Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/5jpMDbhdMBk5LyyHzYo_SMxw55o.roa
File: 5jpMDbhdMBk5LyyHzYo_SMxw55o.roa (raw, json)
Hash identifier: GZUpzAQlztVLPrdgAwAVZN3hbKzlBmqIG0+zqb/BrQ8=
Subject key identifier: E6:3A:4C:0D:B8:5D:30:19:39:2F:2C:87:CD:8A:3F:48:CC:70:E7:9A
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 0185723A0D1583FD0C21E25F8008E25564CD
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/5jpMDbhdMBk5LyyHzYo_SMxw55o.roa
Signing time: Mon 02 Jan 2023 11:24:45 +0000
ROA not before: Mon 02 Jan 2023 11:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 77.223.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:0d:15:83:fd:0c:21:e2:5f:80:08:e2:55:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Jan 2 11:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63a4c0db85d3019392f2c87cd8a3f48cc70e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:82:c6:9c:5b:73:a0:59:9e:f4:54:a2:9b:
0b:de:eb:4b:c5:76:88:48:5e:bf:ed:77:05:19:d5:
20:20:37:e9:ae:96:e2:38:d7:dd:95:d6:36:a9:d5:
73:78:e8:3d:5f:01:4c:af:e1:fa:74:19:9e:1b:5d:
fd:2e:f3:cb:d1:52:ea:00:3c:43:1d:b4:45:ef:17:
79:6d:85:64:c7:59:b5:40:c5:71:3b:dc:23:15:6d:
9d:3d:ba:cd:0f:48:1e:2c:e5:bb:b1:3c:de:d0:af:
70:21:b6:3c:2a:f3:4d:48:29:31:bf:ae:96:d7:7e:
e3:59:2c:48:db:6a:50:be:d8:67:f8:f6:26:00:1c:
1f:1b:2c:90:d0:12:24:26:b2:48:c2:97:59:ce:c9:
1b:ab:d6:c3:59:26:c0:e7:89:29:56:62:67:0d:e7:
27:a0:29:65:6b:b8:9d:e5:97:2b:08:55:8a:93:c4:
50:29:a8:c4:68:6b:54:73:fd:c0:00:67:3a:72:f9:
61:62:ef:31:eb:52:38:87:21:5e:82:22:6a:f9:27:
4b:8d:51:52:84:56:0e:2a:85:bd:29:ef:98:59:41:
b6:e0:e8:7c:e4:e0:14:07:61:22:92:07:03:cb:43:
98:d4:0a:d9:e5:8f:1e:4e:4a:06:48:39:f0:a4:f2:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3A:4C:0D:B8:5D:30:19:39:2F:2C:87:CD:8A:3F:48:CC:70:E7:9A
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/5jpMDbhdMBk5LyyHzYo_SMxw55o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.160.0/24
Signature Algorithm: sha256WithRSAEncryption
66:25:8f:a4:43:79:0c:12:fd:c7:45:cd:65:6d:96:a9:c6:60:
4d:c7:c9:bf:84:9c:95:22:f0:69:05:53:ec:98:8b:fd:58:d3:
ac:d9:fa:5c:71:fb:fc:3b:d4:22:74:bb:ec:bf:f3:1a:d9:3e:
5d:b7:d3:70:6f:72:03:e7:c0:d7:ad:51:f8:94:4c:b0:73:31:
28:c6:b7:7d:fe:0e:bd:2d:33:7c:2f:0b:a1:fa:e4:95:ed:56:
f4:df:61:e1:aa:b0:0e:94:4c:f8:51:ef:74:5c:ff:92:ab:1d:
51:91:99:bc:00:4c:0d:da:03:a9:6e:0a:eb:33:db:eb:d4:21:
05:88:95:29:76:f4:5d:fd:9a:30:49:cd:93:47:2e:bf:40:ff:
a6:e1:63:de:72:cf:cd:21:36:0c:dc:d9:ae:1a:6d:1a:13:c5:
18:4b:bc:10:8b:9c:c0:93:be:c5:0d:01:cf:f4:27:db:c2:86:
7c:b7:8e:b6:10:2d:15:e9:77:7e:ea:f1:14:96:72:be:1c:e2:
98:8d:d3:ae:82:06:03:cf:c4:81:3e:27:9a:8b:49:50:fa:87:
2b:19:de:05:7d:d5:ba:4f:31:44:d9:7c:28:c1:29:91:e5:bf:
79:b3:5b:f4:1d:70:d7:6c:6e:12:19:a1:22:a1:7f:b9:b6:bb:
96:e7:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org