Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/BoiShU8o55oGDHS2U3h58rI_D0E.roa
File: BoiShU8o55oGDHS2U3h58rI_D0E.roa (raw, json)
Hash identifier: E/XGbT4s3q/JPwdxpulz06+Ho2+rmrMwONFX+umf1zs=
Subject key identifier: 06:88:92:85:4F:28:E7:9A:06:0C:74:B6:53:78:79:F2:B2:3F:0F:41
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01856B40C7AB12F3CCA053D7E58346BC9E53
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/BoiShU8o55oGDHS2U3h58rI_D0E.roa
Signing time: Sun 01 Jan 2023 02:54:45 +0000
ROA not before: Sun 01 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205191
IP address blocks: 77.224.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:c7:ab:12:f3:cc:a0:53:d7:e5:83:46:bc:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=068892854f28e79a060c74b6537879f2b23f0f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:ad:d8:ee:5a:d2:dc:84:41:e4:bb:1c:5c:
ca:a7:60:d1:6f:d1:85:2f:79:d3:50:a1:6e:a9:65:
bb:42:5e:67:cb:2a:60:e8:e1:02:1e:fa:ca:1a:ee:
2d:1c:50:5a:46:4a:da:03:61:06:c5:13:96:cc:86:
fc:1d:ee:94:ed:a4:df:0a:b8:08:ed:27:e1:e5:16:
63:d5:1f:9a:bf:84:67:9e:c8:da:13:4b:a3:d1:1e:
4e:11:f1:bd:56:e5:65:28:30:bc:04:3a:09:b2:e6:
53:b7:5d:52:0f:b3:45:c0:f7:9c:b8:3b:f6:63:17:
11:dc:05:26:87:25:18:1a:43:c0:de:da:17:e4:db:
fb:2d:64:62:bd:47:ac:83:72:de:a6:08:82:99:28:
90:2e:f1:df:f8:b2:9f:a2:b2:8f:ef:96:5d:42:6d:
aa:84:dd:95:fc:8f:11:90:0f:a6:ea:7e:8a:cf:92:
75:c3:6f:28:fd:74:de:3d:f8:30:e5:38:7f:1d:d6:
df:19:ce:84:44:c6:90:71:01:19:69:6d:d8:97:b1:
22:43:b8:1d:76:7e:b0:72:03:fc:b2:a9:01:bf:28:
fd:12:58:cb:e6:79:dd:f6:f3:66:42:00:3f:4a:7a:
cb:cf:fd:de:97:fb:8e:82:17:99:17:ae:93:b3:13:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:92:85:4F:28:E7:9A:06:0C:74:B6:53:78:79:F2:B2:3F:0F:41
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/BoiShU8o55oGDHS2U3h58rI_D0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.224.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e1:e8:73:86:2e:c2:c9:bb:26:53:13:83:62:07:fd:aa:33:
bb:8a:87:b3:88:03:56:53:6a:77:f7:63:ab:aa:2e:bc:04:94:
d3:62:bd:c3:dd:2f:73:e7:56:ee:c7:44:60:e1:90:e2:01:ff:
ea:75:c8:6d:d5:49:2f:64:0b:c2:60:9f:04:b0:8f:e3:12:8a:
8b:6c:f3:e9:ee:c0:1e:de:62:f3:dd:1b:b2:cb:20:98:55:7a:
43:1c:ad:d2:42:a9:aa:e2:6a:8f:c7:0f:d2:84:3f:61:ba:c9:
c5:39:0d:a6:61:d8:f3:d5:5a:23:23:ad:96:2e:af:f9:1b:51:
ec:57:b7:92:05:82:a9:6b:dc:ae:c4:34:de:47:b8:60:1d:f2:
75:05:df:87:93:e1:67:07:04:0c:0e:31:7e:9e:92:da:e5:03:
38:bc:6c:64:87:2c:ad:59:cf:6e:20:f5:a5:45:a0:21:78:92:
c6:5c:e9:0c:97:10:4a:33:6b:d1:97:e9:c1:2c:bc:05:90:3b:
62:f4:5d:c9:c6:02:ee:8d:ab:a0:72:66:fd:7e:68:9e:fa:46:
80:13:3b:5b:79:dd:26:cb:c6:06:62:39:b0:dd:c1:72:0f:19:
f5:0a:29:e4:fd:f7:22:a6:f1:43:6f:f6:89:1c:97:39:1d:f7:
2f:b0:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org