Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/vEocyjxQOga3hW9Asc8TottCpbQ.roa
File: vEocyjxQOga3hW9Asc8TottCpbQ.roa (raw, json)
Hash identifier: q3NGv6J7Gjb4Ed/3tC3eDEQNQ4zWRjXPyKQQ1BCE7HQ=
Subject key identifier: BC:4A:1C:CA:3C:50:3A:06:B7:85:6F:40:B1:CF:13:A2:DB:42:A5:B4
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 01856E5D66704E29E9E6E2DBB11CFCBF5575
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/vEocyjxQOga3hW9Asc8TottCpbQ.roa
Signing time: Sun 01 Jan 2023 17:24:52 +0000
ROA not before: Sun 01 Jan 2023 17:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43905
IP address blocks: 80.77.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:66:70:4e:29:e9:e6:e2:db:b1:1c:fc:bf:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jan 1 17:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc4a1cca3c503a06b7856f40b1cf13a2db42a5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:8f:23:7c:d1:a8:29:a4:4c:52:55:79:c7:
13:33:db:1f:77:4e:72:76:bc:30:4f:a2:b1:6d:e5:
bf:03:80:77:34:0f:4e:b5:49:46:e3:09:69:47:fb:
f9:ed:fa:d0:86:16:30:9b:7a:89:c0:1e:11:11:34:
c3:0e:9e:19:ba:85:9c:95:8a:1d:d1:80:a3:2f:fa:
bd:04:a7:fb:c9:a5:cd:8a:38:5b:be:84:0d:46:cf:
85:b1:d2:f2:bf:b4:e4:b2:cd:a1:22:92:16:68:50:
f7:6a:38:07:04:a8:ae:09:fa:d1:7c:94:b9:1d:cb:
3f:38:6f:64:d3:7b:63:ca:ab:b4:14:aa:3b:a6:94:
15:84:a7:ca:63:ab:9c:cb:3b:6e:7d:d5:06:e9:08:
ba:f3:84:eb:d3:f1:e4:30:9d:74:84:1f:8e:b4:ce:
c2:da:8e:39:bf:c3:69:55:cb:66:1b:b2:5c:cc:0a:
fe:63:47:9a:97:b6:03:ae:5f:c4:e8:7f:1f:c7:09:
17:10:15:d1:77:6d:8e:5e:c0:0a:9a:82:96:72:0c:
3b:ba:86:68:13:7a:ce:8a:2d:0a:b9:00:ed:4f:5d:
b0:f7:a1:2f:9c:43:32:e1:7f:a2:ac:d8:14:e7:28:
86:57:07:96:2c:a9:01:e6:a3:78:79:97:ea:8e:7e:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:1C:CA:3C:50:3A:06:B7:85:6F:40:B1:CF:13:A2:DB:42:A5:B4
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/vEocyjxQOga3hW9Asc8TottCpbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:23:57:8a:3e:31:70:c2:0a:b4:64:6a:4d:0a:b3:14:20:80:
97:dc:0e:47:47:04:12:6a:c0:8b:f2:64:1e:1f:d1:89:09:b5:
6e:63:96:1a:00:57:65:87:66:fb:aa:44:86:fd:d1:48:31:96:
16:10:4f:c9:f9:f9:5c:39:32:5e:9d:40:e6:04:8f:91:7d:bb:
13:82:71:50:13:c4:c9:84:be:d0:c3:c1:46:db:b9:c4:18:82:
90:20:1a:78:9a:a2:8d:5e:6a:c1:1e:2c:fc:1d:63:1a:2e:fa:
03:96:97:dd:7e:bf:b2:e5:97:ed:32:1a:c6:0b:df:33:b8:be:
28:b2:8b:70:c6:38:2f:50:92:90:80:9a:be:62:7d:21:10:3d:
1a:98:62:3a:5a:bb:ac:20:44:51:e6:02:a7:50:43:54:a5:76:
67:3f:02:ab:c6:a4:54:54:06:4f:d3:c6:80:20:d2:ab:e6:0e:
5d:82:9a:64:18:50:e3:28:b0:66:5a:ca:fb:a0:41:e8:79:19:
92:0e:0c:37:86:b7:c6:35:48:23:9b:b4:38:9e:23:85:83:74:
64:4c:23:79:7e:13:5a:b6:4f:ba:a4:26:ae:56:89:9f:32:2b:
ab:67:44:4b:61:2c:49:bc:c8:51:fb:8b:00:b2:a0:fc:83:50:
8c:b1:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:41 2024 by rpki-client on console-fra.rpki-client.org