Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/oQEhPw4Hr567zTmcZ9XwOHkdx2c.roa
File: oQEhPw4Hr567zTmcZ9XwOHkdx2c.roa (raw, json)
Hash identifier: K+ggse9y5BMNGQShJJX3KMcSRUpKNhpekcgCe3PJa04=
Subject key identifier: A1:01:21:3F:0E:07:AF:9E:BB:CD:39:9C:67:D5:F0:38:79:1D:C7:67
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01857142F81ED42FEAC14C9B08D3DBFE8E24
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/oQEhPw4Hr567zTmcZ9XwOHkdx2c.roa
Signing time: Mon 02 Jan 2023 06:54:52 +0000
ROA not before: Mon 02 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201913
IP address blocks: 185.77.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f8:1e:d4:2f:ea:c1:4c:9b:08:d3:db:fe:8e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jan 2 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a101213f0e07af9ebbcd399c67d5f038791dc767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:e7:90:40:3d:d5:19:fe:c6:6d:bd:e8:24:
2c:a3:7c:d6:39:6a:38:c6:7c:ed:e8:2a:c9:75:41:
ff:48:8c:a3:a9:6d:46:f8:dd:c5:fe:0c:5d:d8:bf:
7d:d0:09:0a:54:29:b3:d9:c6:38:e9:ca:ab:7a:a0:
ae:0e:80:83:22:ef:76:c9:f2:75:48:87:43:f1:3b:
c2:eb:cd:40:e2:8f:80:f5:76:31:b4:5d:db:f1:87:
b0:82:6b:37:c0:4c:90:2c:83:c8:4b:3b:4a:fd:6f:
ac:02:5a:22:c4:8f:9c:b0:25:54:9c:c0:14:b7:35:
a5:47:c4:a4:a4:ec:b7:9f:8c:0b:ed:de:2e:64:63:
85:78:ae:9c:4d:cb:37:bd:f0:9a:24:68:4d:c3:f4:
84:20:c2:7d:6c:77:78:24:27:fa:64:bb:21:37:75:
a2:f8:4d:ec:77:d7:36:4b:21:ba:ed:78:80:0b:62:
0f:bd:fc:a1:92:25:d6:9f:75:63:6b:85:10:3f:3a:
22:4a:44:b7:7e:49:08:5f:78:65:56:25:77:8e:f9:
49:21:9f:5c:9a:8a:a3:56:27:ab:46:c1:2f:4b:cb:
dd:85:f7:9e:71:d6:3c:91:a8:7f:6a:b5:14:59:30:
68:ea:12:7b:f4:a6:5a:1e:23:dc:e2:59:02:5f:50:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:21:3F:0E:07:AF:9E:BB:CD:39:9C:67:D5:F0:38:79:1D:C7:67
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/oQEhPw4Hr567zTmcZ9XwOHkdx2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a3:4e:e0:c0:20:73:6c:50:c2:97:a8:ca:ab:ee:ca:70:e4:
99:68:60:9d:f1:56:5c:1a:10:db:16:65:e2:63:17:d4:62:ec:
28:1a:21:09:31:e3:d0:4b:2c:20:67:d6:4a:32:85:f0:00:ae:
c7:c9:f8:d4:42:9f:5a:7c:7d:74:09:4f:3e:84:b8:b7:69:b5:
df:ca:fb:06:fe:7c:b3:e8:74:54:98:5c:6d:56:6b:e0:8a:56:
c8:71:4f:ad:2d:49:fe:27:02:a2:ae:5c:4e:b9:1c:f5:54:90:
68:b2:60:1f:fb:12:3e:57:66:50:06:94:64:d2:cc:c9:62:e2:
85:39:d1:66:c1:c3:99:87:a6:e0:b9:18:2c:f5:ec:c9:30:0e:
5b:88:07:33:94:95:43:24:10:8e:ea:08:c6:c6:d4:61:50:8d:
ba:86:d3:1d:e9:5e:6b:c8:7f:2e:d7:d9:62:24:c0:ef:39:e3:
5c:44:a6:5f:71:18:36:ef:81:11:d2:4f:aa:04:75:de:ee:ec:
16:aa:ad:6a:44:33:cd:a9:0b:37:43:16:7f:fa:86:d3:fe:4a:
a7:c3:b5:18:33:9f:40:5a:b0:6a:56:22:d3:e4:55:a4:c6:aa:
9e:06:c8:eb:a2:b2:c1:c3:ee:ad:4e:ae:26:54:4d:c4:71:4f:
56:57:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:35 2024 by rpki-client on console-ams.rpki-client.org