Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/pLlpZR6fXwqmmydbeGtCv50SpLs.roa
File: pLlpZR6fXwqmmydbeGtCv50SpLs.roa (raw, json)
Hash identifier: 7kbaznaGBtS+l4gM6FvrXPkGHnpwZdwhk2j95UXkPns=
Subject key identifier: A4:B9:69:65:1E:9F:5F:0A:A6:9B:27:5B:78:6B:42:BF:9D:12:A4:BB
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01892CB3146536ADF82871707B6263A4C8EB
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/pLlpZR6fXwqmmydbeGtCv50SpLs.roa
Signing time: Thu 06 Jul 2023 19:34:40 +0000
ROA not before: Thu 06 Jul 2023 19:34:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:b3:14:65:36:ad:f8:28:71:70:7b:62:63:a4:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 6 19:34:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b969651e9f5f0aa69b275b786b42bf9d12a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:c4:19:dc:36:21:92:c2:dd:5b:84:61:48:
90:1f:47:8e:ac:57:18:3d:00:66:b0:32:01:2b:da:
04:33:58:40:b5:14:58:5a:e1:c5:66:ff:0b:ce:71:
d5:aa:05:98:25:5e:40:c8:ec:2d:27:d2:f9:72:36:
c9:eb:74:75:44:78:72:c1:b8:31:e8:b2:1a:51:4a:
67:85:ca:8b:65:cf:80:de:36:47:c7:bb:f6:67:a1:
43:ff:e8:eb:51:36:fe:74:91:1a:3a:f4:1e:26:bb:
84:39:9c:e1:64:77:d9:ac:42:b6:9e:b4:2c:01:e5:
5f:bd:46:31:8b:6e:c4:f8:a4:e7:e0:47:34:52:6f:
0d:c7:4e:ad:0b:43:ba:5d:1f:64:58:b4:cd:20:2d:
9d:83:b7:d9:b2:09:70:4d:e1:7a:3e:e3:ff:3c:ac:
3c:5d:3e:54:f2:76:d6:e5:34:ad:be:ff:fc:09:4c:
3b:28:db:2b:19:5a:61:0a:a5:14:c5:cf:fe:02:d3:
fe:cb:d2:6c:d1:51:f9:8a:c1:3a:c4:13:40:d0:5f:
7a:d0:51:31:2c:ef:e5:08:1e:07:10:ad:54:50:e5:
5a:74:72:51:22:fa:78:73:a0:63:b3:dd:65:26:0b:
b9:ae:fb:fb:3d:16:fa:23:e1:c3:33:93:98:e6:4e:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:69:65:1E:9F:5F:0A:A6:9B:27:5B:78:6B:42:BF:9D:12:A4:BB
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/pLlpZR6fXwqmmydbeGtCv50SpLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6d:a7:40:d5:d4:f8:52:17:ea:f8:07:e4:0f:25:6d:52:67:
0f:0d:3f:60:61:ac:fa:0f:67:88:86:19:b5:7b:bf:5a:17:eb:
44:2d:72:bd:0b:20:e2:6b:2a:0d:62:9d:24:39:0b:9d:60:c1:
c4:c9:e2:b4:4e:15:83:8c:8c:5b:43:1e:79:b1:16:1d:cd:c2:
8c:3b:a9:66:e1:eb:b4:6b:eb:53:ff:b8:b4:61:37:63:57:f2:
eb:41:d9:b2:ac:5e:27:e5:20:70:17:82:c4:cc:d8:59:a4:ac:
af:d0:46:6e:3f:2b:cd:ff:1b:b1:93:2f:34:9f:dd:80:5c:12:
e4:f8:26:30:a7:4a:ff:68:41:dd:cc:a6:e3:f4:39:c0:5d:a4:
c0:11:8e:23:62:ca:60:79:1a:64:d0:5e:22:29:6b:68:e2:61:
f2:29:21:c2:8c:4a:23:93:0f:27:c0:54:08:f6:58:2c:0e:2b:
b1:80:9a:b3:52:b1:1c:3b:13:e5:d7:35:cb:3f:86:4b:48:56:
0e:97:a1:40:27:63:aa:b0:c9:6d:72:fe:a6:ee:a8:b9:0e:9f:
3c:06:28:49:81:de:cb:12:bd:b7:22:37:bf:ac:18:b9:17:0c:
61:88:c3:68:2f:3a:9b:bd:23:0e:bc:40:98:2a:39:9b:d6:a7:
4d:c6:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:51 2024 by rpki-client on console-ams.rpki-client.org