Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8Y--zT1rClBAl_o8mbzPMY_wfAU.roa
File: 8Y--zT1rClBAl_o8mbzPMY_wfAU.roa (raw, json)
Hash identifier: WIAT45UIqqLgJnu4kPKfEg58nayeAjJE+aNTxNuIQEk=
Subject key identifier: F1:8F:BE:CD:3D:6B:0A:50:40:97:FA:3C:99:BC:CF:31:8F:F0:7C:05
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E885C12683D45075830A2319020FA1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8Y--zT1rClBAl_o8mbzPMY_wfAU.roa
Signing time: Mon 02 Jan 2023 09:55:41 +0000
ROA not before: Mon 02 Jan 2023 09:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:85:c1:26:83:d4:50:75:83:0a:23:19:02:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f18fbecd3d6b0a504097fa3c99bccf318ff07c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:82:2c:b9:27:d2:3a:07:18:fc:1d:9f:b6:
d4:03:48:a1:c9:a8:e8:2b:f8:55:cd:d8:52:f3:77:
a4:ae:89:f9:0e:f6:76:aa:41:c1:d1:4d:fa:7a:57:
41:28:4c:04:e1:11:58:14:87:37:87:f2:53:c1:76:
7a:1b:51:23:87:da:57:29:10:b6:9e:d9:51:b0:0d:
80:33:27:9b:ce:f9:06:8c:5f:7a:3f:e3:c7:17:4b:
b8:73:83:0a:75:3d:fc:9f:69:4c:7c:d7:52:93:4d:
62:4f:7c:aa:80:70:31:5b:b2:67:a9:53:1b:2c:94:
78:58:61:5b:4a:a7:63:4b:83:85:77:4a:da:22:47:
00:66:77:f6:ea:3b:88:5c:ff:d6:8c:6b:9a:e4:59:
0e:31:16:5d:6b:64:ee:c5:b5:9f:87:df:c5:8c:b8:
ae:f2:fe:11:98:6e:5e:42:ea:2c:01:53:ed:6c:e8:
37:d0:7e:29:3f:8c:cf:d2:a9:87:83:56:11:1b:76:
1a:c9:3e:b2:5f:57:f9:5c:2e:ef:bc:19:23:ea:61:
27:d2:db:64:86:8e:26:a8:4c:ae:66:32:8e:a7:13:
d6:e0:52:36:1c:79:ef:ed:ec:9a:3a:0c:c5:92:9d:
78:b8:63:bc:30:72:b0:79:53:a9:43:c0:12:51:f5:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:BE:CD:3D:6B:0A:50:40:97:FA:3C:99:BC:CF:31:8F:F0:7C:05
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8Y--zT1rClBAl_o8mbzPMY_wfAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9f:5f:c9:f5:47:e4:56:3a:83:a8:95:fe:0c:12:86:9c:ec:
be:d9:82:2e:99:e2:d8:fa:5b:3a:92:af:4a:5c:07:23:5b:ba:
84:2e:e7:f0:48:61:84:3b:c4:6c:ff:b2:6e:79:36:da:17:d1:
81:51:47:f1:44:c5:9f:24:04:3c:9f:f5:87:ab:e0:a0:ff:78:
4d:c3:58:eb:1a:df:01:b7:a8:ad:00:86:81:83:9c:d3:48:dc:
98:64:41:c5:8e:04:43:7c:8a:05:13:b4:a3:44:8c:90:f4:92:
9d:36:83:56:bd:12:3e:be:ed:87:2b:20:05:d7:0a:d9:d0:63:
d9:10:d0:e6:45:0d:5a:d2:e9:00:e6:3a:aa:d6:6e:0f:9d:f8:
f5:98:b9:06:6a:d3:ba:e1:73:0f:e6:02:0b:80:db:b7:da:e4:
db:4e:eb:f8:5e:9c:b3:e6:2a:51:c7:b6:11:c9:06:5f:58:c7:
79:8e:a6:ff:e1:53:0b:2e:ce:61:b8:26:97:39:92:6b:26:6c:
8f:4f:e6:5d:32:96:15:89:7f:e4:c6:53:17:45:8b:2c:3f:e0:
ca:b8:3e:e7:b9:14:04:0a:74:8a:0c:23:9e:9f:58:8c:f5:8f:
0c:97:1b:4d:0d:36:36:12:79:c3:ea:95:65:13:f0:ea:db:f8:
14:0b:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 04:43:43 2023 by rpki-client on console-ams.rpki-client.org