Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AuO4lzyl7rJo4P8fXP6weiU6P68.roa
File: AuO4lzyl7rJo4P8fXP6weiU6P68.roa (raw, json)
Hash identifier: dZfXFXkSpU+rEnwDGkYrafjWjjenmMDgA++BQqtaoLw=
Subject key identifier: 02:E3:B8:97:3C:A5:EE:B2:68:E0:FF:1F:5C:FE:B0:7A:25:3A:3F:AF
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185DE60663E3C54B19DA487D6FDE2B2217F
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AuO4lzyl7rJo4P8fXP6weiU6P68.roa
Signing time: Mon 23 Jan 2023 11:25:37 +0000
ROA not before: Mon 23 Jan 2023 11:25:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 77.83.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:60:66:3e:3c:54:b1:9d:a4:87:d6:fd:e2:b2:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 23 11:25:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02e3b8973ca5eeb268e0ff1f5cfeb07a253a3faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:38:13:71:c0:7a:43:a1:23:79:e6:81:29:
ae:fc:7f:c2:02:da:16:b3:9f:94:5d:f2:56:c3:0b:
ed:1e:6b:af:15:4d:5f:0e:c4:b9:f8:78:1f:ae:90:
03:b8:7f:19:9e:50:71:1a:d0:24:42:a9:10:05:07:
3e:a1:a6:ef:63:e6:ec:60:80:08:4a:5c:9e:50:26:
61:c8:70:c3:c3:85:ec:73:8d:08:27:3c:6c:a7:f1:
57:2b:cd:6a:f7:9b:b0:5c:97:26:f1:bd:38:6c:7b:
cd:c4:34:cf:c3:12:73:d7:af:c6:26:fb:20:f7:8a:
b2:b3:21:e5:10:6d:0c:97:8f:e2:35:e0:8a:00:75:
65:84:bd:01:6a:93:55:6c:6e:bd:46:5e:eb:5a:5a:
bb:81:60:65:a1:3d:cf:5a:2d:c5:1e:2e:30:e2:9e:
a1:c1:99:79:cf:0e:9b:6e:45:a4:c6:eb:b5:2b:a4:
99:d8:74:b5:1d:8b:1d:40:b5:24:01:b6:a3:15:9c:
e3:09:b4:66:91:a5:d7:59:91:cc:13:a1:5e:d2:9d:
40:56:9c:84:63:7f:28:36:bc:58:5b:73:e4:f1:b1:
23:bf:9d:1e:44:33:6c:9c:44:da:ed:df:88:11:cd:
45:54:b5:f1:35:91:f6:5b:6a:e2:a0:eb:3b:cd:27:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:B8:97:3C:A5:EE:B2:68:E0:FF:1F:5C:FE:B0:7A:25:3A:3F:AF
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AuO4lzyl7rJo4P8fXP6weiU6P68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:33:94:43:ff:f5:40:cd:5e:4c:9f:b0:ad:14:21:20:a0:d5:
b0:9b:69:2d:77:d3:fe:d8:a7:da:dd:68:1d:68:e2:63:4c:81:
7e:5f:42:25:a8:0a:dc:fc:d2:16:b0:24:c1:3a:a6:c2:3d:f2:
35:6c:b8:3e:ed:41:b8:5e:80:e3:2b:18:92:a6:36:75:ee:b8:
ac:25:3f:6d:54:b4:11:b9:35:a6:df:7f:ae:80:0b:8a:03:93:
5f:58:33:8f:b9:a0:32:86:dc:2c:cf:6a:37:b2:bd:94:13:e5:
3d:08:9d:6d:7e:b4:12:ed:64:b5:05:10:38:71:7f:66:6e:b8:
5c:21:be:b9:0f:57:46:ea:f2:70:3e:24:ea:1b:fd:4a:c5:f5:
ab:3a:4d:b4:96:08:02:71:20:a2:6f:ea:c3:a7:2a:fe:d5:ba:
e9:80:21:a6:11:c5:ee:81:c0:8f:a1:a0:32:0b:f1:87:9f:68:
36:75:d9:7f:2e:6d:3d:c4:c1:5c:bf:4b:3e:1b:87:29:4c:3c:
c8:7d:11:c4:75:53:d6:ec:61:21:7f:7d:e5:07:27:cd:0e:af:
58:f1:b3:04:c7:2e:bc:19:9f:2a:e5:18:99:0c:e4:de:26:85:
c9:93:d3:c6:07:3e:af:16:80:49:43:f5:fe:a9:91:77:aa:b8:
53:bf:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org