Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xcPZS4YVBLIMuXGL7yhW-qpUzrg.roa
File: xcPZS4YVBLIMuXGL7yhW-qpUzrg.roa (raw, json)
Hash identifier: ctreqBW8TG6N6QzUzA5DjoNNnlsUfoiAiQdepfRpzUM=
Subject key identifier: C5:C3:D9:4B:86:15:04:B2:0C:B9:71:8B:EF:28:56:FA:AA:54:CE:B8
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01875A7B5176C35663436DA3034DC55D6535
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xcPZS4YVBLIMuXGL7yhW-qpUzrg.roa
Signing time: Fri 07 Apr 2023 06:50:43 +0000
ROA not before: Fri 07 Apr 2023 06:50:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213310
IP address blocks: 77.65.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:7b:51:76:c3:56:63:43:6d:a3:03:4d:c5:5d:65:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Apr 7 06:50:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5c3d94b861504b20cb9718bef2856faaa54ceb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:06:b5:b8:46:eb:97:0e:8c:5a:48:da:23:
28:ba:c5:d0:94:c2:1e:73:31:10:4c:b6:ec:b0:b9:
b4:77:cb:37:cf:22:8b:2d:19:95:23:cb:43:b3:71:
20:59:24:88:df:d4:cd:0f:3a:46:58:c9:84:41:14:
8c:23:91:86:bd:b7:67:e7:ad:90:90:cc:80:7f:65:
3a:7a:90:0c:8d:65:6f:5d:49:ec:be:96:b0:9c:54:
95:71:31:32:c3:d3:17:1e:7e:80:e5:71:f5:6f:a7:
39:dd:6f:72:8b:84:f7:54:85:62:f3:d5:0e:34:3c:
4f:44:74:4f:b5:8c:d9:6d:ff:40:4c:4d:d1:54:aa:
d5:61:6e:07:7c:32:7c:10:95:6c:fe:ff:4e:58:3e:
6a:18:ff:9e:d1:ec:ca:bb:f3:c0:7a:f2:1c:b9:89:
3b:f7:0d:a0:6b:eb:db:a7:62:81:d7:37:30:65:5f:
27:c3:8b:f6:f4:cc:59:22:c1:75:cf:23:8b:cf:b4:
30:fe:e9:a6:ae:f3:e1:94:19:6f:60:10:92:dd:2a:
4e:0f:d7:3c:3b:c0:f5:04:ef:15:25:bc:5f:2a:47:
9e:33:3a:88:f1:c7:68:e4:85:2b:29:7a:da:2a:cb:
c0:c4:f7:ee:fd:66:0a:42:28:5f:91:69:24:fe:ce:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C3:D9:4B:86:15:04:B2:0C:B9:71:8B:EF:28:56:FA:AA:54:CE:B8
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xcPZS4YVBLIMuXGL7yhW-qpUzrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.192.0/24
Signature Algorithm: sha256WithRSAEncryption
77:53:fc:7c:8b:02:cb:2a:32:73:6f:fd:2c:71:e0:b9:42:43:
bc:d5:96:d0:7d:94:d9:f5:a7:f6:95:0e:c2:84:e5:b0:f1:73:
9f:76:20:ff:fd:3f:46:5b:47:d0:b1:b6:4a:75:28:d7:e7:0c:
b6:18:71:62:96:b6:41:46:45:cd:80:4a:7c:e4:d5:94:72:d9:
03:b3:ae:8d:6e:99:59:90:22:72:74:72:9c:dc:bb:a2:c5:d2:
0e:0d:20:38:4d:48:e8:34:8d:98:d4:40:55:dd:7d:c8:4d:5a:
41:73:ce:fe:fe:a2:ef:02:91:70:5e:4a:1b:85:d5:03:40:c6:
92:c9:92:3f:fe:0e:af:51:ec:01:8a:ff:91:07:b2:b3:7f:63:
78:03:b7:21:a7:62:8f:38:22:67:23:20:fb:73:09:f1:2f:b3:
0b:a6:44:f5:20:89:91:18:f4:23:f1:76:a2:70:63:80:e2:5e:
c6:ec:dd:e3:b5:51:8f:55:ae:f4:83:eb:8a:b4:0a:b5:c7:16:
43:a6:4c:be:9c:50:2b:e6:be:8d:1f:50:f1:e6:38:d5:7d:92:
4b:86:ef:d6:1b:64:63:3f:23:79:1f:c1:5f:8f:42:4d:6d:48:
12:3d:ac:ee:58:02:b1:b1:99:ac:4b:98:5a:43:98:8d:b0:1c:
13:f3:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org