Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fU3UdGSTcvPm7ivKqbV_PwxkNHA.roa
File: fU3UdGSTcvPm7ivKqbV_PwxkNHA.roa (raw, json)
Hash identifier: T8AKV/stRVkyuLFA0Fp03tk8zXCxo7Zhbta9D2tG3rY=
Subject key identifier: 7D:4D:D4:74:64:93:72:F3:E6:EE:2B:CA:A9:B5:7F:3F:0C:64:34:70
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0185D3A2271CA6A1BD29139DBE7EDA550FD4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fU3UdGSTcvPm7ivKqbV_PwxkNHA.roa
Signing time: Sat 21 Jan 2023 09:21:37 +0000
ROA not before: Sat 21 Jan 2023 09:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 92.119.164.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 11 Feb 2023 10:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:a2:27:1c:a6:a1:bd:29:13:9d:be:7e:da:55:0f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 21 09:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d4dd474649372f3e6ee2bcaa9b57f3f0c643470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:91:9a:f3:6a:70:1e:4d:e7:f4:a6:94:43:
11:ea:66:6d:8b:e8:58:15:93:52:74:a0:e0:e0:9f:
4a:dd:e9:05:94:9e:12:76:36:3b:46:05:13:e5:63:
9f:bd:21:b8:40:55:f5:2a:39:55:52:27:ab:d8:86:
b5:23:11:dc:60:98:b8:04:ca:18:3e:a3:86:84:b5:
a7:84:d1:0d:8b:aa:0f:5d:29:1d:df:ec:3f:e5:8e:
22:ed:9a:d1:6e:72:cc:db:ee:85:e2:59:35:d3:43:
d6:47:ff:cd:2a:6b:92:66:7a:e0:36:cc:75:ee:95:
c5:df:4f:e1:46:5c:7b:b1:15:34:5b:5e:0c:d9:18:
56:ff:94:c2:3d:5d:00:15:2f:af:36:4b:b2:ef:13:
97:b7:d8:d8:c7:55:57:e0:f4:f6:35:ed:76:88:4a:
28:ab:ad:db:c4:1a:bd:b2:47:13:59:84:62:d2:32:
a0:0a:6f:cb:aa:93:e3:a3:d6:fe:09:4d:b6:e0:49:
cd:44:72:04:61:b2:bb:4d:07:ab:c0:e0:dc:de:72:
22:11:04:2d:93:e4:4d:db:a0:95:e0:74:51:5c:9c:
99:c7:16:54:6b:4e:13:b5:b4:16:b6:54:fc:64:f6:
0a:68:b1:59:28:ac:74:10:9d:7f:7b:54:34:63:4d:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:D4:74:64:93:72:F3:E6:EE:2B:CA:A9:B5:7F:3F:0C:64:34:70
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fU3UdGSTcvPm7ivKqbV_PwxkNHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.32.0/22
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
71:ff:8e:40:25:b2:fe:62:70:8f:9e:31:19:44:cc:77:4c:7e:
da:a5:e3:46:0e:e5:cf:f7:b8:51:47:e9:0a:c5:6b:b9:aa:c2:
15:49:21:e9:55:be:6b:45:59:c9:e2:4c:67:30:4a:c4:7c:7c:
81:a0:a2:e5:3c:40:4f:ff:e9:11:85:dc:84:ab:35:5f:fa:56:
9c:50:c6:76:01:8e:43:6c:c3:c9:0a:23:5e:78:84:63:98:24:
c9:bb:5c:f1:2c:6f:be:20:10:d8:c9:20:f3:82:b7:a7:79:e3:
72:7f:b4:aa:c9:fc:3f:2b:f5:26:b4:f9:a2:60:43:a4:8b:6d:
a3:50:68:29:1f:e4:cb:94:c1:d2:70:b2:5b:79:0d:06:7c:98:
aa:63:e1:86:66:ad:ea:50:d3:e5:ee:5b:58:91:f5:5c:e1:b5:
20:01:ba:28:5e:6c:2e:5a:a0:74:7c:17:b1:85:a5:d5:65:ae:
7e:48:71:e5:17:38:69:fb:b6:de:43:36:e8:25:e4:c3:49:10:
f0:7f:5c:1b:07:f0:7c:d2:67:7e:31:e8:3a:eb:88:8e:6f:43:
be:f5:89:1a:d2:e6:de:8d:31:70:04:11:45:09:3f:62:ec:fd:
65:2a:ad:0d:cf:0e:e3:42:3c:64:e2:ae:4d:b3:80:b9:74:1e:
e0:3c:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org