Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/dL7NJ60zlkHIu_s5BzjLFxCX59w.roa
File: dL7NJ60zlkHIu_s5BzjLFxCX59w.roa (raw, json)
Hash identifier: nPFMk6fO7ch8/NVV0AhGvk+ZLqypOx9QbE8cD6isy3Q=
Subject key identifier: 74:BE:CD:27:AD:33:96:41:C8:BB:FB:39:07:38:CB:17:10:97:E7:DC
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01856CCB026D116D5DCC0D99A66B5BA06AB3
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/dL7NJ60zlkHIu_s5BzjLFxCX59w.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 77.232.156.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:02:6d:11:6d:5d:cc:0d:99:a6:6b:5b:a0:6a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74becd27ad339641c8bbfb390738cb171097e7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:58:f2:e8:b2:3c:c2:a8:df:28:aa:6b:fd:
ca:f6:95:7b:1c:a6:70:10:24:62:5d:ea:c4:f7:4c:
60:dc:ea:0b:bb:e7:ee:11:49:0d:77:7b:24:59:b3:
fe:dc:fd:56:25:c1:62:ef:8c:00:34:f6:d2:bf:1d:
ce:4e:e1:06:cb:9e:31:9f:5f:c4:e4:68:80:75:a4:
30:6c:5b:fc:7f:1c:3f:e1:44:f8:af:aa:5f:d2:a3:
7a:ff:92:0e:13:e5:b3:d2:8b:6a:be:2a:7e:7e:92:
5c:2b:bc:c6:69:51:49:6b:41:4b:31:b4:ac:09:b0:
5e:aa:c5:39:6b:0d:f6:56:45:8f:a6:9f:d6:75:8e:
45:c2:83:33:5b:3d:b7:bc:60:a6:e8:6c:08:0d:75:
82:dc:91:f8:2d:f9:9c:b3:36:62:1e:f1:a2:9c:da:
c7:b8:f6:8e:64:03:91:b5:09:3a:b0:b9:93:42:7d:
f8:59:63:ac:da:96:f0:ab:4b:18:fb:90:15:16:01:
c8:40:08:41:05:23:2c:68:16:51:4a:4e:26:d3:e2:
f9:54:1e:b5:48:80:1c:68:a5:ab:62:5d:66:f6:a7:
71:ed:5e:46:df:9a:33:a6:65:1a:1b:95:0a:18:77:
1f:ae:04:85:0b:85:68:99:2f:cd:81:90:72:b7:29:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:CD:27:AD:33:96:41:C8:BB:FB:39:07:38:CB:17:10:97:E7:DC
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/dL7NJ60zlkHIu_s5BzjLFxCX59w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:9b:da:24:e4:9e:ca:87:13:05:05:e1:c8:88:8b:44:a1:79:
c1:1f:71:35:8e:13:53:4e:43:d4:0e:cd:8d:9c:74:04:ff:f2:
8b:e5:f4:4b:34:bc:e9:4d:e8:a7:3f:53:23:b9:75:fa:b8:12:
28:ed:12:75:c5:a9:53:53:c3:65:48:12:79:8b:e7:a9:70:ae:
2b:7d:a8:3c:47:af:fd:c6:c8:dd:3c:49:73:3c:80:72:5c:3a:
b2:03:f8:9b:f0:8d:52:21:b9:bf:0a:3d:af:34:49:47:d5:16:
38:44:dd:33:c9:b2:88:87:7e:d3:df:12:b9:51:82:e5:c9:10:
57:cc:a2:e8:41:79:96:0a:72:0c:32:15:09:b3:04:5c:c3:b4:
39:a2:d0:9c:17:1b:3d:c8:9e:9e:cb:c8:80:55:06:ea:64:b3:
88:94:9f:9a:6d:1f:21:42:41:51:91:16:ed:3c:0e:7d:1c:9e:
b2:48:14:e8:57:75:0d:e0:24:16:50:88:5a:ac:4e:0b:1a:d8:
60:6f:9f:5a:1c:b5:e4:a3:57:e0:67:1b:77:2b:59:1c:6a:8e:
0b:d7:80:35:f5:45:7a:a3:0e:97:6d:be:1a:a8:51:f7:ae:b9:
c4:64:1c:98:f6:cb:f9:88:56:84:9a:c4:a3:cb:c9:63:35:05:
73:f4:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:06 2024 by rpki-client on console-fra.rpki-client.org