Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aFVBRUkHpMGfaUGVRrN1owEtPDY.roa
File: aFVBRUkHpMGfaUGVRrN1owEtPDY.roa (raw, json)
Hash identifier: P7stOlKPC9f/QiwTuoTr0GG2UmVDC3GxSEbUlMlcJBs=
Subject key identifier: 68:55:41:45:49:07:A4:C1:9F:69:41:95:46:B3:75:A3:01:2D:3C:36
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185962843F5BA08C7BBB00732CA5A78FD7D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aFVBRUkHpMGfaUGVRrN1owEtPDY.roa
Signing time: Mon 09 Jan 2023 10:51:39 +0000
ROA not before: Mon 09 Jan 2023 10:51:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:28:43:f5:ba:08:c7:bb:b0:07:32:ca:5a:78:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 9 10:51:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=685541454907a4c19f69419546b375a3012d3c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:cf:5b:7d:a2:eb:08:81:20:0d:57:8b:61:
f2:74:f8:91:75:25:62:5f:57:4c:92:19:12:c0:d9:
a1:01:d3:60:e2:79:b7:47:9e:5e:71:1a:9a:3c:5e:
c9:ec:d0:20:a8:16:16:a9:a8:e5:04:d3:66:ba:19:
cd:88:2a:4a:df:fd:bb:f4:27:b0:08:4f:bc:87:5a:
25:63:a0:d0:3c:54:26:86:d8:0f:7e:75:6d:03:ae:
5e:00:25:54:0c:63:b7:c8:c9:47:e9:89:07:13:90:
11:7f:89:af:df:c3:bf:e8:b9:84:1d:27:cb:ec:7c:
1d:48:89:67:c0:12:10:17:d9:7e:b4:30:4f:eb:f3:
71:f1:3d:74:05:25:00:c1:5f:d9:c4:89:e4:f2:f3:
ba:85:00:48:01:53:6e:e9:df:5a:c8:b7:ba:97:e8:
e7:ac:01:09:1c:66:dd:e7:fd:30:87:b6:86:0e:d6:
99:f2:59:56:f4:84:e5:50:c8:0a:4e:0c:76:20:6d:
ea:fc:73:b3:8a:57:75:38:22:4c:2e:85:9a:c1:4f:
ec:90:d2:5a:95:8e:1c:1c:87:dc:06:98:c2:0a:5f:
14:1a:0d:15:a9:d0:a8:dd:67:03:68:4c:8f:33:ae:
e2:b3:18:b0:2c:c4:8a:a3:0c:fb:68:6c:80:d7:1e:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:41:45:49:07:A4:C1:9F:69:41:95:46:B3:75:A3:01:2D:3C:36
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aFVBRUkHpMGfaUGVRrN1owEtPDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
01:f6:7d:89:13:88:23:f0:74:e0:71:1d:3e:5e:ff:0b:f7:5f:
24:07:02:04:28:ad:55:aa:b4:91:14:12:99:5e:bd:e5:4b:a0:
f6:26:f8:41:4c:be:3e:7c:9f:0b:24:ef:98:0d:ff:e7:7b:46:
23:6d:1c:8f:ae:9e:95:61:8a:d6:d9:22:a3:41:8d:2d:f8:8c:
c2:c6:de:14:5f:37:de:ae:b2:22:a7:e7:3a:3c:9d:15:29:c8:
09:e0:3f:9d:1f:31:bb:fb:56:5e:61:52:52:f4:56:f3:b9:85:
b7:60:0d:f1:1a:01:71:8c:ae:74:b8:21:93:ed:2b:82:df:f0:
b0:51:f3:5e:cc:4e:72:55:99:29:f7:f6:11:11:40:9b:05:9f:
93:22:4b:82:2c:e0:77:32:3d:ce:97:81:72:1d:cf:cc:15:eb:
b1:63:af:0f:82:3b:9e:7d:92:18:2b:11:32:3b:35:a0:8c:af:
49:64:1d:ce:52:fd:bb:51:45:b1:5e:c4:22:87:a6:38:27:b8:
5c:77:76:d9:b8:e8:59:4f:db:0e:38:b8:1b:b2:62:3c:e9:a9:
ea:3f:fd:b6:04:e5:78:69:3d:65:e9:29:50:30:d9:ae:e5:db:
30:31:af:0f:35:ac:b9:5e:11:77:53:13:91:b0:04:ce:b9:b4:
27:f9:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org