Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/cEP5FyS86MRbdnifTIK_RvhXHKw.roa
File: cEP5FyS86MRbdnifTIK_RvhXHKw.roa (raw, json)
Hash identifier: YsWyFoCZm8Esq5qMlq/WAmQvsYfpDTyPpGVTBKZCrJw=
Subject key identifier: 70:43:F9:17:24:BC:E8:C4:5B:76:78:9F:4C:82:BF:46:F8:57:1C:AC
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 0187DC34D6F52B72774BF3720F33E156FBA7
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/cEP5FyS86MRbdnifTIK_RvhXHKw.roa
Signing time: Tue 02 May 2023 11:24:23 +0000
ROA not before: Tue 02 May 2023 11:24:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 77.232.132.0/22 maxlen: 22
77.232.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:34:d6:f5:2b:72:77:4b:f3:72:0f:33:e1:56:fb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: May 2 11:24:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7043f91724bce8c45b76789f4c82bf46f8571cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4d:86:ee:f6:c6:93:65:f0:59:ac:76:51:3a:
48:1f:0b:96:14:02:80:68:93:7a:f6:2c:a2:3e:d8:
cc:dc:39:56:77:7b:f7:ea:27:41:79:56:13:ef:8d:
8a:60:9d:c8:b2:0a:1f:7f:8f:07:c6:1b:18:ab:aa:
82:4e:ea:c3:b7:95:e8:d0:3e:25:e9:6b:c5:fa:aa:
24:f6:22:3a:2d:89:8f:60:ee:1d:5f:76:e6:a4:71:
05:7c:f6:a1:a5:3f:b0:7b:02:bf:f7:f4:cb:84:05:
f1:70:bf:35:03:88:90:b3:5d:1e:c2:86:fb:4f:c6:
87:47:b0:69:6d:9c:62:9d:19:6d:bd:17:63:f4:4a:
94:ad:dc:5c:f7:d9:e0:97:04:69:41:3f:45:8e:f6:
70:ad:e9:7a:0e:84:0f:55:1b:fd:0a:3b:9a:1b:9c:
57:a2:78:64:9d:a3:0a:ee:e3:f4:eb:7a:5d:80:15:
66:2e:75:d5:ce:d3:3a:d2:60:0b:da:20:70:ef:81:
4d:d2:c4:44:29:98:e4:ff:2b:df:07:a7:25:ae:e6:
d6:87:63:65:e0:0f:35:2b:c6:5f:66:f5:15:a0:a3:
66:81:db:cf:f5:33:e8:95:e4:ed:a6:95:1c:7a:50:
d6:d7:0d:3f:2a:e5:f3:76:b3:03:bb:02:b6:0b:b8:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:F9:17:24:BC:E8:C4:5B:76:78:9F:4C:82:BF:46:F8:57:1C:AC
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/cEP5FyS86MRbdnifTIK_RvhXHKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.132.0-77.232.139.255
Signature Algorithm: sha256WithRSAEncryption
3a:4c:90:31:b5:af:1c:b6:ae:77:e8:99:2f:dd:3f:f7:6c:11:
27:09:68:22:6a:65:ea:bc:d3:fd:b4:01:e7:a9:f5:a6:8a:52:
ab:c7:00:a6:69:b1:80:d9:ac:ac:25:26:c8:f2:c7:07:ab:58:
f6:ec:44:49:f6:37:5c:fa:71:68:00:ac:39:09:5b:01:c8:5e:
ce:26:74:89:d9:bd:ce:b8:ee:50:e8:d6:7d:5c:7b:b9:15:a1:
72:ef:a7:08:27:9e:65:6a:86:7f:49:2b:98:16:73:10:b3:b8:
4c:ce:d4:1f:1c:84:61:89:6a:48:75:4f:e1:9c:2f:fa:3f:05:
35:09:d3:77:0b:c5:95:b0:31:d3:16:f2:94:d3:d0:22:79:14:
1e:64:70:9d:0e:e1:93:fe:0a:51:c0:7a:ca:0a:9b:87:f3:09:
5d:1c:d7:fe:4b:f2:86:86:c7:b7:cb:a8:c1:eb:32:e9:a4:e7:
32:d8:ae:07:e4:f5:80:3f:6a:77:49:22:b6:75:fe:8c:c3:9b:
59:e7:34:04:65:55:2b:66:9b:50:3e:45:ea:67:81:b1:cf:e3:
88:87:62:8d:5e:0c:95:c1:85:3f:50:61:7b:12:bc:5f:2e:44:
93:5c:3d:32:c8:86:8d:f8:fa:0a:94:72:12:ac:4b:fc:1e:35:
8c:87:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:04 2023 by rpki-client on console-fra.rpki-client.org