Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/f5KWk8EHGd4QfTluW7gC8m5iWok.roa
File: f5KWk8EHGd4QfTluW7gC8m5iWok.roa (raw, json)
Hash identifier: whFfxs7VutY4fGa4e6su7qUlW7VhvcQoqDsK4J4Jb5M=
Subject key identifier: 7F:92:96:93:C1:07:19:DE:10:7D:39:6E:5B:B8:02:F2:6E:62:5A:89
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01856B40C4AF928C9090EC7B59C5191B21F3
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/f5KWk8EHGd4QfTluW7gC8m5iWok.roa
Signing time: Sun 01 Jan 2023 02:54:44 +0000
ROA not before: Sun 01 Jan 2023 02:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200165
IP address blocks: 77.227.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:c4:af:92:8c:90:90:ec:7b:59:c5:19:1b:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 02:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f929693c10719de107d396e5bb802f26e625a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:69:aa:c3:6c:13:f7:da:71:e0:39:75:f8:3c:
fe:bb:7c:81:59:9b:a6:8f:f1:51:e4:99:a3:3b:05:
b4:7a:91:c2:4c:cd:99:1e:89:ea:8e:0c:65:65:5d:
0b:f8:be:28:14:cf:35:f7:ca:49:83:be:07:62:d7:
97:85:2e:ca:90:8a:7e:af:b0:06:a3:f1:12:2d:38:
70:2c:a0:1d:83:64:09:a6:d2:be:34:32:65:6e:7e:
52:2c:e3:ca:1f:6c:15:04:bc:3f:63:c7:42:65:ba:
84:4b:f3:e9:b9:93:47:74:37:6a:16:40:7a:e5:34:
8b:e7:5b:14:16:e7:6b:d7:10:90:6d:43:1f:33:0d:
55:64:34:69:57:1c:fe:89:c6:31:d4:3e:17:f1:2d:
75:05:ad:b0:2c:c9:00:d1:c4:06:db:0d:19:b7:19:
94:29:cf:9d:b1:ea:7d:b1:be:ae:89:67:79:e3:4e:
35:77:fb:c1:c5:df:91:4b:63:51:aa:6a:79:22:a0:
49:96:f3:4f:1f:82:56:74:d1:a5:bd:bd:fc:44:e6:
cc:b0:1f:c7:5d:ec:c3:68:0d:27:55:33:bd:1b:9f:
cd:ca:75:bf:a7:52:46:37:bc:b0:11:87:d3:fd:66:
7b:84:b9:34:17:e3:df:99:51:dd:cc:2e:34:50:0b:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:96:93:C1:07:19:DE:10:7D:39:6E:5B:B8:02:F2:6E:62:5A:89
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/f5KWk8EHGd4QfTluW7gC8m5iWok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f3:5e:d6:87:e1:6f:25:ef:72:bb:f0:e0:0f:75:c5:35:e0:
8d:cd:ac:ef:be:eb:c7:61:78:ef:3c:4d:8e:5b:91:2d:b1:79:
0f:bf:0a:21:7d:ad:69:34:82:61:02:20:99:01:e8:23:b3:dc:
04:a8:ce:e0:07:96:f8:23:42:0e:d9:04:4a:a6:f0:7b:89:aa:
6a:89:f8:e4:ae:d7:41:8b:16:87:8f:a5:e6:01:34:c8:f6:bb:
71:cc:03:0d:06:11:5b:ec:b2:3b:1d:92:c4:c9:14:a2:99:c4:
7d:b5:9d:b8:a1:be:53:9e:db:c1:3d:12:ed:f1:60:c9:10:30:
41:92:5b:ea:d2:c4:2e:a3:85:42:83:5c:93:0c:ec:c1:dc:25:
5c:e6:3a:db:83:e8:e6:17:fd:45:f2:6a:77:00:3e:19:5d:d4:
1e:b0:df:5a:ee:e6:a2:16:ff:b4:fa:38:66:0f:47:08:a6:de:
f4:1b:b9:b1:c2:f3:3c:d4:a9:cc:08:3e:d8:20:31:88:13:aa:
32:e8:6f:c3:16:02:7b:a3:0b:28:fb:2e:44:d6:42:f4:ca:0d:
26:88:45:ce:65:5c:4c:04:40:12:65:76:ac:27:98:24:7f:46:
91:c1:21:83:54:9c:f2:0a:d4:9c:d7:62:4c:e6:d4:1b:34:38:
d0:4c:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org