Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vD4yl8gqvr9xJ4JXWbFCWE8G7hI.roa
File: vD4yl8gqvr9xJ4JXWbFCWE8G7hI.roa (raw, json)
Hash identifier: 3DJ7BUZYz/lJ65AOvoTSBhwLRx/RkCDivh+jfSHQOC8=
Subject key identifier: BC:3E:32:97:C8:2A:BE:BF:71:27:82:57:59:B1:42:58:4F:06:EE:12
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA7B83EF7A95DB36587DF6BDC6C1F3
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vD4yl8gqvr9xJ4JXWbFCWE8G7hI.roa
Signing time: Mon 02 Jan 2023 13:45:01 +0000
ROA not before: Mon 02 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41097
IP address blocks: 77.79.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:7b:83:ef:7a:95:db:36:58:7d:f6:bd:c6:c1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc3e3297c82abebf7127825759b142584f06ee12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:da:64:09:d5:e1:b3:51:1c:c6:14:4f:0e:
12:1d:52:cf:77:10:71:b2:eb:25:a6:96:0d:18:9d:
be:f1:c6:14:b8:d6:55:7c:eb:dd:f6:e3:98:28:9f:
5f:48:0b:37:c3:2c:93:47:fc:63:a4:31:f0:58:bf:
5d:18:a7:8c:af:62:ce:02:06:d9:6f:af:8b:e0:2c:
42:d0:8b:38:03:da:ce:dc:a4:bc:a5:0c:7c:32:0b:
f5:7f:27:2b:7e:97:f5:a4:7f:bd:8c:f0:9f:90:0f:
d5:b5:94:6a:32:dc:25:24:56:bb:02:aa:67:93:48:
04:0e:db:d9:0d:de:66:6a:ea:86:94:4b:c3:8d:08:
50:09:a4:1b:dc:8a:f1:3e:fe:6b:40:a0:85:f5:a8:
09:89:88:2d:d3:2a:f3:9e:bf:99:e9:63:4d:6e:21:
0f:51:cd:9c:55:f6:32:02:9e:2b:6b:04:17:7f:a8:
c6:c7:bc:65:15:99:00:74:e7:19:a4:56:17:b8:44:
e9:71:46:27:6c:75:1e:47:97:b3:2d:5d:77:1b:b1:
f3:c6:a7:32:8f:ec:1e:56:09:51:cb:d8:81:9f:1f:
97:b4:28:87:e9:99:e7:8b:fc:38:c3:ef:2f:27:68:
51:77:39:b0:bb:93:ab:87:9a:9c:ce:8b:85:6a:c4:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:32:97:C8:2A:BE:BF:71:27:82:57:59:B1:42:58:4F:06:EE:12
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vD4yl8gqvr9xJ4JXWbFCWE8G7hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.205.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:30:73:67:dd:6b:ea:b7:78:2a:33:de:83:c4:1c:4e:a8:90:
b7:b3:52:29:4c:b5:12:c2:71:e2:a7:78:68:4d:f2:9b:ab:35:
21:5f:96:24:bb:51:e9:b9:2c:cb:38:f0:53:93:43:48:cc:97:
69:20:e9:d2:50:4e:be:e3:65:33:eb:c5:b1:17:48:20:d5:9c:
8a:9c:93:67:1e:63:fc:ca:12:0d:a5:cd:83:76:38:ca:7e:d4:
18:b2:42:63:1e:f7:e0:9b:ab:ae:47:98:6b:c5:d6:4c:f6:3e:
76:79:06:05:76:12:9e:14:77:14:f3:3c:53:cc:93:24:5b:e7:
21:38:6a:da:94:b7:0b:cf:14:5a:c3:66:76:42:bd:c8:4f:cf:
55:59:64:d5:69:88:df:5e:68:48:e5:37:c2:60:ce:4e:a8:6e:
d0:5b:de:de:84:c0:4f:80:83:cf:cf:4b:da:2b:42:2b:9a:6e:
38:7d:ac:06:c1:39:11:a8:9b:cb:98:63:31:b1:03:23:80:35:
4d:21:5e:91:50:db:32:5e:7b:c0:72:04:18:ec:82:74:fc:33:
de:0c:11:47:e1:dc:30:c5:9e:37:db:ca:ca:54:dc:91:06:f9:
e0:e2:79:cd:5d:17:62:b1:5f:a7:e5:63:75:e3:49:f4:a0:88:
8e:21:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:48 2024 by rpki-client on console-ams.rpki-client.org