Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/0PDzpEEvZbTh_kdGGml6f7rHsXY.roa
File: 0PDzpEEvZbTh_kdGGml6f7rHsXY.roa (raw, json)
Hash identifier: C5YM7yjWDr3ooUOhd6wV0X4Wx1rEdWoZ3kbvld/Z/BQ=
Subject key identifier: D0:F0:F3:A4:41:2F:65:B4:E1:FE:47:46:1A:69:7A:7F:BA:C7:B1:76
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 0188F861292AAE459573B40E996B48C4F8A9
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/0PDzpEEvZbTh_kdGGml6f7rHsXY.roa
Signing time: Mon 26 Jun 2023 15:44:56 +0000
ROA not before: Mon 26 Jun 2023 15:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39135
IP address blocks: 77.238.64.0/19 maxlen: 19
185.73.56.0/22 maxlen: 22
46.229.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 20:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:61:29:2a:ae:45:95:73:b4:0e:99:6b:48:c4:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jun 26 15:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0f0f3a4412f65b4e1fe47461a697a7fbac7b176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:70:c1:8e:c7:6e:56:76:77:a5:ae:3d:7e:
40:fb:33:55:14:a4:32:b2:22:07:1c:42:bf:12:fd:
1d:0e:c0:56:58:55:ca:75:8f:f2:4c:10:c6:89:82:
0d:c2:9f:ec:98:59:f7:1e:26:3b:1d:8d:53:db:5b:
dc:82:15:ea:7e:5f:5d:69:10:6b:d1:ed:e5:a1:35:
48:a8:5e:c0:bf:ac:95:04:93:07:21:bc:9b:f4:1b:
0c:3f:d8:93:fc:83:cb:0b:d8:33:6a:5d:79:5c:54:
e0:98:b7:c4:bd:4f:88:6a:59:f5:c2:85:d5:ec:46:
c1:71:c0:3b:4a:51:0e:73:ef:fb:bd:1e:c2:a4:2f:
8f:07:3a:6c:8a:00:11:e9:f5:5a:59:91:39:b5:37:
5f:b2:1a:e8:ef:d3:b2:c0:f0:57:e3:9b:f9:30:ab:
0b:5b:2e:3d:f2:84:aa:42:e0:68:d5:c8:24:89:e1:
16:1a:86:46:d8:1a:78:7a:d7:fa:42:f0:c2:61:11:
35:01:6e:b5:52:57:de:9e:45:24:8a:3f:d2:d4:8f:
6a:dd:b6:2d:24:6c:4c:2d:2b:59:5c:c8:2a:d2:25:
a3:f9:e5:9e:dd:af:f3:f7:2e:cb:15:db:53:d9:10:
28:79:fa:d8:a5:e3:a8:5c:6a:95:c4:0d:e9:88:a2:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:F3:A4:41:2F:65:B4:E1:FE:47:46:1A:69:7A:7F:BA:C7:B1:76
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/0PDzpEEvZbTh_kdGGml6f7rHsXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.247.0/24
77.238.64.0/19
185.73.56.0/22
Signature Algorithm: sha256WithRSAEncryption
98:fc:60:cc:a0:2a:0f:6f:cd:36:9b:13:b1:e2:3d:5c:e2:0a:
c9:f5:ba:c8:7f:f3:48:8b:27:f2:cb:82:88:1c:01:cd:41:de:
5d:57:95:42:64:77:c5:0f:11:9d:15:62:14:50:8b:fc:35:ee:
02:c3:c8:6d:20:34:45:3f:c5:51:5f:f5:2f:e4:29:85:b7:c8:
7d:91:31:29:5c:28:e5:f8:bb:80:df:33:fa:72:29:02:82:fd:
08:e4:5a:c9:8e:ce:08:4f:e6:0b:3f:c6:ba:27:99:fd:cb:53:
4f:f2:5d:12:74:b2:b7:e8:75:ee:6c:4a:8b:d8:98:13:7d:98:
2f:d5:a1:f0:8f:4e:d5:f7:09:06:b2:02:64:4f:e0:9d:dc:d1:
75:16:a4:71:4d:cc:5a:a0:28:12:c4:d7:20:ae:d8:25:90:27:
d0:13:52:30:f9:12:e5:dd:3b:15:0d:36:f1:b6:75:d9:88:86:
d6:77:6a:b5:a8:e8:ca:f1:e5:e3:50:40:13:17:91:04:0a:c0:
a3:09:15:64:66:63:bc:e9:ae:4b:48:74:d1:ba:02:83:cb:6e:
76:ae:5e:ce:0d:5e:aa:e5:cb:9c:d6:02:4b:81:27:73:53:9a:
a6:93:60:cd:9a:f2:5a:6b:ff:63:da:af:eb:3f:28:10:16:26:
0d:46:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:06 2024 by rpki-client on console-ams.rpki-client.org