Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/K_KjGnh-9Y6wl3soxlpedEUhcms.roa
File: K_KjGnh-9Y6wl3soxlpedEUhcms.roa (raw, json)
Hash identifier: JcljD3r3MNeBhu0C4wG+cTjdklV8SJJCr09wRKIHvvE=
Subject key identifier: 2B:F2:A3:1A:78:7E:F5:8E:B0:97:7B:28:C6:5A:5E:74:45:21:72:6B
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018943DF3501848390FAA7F3B6985A8F4E54
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/K_KjGnh-9Y6wl3soxlpedEUhcms.roa
Signing time: Tue 11 Jul 2023 07:34:08 +0000
ROA not before: Tue 11 Jul 2023 07:34:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.194.0/24 maxlen: 24
77.75.195.0/24 maxlen: 24
77.75.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:df:35:01:84:83:90:fa:a7:f3:b6:98:5a:8f:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 11 07:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bf2a31a787ef58eb0977b28c65a5e744521726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:d5:24:ca:f8:17:de:b5:41:66:b8:e3:dd:
d9:44:48:9f:c5:ed:ff:65:40:ad:76:46:6e:d6:00:
00:3e:ad:f4:fe:6e:9a:15:44:1a:1a:36:3e:5f:06:
31:2a:0e:6b:ae:f8:5b:6b:4a:03:75:99:08:3b:40:
6f:ab:00:ff:c3:d5:37:5a:2e:f4:8b:cb:ce:27:a6:
5f:56:33:bd:fa:72:f4:0b:05:d6:d3:81:ba:2b:4e:
b8:3d:a3:cf:94:0a:7a:de:fc:9a:6a:c9:e5:9b:e6:
c5:88:69:9e:26:3a:04:eb:63:76:a9:0e:20:55:2c:
b8:38:bc:ba:2a:d8:db:dd:eb:54:d5:06:53:98:38:
9d:d3:a4:93:98:48:d8:e7:a9:b7:f7:22:67:8f:df:
39:02:1a:47:10:b3:d1:6e:a7:f1:90:38:5e:26:64:
1d:96:52:20:3c:1f:f3:73:9b:c6:0e:99:6b:58:be:
85:88:4b:66:5a:7e:72:bf:f2:15:24:ec:b2:23:b0:
7f:2d:26:55:af:f4:16:5a:00:bd:25:51:0c:61:de:
0f:2d:59:33:a8:17:3a:2f:77:45:f8:7d:33:7e:80:
50:fa:22:91:b5:44:00:26:2b:76:95:a7:e2:b0:46:
61:af:ab:6f:7b:8c:ad:76:b4:1b:69:15:5f:d6:1b:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:A3:1A:78:7E:F5:8E:B0:97:7B:28:C6:5A:5E:74:45:21:72:6B
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/K_KjGnh-9Y6wl3soxlpedEUhcms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.193.0-77.75.195.255
Signature Algorithm: sha256WithRSAEncryption
80:e2:d3:4e:0c:b0:1e:ea:fd:2d:fe:86:b5:8a:5b:d0:09:38:
b6:cf:3a:36:e2:69:bc:b7:d3:89:c5:a6:2e:56:b5:9a:bf:ed:
30:90:95:ba:1b:11:80:a8:11:d6:72:a6:89:be:58:d1:c2:87:
62:4e:69:1e:0d:8f:3a:61:f6:a1:a3:b5:94:c4:27:1b:01:09:
c5:81:6e:7e:54:55:10:0b:62:cd:d4:9d:99:fe:8b:22:70:dd:
70:2b:ec:96:67:b2:4c:24:0c:e8:8f:23:6f:b8:a3:c9:82:f9:
c8:c2:68:a5:bb:24:6d:2f:11:39:62:fb:64:8f:b5:8f:8b:e5:
49:d4:8e:53:3a:66:99:df:48:96:8e:4d:27:07:0b:11:7a:fe:
22:ee:b2:3a:8a:4b:ff:67:1e:20:60:81:a7:bc:bc:43:ed:3d:
56:fc:4e:9a:83:8e:d2:8c:50:1c:3a:7a:91:7b:10:35:f2:b5:
55:01:f4:dd:e8:ec:84:a1:76:bf:70:1a:4b:d6:22:7d:df:d2:
9c:63:2f:d1:7c:07:8c:cf:48:3b:49:dd:b9:b9:02:ec:17:f5:
ae:4a:29:cc:36:d1:30:c8:b6:a9:73:18:13:7a:fc:6d:be:3b:
3d:2d:db:14:78:27:a3:a3:e3:3b:f9:e6:75:96:53:d3:ed:e3:
7b:ca:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:18 2023 by rpki-client on console-fra.rpki-client.org