Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5VXWfhGfMH_-jAc0CP8gqoMQXzE.roa
File: 5VXWfhGfMH_-jAc0CP8gqoMQXzE.roa (raw, json)
Hash identifier: aerisSoBKng789tKF8jINgeyIMniGQfYENZZdrSEPyY=
Subject key identifier: E5:55:D6:7E:11:9F:30:7F:FE:8C:07:34:08:FF:20:AA:83:10:5F:31
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E89583986F5DD117495C3ABB0B5A45
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5VXWfhGfMH_-jAc0CP8gqoMQXzE.roa
Signing time: Mon 02 Jan 2023 09:55:46 +0000
ROA not before: Mon 02 Jan 2023 09:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212298
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:95:83:98:6f:5d:d1:17:49:5c:3a:bb:0b:5a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e555d67e119f307ffe8c073408ff20aa83105f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:50:73:25:51:fc:5b:73:f8:7f:a2:84:8b:
71:0a:f3:fc:94:74:89:f3:4d:28:3c:02:86:eb:30:
a3:7e:58:63:a4:b6:b4:f2:9c:a8:1e:ef:01:07:f6:
10:28:5d:0e:cc:97:05:01:31:57:1a:b2:ea:26:ea:
dd:0a:96:c9:de:ae:17:24:57:17:b1:2d:83:88:e8:
1c:7c:a2:46:19:47:1c:3e:2f:25:47:e2:5d:12:80:
9f:1b:42:0b:84:7d:c5:ca:39:71:40:d4:86:89:8a:
8f:a3:f7:d8:fd:fa:41:f6:9f:47:e3:3c:30:d6:e6:
05:2b:61:88:b8:42:8e:ba:32:f0:6e:c4:be:9a:ec:
b2:2a:df:24:3a:af:10:53:65:1a:05:77:f1:24:66:
41:e1:47:b8:6c:20:ee:72:1a:e6:32:81:ff:22:7d:
d6:a3:87:16:7e:1f:40:3e:a0:af:06:7d:9a:87:a6:
9d:37:52:cd:af:ab:79:66:07:e1:60:6b:70:50:38:
23:9f:dd:b7:97:6a:da:a3:bb:44:73:24:91:33:73:
01:98:c2:5b:47:3a:04:3d:58:cf:14:59:38:e5:eb:
df:1f:8c:d9:4e:75:7c:f1:23:01:fd:6e:53:82:cb:
af:78:74:4b:88:63:2d:39:f7:90:e5:ec:a6:21:63:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:D6:7E:11:9F:30:7F:FE:8C:07:34:08:FF:20:AA:83:10:5F:31
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5VXWfhGfMH_-jAc0CP8gqoMQXzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:70:32:ad:af:0d:b3:ae:b3:9b:0f:34:3a:9f:68:ba:f0:ff:
07:8f:62:3e:c3:6f:3d:37:7f:f0:dd:1c:de:e3:3a:98:67:b7:
49:aa:f6:d9:d2:63:c2:f2:81:d5:33:9c:f4:41:a8:65:28:80:
17:1b:2c:fd:95:7b:6d:ff:d7:ff:07:f2:ff:dd:e3:b5:e0:e6:
c6:18:68:56:39:3d:49:a3:b1:a2:e8:0a:6f:3d:10:c0:74:10:
51:5e:92:79:70:14:7f:a0:5f:b5:9f:be:f8:88:f9:b7:ea:65:
50:22:5e:8e:d2:b1:96:7f:91:fa:db:ae:f5:ff:46:95:0c:da:
8e:7f:f0:ac:71:74:5e:42:53:60:ad:81:1c:5f:94:a7:d3:51:
12:49:dd:e5:27:35:c0:64:e2:2f:46:85:90:2a:96:ee:78:70:
d1:c4:ee:64:48:2f:9b:4b:b9:9d:85:55:09:d5:07:53:0d:15:
fb:7f:d7:09:2a:de:b7:52:7f:f0:74:fb:bd:06:41:b0:1b:e8:
2a:ed:a7:cb:65:e1:ac:c8:9c:33:98:9c:64:c6:c3:38:02:ef:
f3:d8:1e:32:ed:42:64:b2:28:20:12:52:a4:a9:c8:73:7c:80:
2e:af:93:73:c7:18:0e:14:ee:f6:43:27:f5:e8:b9:0c:a7:ab:
70:08:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 04:43:43 2023 by rpki-client on console-ams.rpki-client.org