Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/HTwuvSv4SxL84FXy8GgC-4kazdQ.roa
File: HTwuvSv4SxL84FXy8GgC-4kazdQ.roa (raw, json)
Hash identifier: OMDr4ZQBQX30tUKTrVo8r0Euwr0ftVNyi1oXgkNCP8U=
Subject key identifier: 1D:3C:2E:BD:2B:F8:4B:12:FC:E0:55:F2:F0:68:02:FB:89:1A:CD:D4
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01856CCAF9419BC7B80F71A6881C3FFED625
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/HTwuvSv4SxL84FXy8GgC-4kazdQ.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43341
IP address blocks: 77.83.176.0/22 maxlen: 22
2a09:8580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f9:41:9b:c7:b8:0f:71:a6:88:1c:3f:fe:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d3c2ebd2bf84b12fce055f2f06802fb891acdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:51:3b:ed:1a:9a:4f:78:82:91:77:42:f6:
02:fd:d9:51:5f:21:32:ea:c3:d7:77:64:ff:d2:03:
18:89:68:23:50:61:84:ef:5f:e2:12:91:b1:0a:e9:
4f:b6:4a:7c:bd:a7:97:0e:34:e5:e9:af:0f:63:9e:
24:0c:cc:35:e1:50:c8:6f:f6:74:b0:97:c5:ef:53:
b3:c8:6b:b2:9c:d7:74:bb:2e:89:19:26:2b:9f:d0:
85:77:81:24:1a:e8:5d:e0:aa:f6:18:5c:c4:04:50:
fc:c3:97:54:4f:66:37:94:d8:c4:83:29:d2:aa:87:
5d:7a:3d:f7:47:d0:ce:a7:34:a6:c3:de:90:47:d4:
af:1e:dc:15:63:74:04:d0:25:cd:57:60:a5:d6:f4:
ad:d2:63:87:2c:da:0a:02:f6:82:c6:7f:55:15:ee:
b1:39:df:ae:b5:08:4c:16:48:22:be:79:dd:ac:be:
71:06:2b:01:e0:23:f7:45:47:29:31:51:fd:65:2c:
dd:9c:4c:72:91:1c:4c:92:c1:70:02:ce:e2:af:4a:
93:34:21:d3:03:ce:1c:59:45:35:de:d1:97:84:95:
a3:cd:c1:b7:be:66:1d:6b:92:bf:bc:40:ff:88:54:
20:c5:55:41:35:97:b7:09:08:1b:08:e8:db:6b:70:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:2E:BD:2B:F8:4B:12:FC:E0:55:F2:F0:68:02:FB:89:1A:CD:D4
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/HTwuvSv4SxL84FXy8GgC-4kazdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.176.0/22
IPv6:
2a09:8580::/29
Signature Algorithm: sha256WithRSAEncryption
3f:ec:df:57:96:c0:70:db:25:e2:79:5a:d4:e8:21:32:29:45:
81:c4:cb:7e:d0:74:10:9f:f0:ea:5a:53:db:9f:de:b5:78:39:
f0:99:6c:fb:88:6d:13:f3:bd:97:34:7e:74:72:66:3c:37:a5:
8b:82:5b:54:26:96:1d:3d:d6:44:72:2f:bd:85:cf:ea:55:bd:
5a:d0:30:72:45:1b:1e:92:07:a5:9f:ba:54:d9:f7:05:b7:9f:
ac:9f:90:50:12:cc:9b:21:a5:2d:77:72:ec:ac:a6:09:31:80:
4b:00:d1:f7:54:38:13:a4:ff:f5:ea:14:f8:9b:ef:f4:c5:25:
f7:0d:96:05:b5:e3:0b:f2:09:5c:99:0a:fb:72:d8:4e:b3:e7:
1b:17:43:c4:6b:28:e0:ba:df:06:47:ae:a4:cc:9a:e5:4f:24:
56:b6:3e:83:8e:0b:a8:fe:4a:45:7b:fc:b2:03:1b:38:f5:a2:
b4:23:ca:b9:80:2c:3e:64:b7:a4:74:7a:57:69:b7:01:9e:3e:
d3:39:8b:5f:8e:5f:61:18:f7:d2:7f:b7:3a:a8:82:96:e1:6a:
d7:d3:a2:39:d3:10:17:a3:ed:64:03:48:0c:b9:6f:cc:90:06:
44:90:d3:0d:c2:f3:fb:e0:96:df:36:1c:cd:69:ba:b9:d8:6f:
fe:32:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:57 2024 by rpki-client on console-fra.rpki-client.org