Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Fu-YUD5FmgQ0clAAGmV3Ipl0nBk.roa
File: Fu-YUD5FmgQ0clAAGmV3Ipl0nBk.roa (raw, json)
Hash identifier: xA5VXZUySlEaJSeDDUIhR7fvbSIu0b7YW3HHhhDqde4=
Subject key identifier: 16:EF:98:50:3E:45:9A:04:34:72:50:00:1A:65:77:22:99:74:9C:19
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187B8CAA7575C4F36D267E4068F2291FA89
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Fu-YUD5FmgQ0clAAGmV3Ipl0nBk.roa
Signing time: Tue 25 Apr 2023 14:21:41 +0000
ROA not before: Tue 25 Apr 2023 14:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:ca:a7:57:5c:4f:36:d2:67:e4:06:8f:22:91:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 25 14:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ef98503e459a04347250001a65772299749c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:69:23:2d:5e:b5:5b:4a:97:b1:bf:b2:04:
bc:92:f1:9b:1b:b9:2e:b8:41:0f:df:09:6a:35:80:
38:b2:f2:04:55:52:5d:ea:fd:bc:d9:c8:19:22:53:
92:5a:50:69:94:57:5c:d4:e9:7b:16:1b:4c:62:5e:
e4:26:03:20:5f:01:35:91:06:9e:b4:86:28:08:a9:
5d:1a:18:58:9c:26:f4:75:f4:dd:7b:21:7f:fa:23:
d6:2c:f9:1a:1c:2c:29:02:cb:af:fe:18:c7:dc:97:
8b:7f:73:3a:ed:18:2c:9b:13:24:b4:4e:3f:b5:58:
e9:fe:9a:73:4d:c9:aa:86:75:a0:43:07:18:74:be:
4a:13:7f:f3:22:37:7d:22:9f:1c:f9:22:d7:cd:64:
2b:c1:70:82:74:2e:e3:13:44:79:dc:3e:74:4f:7c:
7c:0b:4f:49:70:1d:7d:12:89:3e:3e:44:21:bc:cf:
11:ac:e8:d4:71:6f:a0:0d:43:4a:ae:71:cc:34:6c:
b4:28:68:66:b7:58:88:cd:79:38:49:82:9e:77:7d:
b9:1a:b7:00:15:01:16:7d:2d:07:8e:5a:f0:12:28:
39:6a:40:51:df:25:a4:6c:01:d8:9b:d6:20:1a:ac:
28:5e:a6:a4:43:b7:a9:25:1b:c4:e2:5d:28:8e:d4:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:98:50:3E:45:9A:04:34:72:50:00:1A:65:77:22:99:74:9C:19
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Fu-YUD5FmgQ0clAAGmV3Ipl0nBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.40.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a8:c1:5a:2c:0d:e7:78:38:ed:fe:00:be:f0:22:7b:50:3f:
cc:2d:a5:1e:fa:47:ba:6a:bb:c3:1c:22:b3:a2:aa:df:5f:09:
2e:a2:6b:03:c9:37:b4:78:2f:57:ef:93:59:5a:c1:db:54:b9:
4d:11:c0:da:70:25:3b:fe:d5:11:51:51:bf:c0:37:f6:f4:ca:
6f:28:ea:40:2f:a0:4c:cb:20:a7:b9:82:bd:d0:56:36:7c:4f:
84:c3:6c:be:97:9b:03:df:ca:d7:9d:95:ad:1b:99:ab:6e:06:
91:ba:2d:94:50:02:8f:6c:7b:a6:ed:1f:a4:52:67:ba:48:55:
da:30:03:46:bf:b1:c8:68:c6:e0:39:e5:e9:31:9d:1e:f5:d0:
9d:f6:4a:80:ab:45:ee:1b:70:ed:f5:9b:32:65:f4:a3:79:e8:
54:36:9e:21:74:40:f1:8b:af:cb:f5:5b:18:e7:40:e7:53:1c:
f3:fd:55:98:d1:6a:13:66:b7:de:1d:29:45:bd:1b:2a:39:ae:
9f:d5:71:41:7a:e7:aa:cf:d5:81:ba:c4:95:c3:ab:31:a9:0f:
ba:d2:19:ec:c8:cc:50:31:03:0f:cc:5d:b5:c5:8b:1b:0a:c0:
b3:19:2c:31:06:35:fa:a2:31:a9:70:2a:9b:4f:88:ec:f5:b7:
a3:88:21:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org