Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/M7auwGUd5F-AHQJWv89yyWYHVRA.roa
File: M7auwGUd5F-AHQJWv89yyWYHVRA.roa (raw, json)
Hash identifier: hxSvcYLL07u3RF7iX63uWv9AAPL6kvZVLSuAm/0W4F0=
Subject key identifier: 33:B6:AE:C0:65:1D:E4:5F:80:1D:02:56:BF:CF:72:C9:66:07:55:10
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8A4D1E15DE4FFC031460830FFDECF01
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/M7auwGUd5F-AHQJWv89yyWYHVRA.roa
Signing time: Wed 25 Jan 2023 11:16:33 +0000
ROA not before: Wed 25 Jan 2023 11:16:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49699
IP address blocks: 77.77.149.0/24 maxlen: 24
77.77.150.0/24 maxlen: 24
77.77.151.0/24 maxlen: 24
77.77.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:a4:d1:e1:5d:e4:ff:c0:31:46:08:30:ff:de:cf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:16:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b6aec0651de45f801d0256bfcf72c966075510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:e8:9a:da:73:e0:95:f0:15:45:35:c3:ea:
5e:6e:9d:83:25:db:90:22:fa:ef:b3:2a:e4:63:b8:
1c:59:c7:a4:d6:65:b7:75:c6:2b:5c:b1:df:e2:5f:
dc:ff:87:d7:8e:92:1e:d8:6e:09:9d:cb:a0:b5:5d:
97:bb:22:ba:80:16:ac:3c:bc:bf:de:f8:ad:bf:6a:
c5:05:b3:c7:77:43:12:46:8a:13:4b:36:63:35:b4:
c4:b8:0f:33:2c:bd:5e:b2:23:11:19:0d:92:9e:92:
fe:13:2d:b1:fe:f9:c6:81:d4:6f:92:8e:69:77:05:
8c:0f:22:a1:24:0e:1e:e7:07:67:b0:2b:4e:68:32:
42:e9:56:ed:01:68:8e:b3:06:c2:4c:42:ae:c4:f8:
a0:6f:52:b4:48:ec:8d:72:cf:4f:b3:bc:f4:4b:74:
e7:09:27:b7:67:3e:13:2d:ca:cd:74:27:8f:ae:92:
57:dc:e4:50:d9:4d:3e:b5:b0:eb:17:b5:09:ba:73:
c5:aa:6f:ee:74:5a:56:a8:f9:94:e9:c9:3f:91:26:
08:85:9c:7c:03:58:e6:e5:4b:90:ec:2b:b8:0c:9a:
8e:66:7c:04:52:62:ae:26:e8:1c:03:8a:42:ca:ec:
00:2a:ca:15:9c:5b:69:b5:e2:af:06:80:9a:7a:8d:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:AE:C0:65:1D:E4:5F:80:1D:02:56:BF:CF:72:C9:66:07:55:10
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/M7auwGUd5F-AHQJWv89yyWYHVRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.148.0/22
Signature Algorithm: sha256WithRSAEncryption
60:6b:5a:72:4f:b7:2c:7d:25:1b:54:25:36:51:e7:04:c4:c7:
61:40:96:11:a2:0f:ba:68:d6:83:dc:48:c5:b7:d2:6e:f1:fb:
3c:a8:2a:88:2c:18:56:d7:aa:7a:ed:07:d0:73:cd:77:b2:61:
e2:ae:62:db:8e:c6:13:82:b3:d8:98:6e:8f:04:76:c2:d1:a4:
58:b0:5f:04:a1:8a:92:11:2d:8b:3f:d2:5d:2b:0a:5a:9b:ed:
cb:b3:06:f0:c9:43:17:86:33:95:c8:f1:20:4f:5a:bd:ed:ed:
ad:1e:8b:de:c2:48:3a:a7:ba:89:c3:0d:81:52:c2:5f:25:b0:
38:3f:2a:7c:89:ea:93:33:8f:87:84:3e:7a:e8:3a:44:ab:86:
d0:9d:79:dd:2a:0f:f7:3f:48:e2:f2:a1:2a:d8:c6:2f:98:80:
c2:1e:4e:97:c3:40:cd:fa:45:44:e6:6c:e1:17:10:97:b3:96:
38:f7:ad:4d:86:af:9b:42:3a:e1:2c:8d:41:df:5a:d2:dd:b0:
c7:79:c6:38:e7:00:c5:1e:3c:48:22:2b:00:a8:47:a2:66:66:
fc:0e:c4:86:7b:42:82:3a:e8:6c:23:5b:ee:b8:72:cd:3c:15:
0c:7f:3f:45:10:bf:0b:c3:ad:ca:14:cd:01:38:df:cc:eb:d3:
bf:9d:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:23 2024 by rpki-client on console-fra.rpki-client.org