Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Hr9bejcuENnGtPd6M6BYw8y4tgQ.roa
File: Hr9bejcuENnGtPd6M6BYw8y4tgQ.roa (raw, json)
Hash identifier: 3kpxAPDCSCvfyKlAG1QhVuNDxTLWZ/ncmLcUVGW/6WQ=
Subject key identifier: 1E:BF:5B:7A:37:2E:10:D9:C6:B4:F7:7A:33:A0:58:C3:CC:B8:B6:04
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186931979FC45DA53646DA8E752C848B5D3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Hr9bejcuENnGtPd6M6BYw8y4tgQ.roa
Signing time: Mon 27 Feb 2023 13:39:25 +0000
ROA not before: Mon 27 Feb 2023 13:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 77.105.22.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:19:79:fc:45:da:53:64:6d:a8:e7:52:c8:48:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 27 13:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ebf5b7a372e10d9c6b4f77a33a058c3ccb8b604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:37:45:21:8a:ab:02:1c:90:b3:29:c2:8a:
f1:70:7a:3a:67:a4:c4:b9:c5:2b:d2:1f:8f:95:a7:
dc:b5:61:b1:e6:00:59:a2:9c:74:8e:e4:7c:50:50:
f4:9e:82:b3:92:1a:07:c5:29:ac:49:31:c3:ab:d7:
a2:6a:66:8c:8d:25:c3:6e:d4:2c:ad:12:bb:9c:2c:
82:2e:b8:6c:31:3d:9d:02:e1:a4:6a:13:4b:ea:bb:
e5:c4:06:1e:c6:a7:c1:fe:b6:ae:a5:aa:81:0c:04:
06:18:35:c4:58:21:c5:ac:c2:55:36:23:93:20:10:
d4:48:8e:9c:e6:d3:6b:5c:a4:b5:86:47:6b:e7:1c:
1d:f2:3b:60:3d:17:42:24:e2:5a:5a:ca:b1:99:e6:
56:7b:4e:c9:c0:bc:39:62:b4:70:62:31:68:5b:6c:
58:32:61:6c:78:26:fe:8c:6d:30:f6:5c:03:20:cd:
c0:0c:8a:7d:33:7f:74:14:be:5f:17:c8:ed:19:1a:
c6:39:fb:19:de:a7:00:54:72:3b:46:2c:38:ab:f7:
d0:44:a0:b2:e6:05:02:57:39:22:f7:e0:0f:f6:98:
ee:36:c1:35:88:fb:f6:ee:15:04:00:6d:32:cb:d5:
21:89:39:ee:4e:c4:fb:9d:e3:88:16:37:18:63:77:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:5B:7A:37:2E:10:D9:C6:B4:F7:7A:33:A0:58:C3:CC:B8:B6:04
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Hr9bejcuENnGtPd6M6BYw8y4tgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
79.175.67.0/24
178.219.14.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:99:21:41:5f:58:a7:4b:ad:73:72:7c:11:d1:30:85:74:8e:
75:72:ac:7c:ca:19:ca:ec:7f:31:38:d6:c4:48:e4:30:75:2d:
2c:ab:2d:06:fe:89:1e:74:b4:bb:cd:a8:95:64:d7:82:d1:76:
33:e2:06:7f:23:55:14:a8:38:88:04:10:aa:7c:43:94:fa:a5:
38:cc:64:d9:31:8d:18:6e:fe:36:60:c8:33:65:c7:62:ee:88:
0a:58:d9:5c:a6:7b:a9:ee:0f:4f:07:cd:d1:d8:76:44:ba:1c:
1d:f1:09:2e:b8:98:bd:11:78:ca:1c:99:59:f3:ed:e3:83:be:
0a:19:7a:db:2a:35:c6:da:38:10:eb:7f:c2:20:b1:4e:f8:c8:
bc:07:ed:80:f6:68:b4:ef:f8:4b:02:75:2b:ae:9d:89:05:16:
a1:fc:2a:b3:c7:b5:9a:8b:e5:ca:3f:dc:72:d0:65:d2:82:b5:
7c:bc:ef:7b:57:ab:ef:b8:ac:c2:8f:14:da:42:7b:4f:2a:a0:
b9:75:3e:51:82:1e:df:3c:a8:85:33:1e:0d:56:d1:64:7e:4a:
5b:8e:60:ff:45:27:ac:e7:8a:ca:fb:f2:42:8e:d4:e3:75:6f:
c4:f8:9f:cb:19:81:03:58:ed:f8:4c:a5:06:90:36:8b:05:d0:
36:ef:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org