Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueoPP1v2hbiF5OQBK1GRoT7WD7I.roa
File: ueoPP1v2hbiF5OQBK1GRoT7WD7I.roa (raw, json)
Hash identifier: 4yrHL9vHMnWTTlUNoeN+o9h7v/wYi+VZ+p1umCUxL5U=
Subject key identifier: B9:EA:0F:3F:5B:F6:85:B8:85:E4:E4:01:2B:51:91:A1:3E:D6:0F:B2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BBFFCCB97FF3A50F5F52C7F19FA8E6335
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueoPP1v2hbiF5OQBK1GRoT7WD7I.roa
Signing time: Sat 11 Nov 2023 20:04:57 +0000
ROA not before: Sat 11 Nov 2023 20:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44714
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:fc:cb:97:ff:3a:50:f5:f5:2c:7f:19:fa:8e:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 11 20:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ea0f3f5bf685b885e4e4012b5191a13ed60fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:1a:82:21:0f:e3:82:69:1b:0c:ff:a2:c9:
f2:df:eb:42:d0:e2:0d:fe:a4:93:f3:93:a8:07:8b:
c4:84:16:83:f5:4d:32:f3:cc:d7:e6:3f:f4:a1:9a:
73:77:28:e0:bc:88:57:f1:d0:69:41:24:52:f3:86:
35:2a:6b:3e:fd:74:71:75:a6:98:5f:e6:ba:f8:02:
63:ba:40:7c:4e:07:25:a8:2c:fa:61:35:7c:4e:40:
fb:18:e2:6d:cc:3a:b5:bc:94:ca:f5:43:27:25:c6:
d6:5a:15:3c:3f:59:42:64:df:7a:fd:56:e9:c0:2c:
c3:83:20:26:09:44:36:86:35:bc:85:63:d4:63:99:
75:01:bb:20:58:a1:71:86:f3:74:c1:43:9a:65:8e:
f5:d3:97:74:d4:bb:28:28:24:31:12:0f:d9:b3:96:
de:7f:f8:15:f0:1a:82:ca:33:5b:bd:23:f6:47:0f:
ac:70:17:63:e4:47:69:12:9c:0f:52:29:a8:1a:fd:
8d:98:0d:c8:1b:b0:3a:8b:e9:af:0b:8d:0e:1a:bd:
ef:f0:de:5a:45:7e:b3:f9:9c:7b:9d:5f:ce:b7:4e:
af:2e:ef:e6:1a:90:be:9e:bc:44:82:55:dd:af:b2:
c6:d6:62:47:ce:e0:d7:62:42:90:41:56:ee:f7:81:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:0F:3F:5B:F6:85:B8:85:E4:E4:01:2B:51:91:A1:3E:D6:0F:B2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueoPP1v2hbiF5OQBK1GRoT7WD7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d4:f2:21:f8:ea:56:81:50:31:89:85:ba:a8:74:cb:8c:61:
b2:39:ac:08:c8:d0:79:1e:c6:39:97:0c:f8:45:41:5b:42:22:
30:f9:41:13:89:51:a0:b8:4b:b7:20:e8:c3:01:d0:e2:ad:2d:
43:63:9a:70:5f:dc:7f:a6:dd:19:1f:49:38:6b:cc:16:38:68:
18:89:24:e3:fb:3a:e1:3f:76:10:20:02:4e:fe:35:19:d0:29:
c2:02:7a:f1:37:49:b5:50:e8:5b:1b:ab:19:10:54:e8:83:c7:
a3:f6:dd:45:d6:e6:cd:e7:3c:db:7e:f8:b7:74:42:34:82:d5:
f9:3b:a8:7c:f9:56:1a:f8:82:7e:b1:e0:7f:3d:82:e4:58:dc:
fa:02:81:32:ae:5d:7a:f3:62:f2:05:a9:0f:76:dc:2a:32:e7:
bb:5a:25:93:67:1a:21:ac:4c:42:f8:6c:b9:96:d6:90:25:b7:
fb:ef:eb:31:f2:a4:0f:8b:8c:08:0d:42:5b:b4:08:12:a2:61:
69:e2:a5:08:50:fe:ee:ab:b7:39:14:28:b1:22:e3:e4:3b:1f:
a8:09:91:c0:99:77:30:3a:42:f0:78:a3:19:e2:06:65:0b:c5:
fa:ef:de:b6:11:30:cf:09:37:a4:9c:24:ce:4b:a2:42:d8:6c:
b2:58:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 22:12:49 2023 by rpki-client on console-fra.rpki-client.org