe:e1:98:89:d1:
da:a8:02:18:28:7c:d6:6b:40:77:67:4f:74:b6:3d:
a8:f9:9a:a0:c7:1b:50:55:f5:3b:a6:15:34:81:a4:
2d:73:af:59:77:99:36:0c:2e:aa:4b:70:cd:c7:b5:
a0:10:8a:dd:ee:fb:98:dc:5d:63:be:50:de:24:55:
fe:78:a8:37:13:91:2a:08:e4:11:ce:14:96:bd:f9:
91:df:5f:aa:8f:46:7f:58:45:f2:b3:a8:2b:98:6d:
76:dd:c3:cd:63:46:74:d3:62:1b:d9:e5:62:e3:2b:
6e:e6:a9:de:1a:b5:d5:c1:bb:88:9a:0e:91:b5:f7:
68:67:e4:95:52:49:32:f3:22:86:f4:95:fd:c4:28:
aa:29:1a:fa:e3:21:bb:0a:1f:02:b5:01:69:1c:6f:
24:fe:b3:2b:4f:5a:45:09:66:ba:f5:dd:3d:31:69:
a8:2c:74:ff:9a:f9:a3:34:1d:a3:f8:02:72:fb:b7:
71:af:1b:5d:c9:2a:65:66:62:68:ef:44:f7:c2:d9:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:B1:93:37:F5:E6:A6:25:73:BE:8E:EA:89:90:56:C4:07:14:62
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kBixkzf15qYlc76O6omQVsQHFGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.142.0/23
77.65.194.0/23
77.65.223.0/24
193.192.176.0-193.192.180.255
Signature Algorithm: sha256WithRSAEncryption
2f:23:07:68:c4:79:49:e0:6f:45:7d:a1:af:f4:47:ae:be:2f:
da:be:ed:a7:78:77:22:b2:e3:b4:99:9f:c2:a5:41:64:0f:f7:
5f:8e:3b:ce:a1:84:b9:37:1a:05:b3:52:3a:cb:c8:08:ca:da:
5c:ac:01:b9:54:45:fb:60:eb:a6:d6:d8:ed:6f:5a:ed:60:13:
2a:e2:45:5a:51:1e:36:d2:51:2b:46:55:fc:41:50:b3:f3:e3:
33:62:eb:7e:c6:a8:19:cd:26:f6:42:48:fb:d6:dc:0f:f2:19:
48:bc:b0:1a:f6:88:ef:c8:2c:a9:a5:f3:9c:1e:e1:a4:9f:6a:
38:ba:13:01:8c:79:2e:b1:df:43:2d:fc:c6:1c:25:63:ef:76:
65:ff:de:13:5e:f3:2c:c9:75:7c:0d:2f:e9:ea:91:ad:5b:b0:
7e:22:68:60:f4:69:c6:af:90:09:fd:31:96:0f:5c:55:39:dd:
28:c5:c5:65:d7:a2:51:f7:57:7d:cc:04:b3:3d:f6:cd:28:2f:
ff:f0:95:77:56:ef:bf:7a:9d:66:97:54:90:b9:18:17:b7:a1:
91:99:f7:06:37:72:2d:ac:f3:d4:91:2e:fa:f3:6f:c8:16:b4:
fc:d3:78:47:fb:4b:96:ba:7b:74:f7:dd:39:d8:1e:0c:2c:25:
e9:44:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org