Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/SEsxJGBRXwbhZBBfbQiQv4smvoY.roa
File: SEsxJGBRXwbhZBBfbQiQv4smvoY.roa (raw, json)
Hash identifier: h2YIXuPJrgesDN2U5dnBq17BDJ8iYmwT7QiIUbUmWFg=
Subject key identifier: 48:4B:31:24:60:51:5F:06:E1:64:10:5F:6D:08:90:BF:8B:26:BE:86
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 01895591E470ACF210787B497332EAB1625C
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/SEsxJGBRXwbhZBBfbQiQv4smvoY.roa
Signing time: Fri 14 Jul 2023 18:02:51 +0000
ROA not before: Fri 14 Jul 2023 18:02:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/24 maxlen: 24
77.75.194.0/24 maxlen: 24
77.75.195.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:91:e4:70:ac:f2:10:78:7b:49:73:32:ea:b1:62:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 14 18:02:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484b312460515f06e164105f6d0890bf8b26be86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:76:12:62:68:b5:a3:f7:a9:fa:9b:32:f7:
0a:a1:4d:bf:a6:b6:04:93:66:78:5d:a4:df:55:7f:
49:47:50:15:cc:f8:08:e2:17:c0:81:71:7e:1f:f7:
69:e1:01:4c:10:ac:59:47:e3:76:5f:ed:1f:10:04:
62:07:49:59:fa:ca:14:9c:55:7f:c7:d1:6f:37:f4:
89:a7:0d:cb:62:89:0b:a7:40:6c:bc:35:c1:ed:1b:
9d:fc:1c:c5:4a:5f:dc:04:a0:d4:69:69:5b:29:c1:
b5:02:9b:77:9d:ad:62:de:15:b4:ee:70:75:3e:9b:
f8:e9:83:32:52:b6:9e:5f:a0:61:ea:d2:47:e0:3a:
39:f8:7e:c7:b1:ae:8d:3b:2a:5f:1c:a1:29:74:2f:
cc:a2:6b:6f:0d:f7:d7:67:37:24:01:34:cb:98:32:
9a:b5:45:2e:34:9f:58:b2:c7:a9:e5:9f:7b:c3:54:
e1:41:ae:49:a9:8c:4b:14:1e:23:a8:c2:69:bc:82:
29:a3:1c:9f:11:1c:bc:b8:68:0f:51:34:c4:0b:0b:
fb:0c:6d:8f:00:83:68:32:33:36:67:1f:94:cb:9c:
3d:aa:40:20:9a:f6:f6:b8:fb:8d:90:8b:82:86:62:
1e:08:85:6c:48:0a:38:4d:0f:4d:a4:04:b6:e1:2c:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:31:24:60:51:5F:06:E1:64:10:5F:6D:08:90:BF:8B:26:BE:86
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/SEsxJGBRXwbhZBBfbQiQv4smvoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0-77.75.196.255
Signature Algorithm: sha256WithRSAEncryption
52:6d:04:1f:9a:73:08:38:87:39:15:88:5a:df:d0:0a:70:3b:
79:36:35:08:a1:0e:d5:b9:ae:d5:49:7c:33:f4:42:aa:cc:25:
e4:1d:b0:00:4b:c3:b1:88:8b:dc:6c:2a:7b:3d:1b:f6:d0:eb:
b1:c2:54:af:00:ee:41:c0:1a:c0:bf:f6:cd:97:53:f7:57:34:
86:03:b9:44:0a:03:98:2e:7b:5e:a8:6d:31:53:55:c0:d7:df:
c6:7d:79:9e:ab:12:7c:48:e1:46:2b:8e:c4:59:b5:f3:11:f4:
a3:75:5c:a4:e1:ba:15:06:d8:d9:94:5b:93:26:31:42:ae:2f:
40:0c:74:09:34:64:b5:cb:93:3e:37:80:0a:f1:c7:d0:9d:98:
76:c9:64:a7:60:48:8c:7e:54:18:12:bd:c0:bf:df:9a:0b:ef:
16:05:fc:37:d1:ae:07:54:d0:c9:07:f9:68:4f:54:90:84:da:
54:e0:b1:fa:f1:ed:63:9c:ac:df:ee:14:f2:26:ec:28:7f:85:
58:de:73:f0:b2:35:f1:9d:ba:3b:7a:a8:ef:15:15:2f:01:aa:
df:e2:6c:2b:cc:4c:2a:e0:4b:a5:29:51:d9:23:26:13:24:e8:
2a:e1:28:f3:39:18:0f:48:20:cf:c6:03:ab:b4:8d:53:47:ed:
f0:69:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:18 2023 by rpki-client on console-fra.rpki-client.org