Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/I-axi7JUaWD9CL4dYZUx6wgotPQ.roa
File: I-axi7JUaWD9CL4dYZUx6wgotPQ.roa (raw, json)
Hash identifier: 3giWB4l+PLzV0hKWtJ5hChw+XxyRD5VN969MPHe0JD8=
Subject key identifier: 23:E6:B1:8B:B2:54:69:60:FD:08:BE:1D:61:95:31:EB:08:28:B4:F4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D289B9855E1C888B972EDA00D532
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/I-axi7JUaWD9CL4dYZUx6wgotPQ.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44685
IP address blocks: 77.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d2:89:b9:85:5e:1c:88:8b:97:2e:da:00:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e6b18bb2546960fd08be1d619531eb0828b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:ac:a9:18:c5:d8:5b:db:ec:b9:4c:43:f6:
d2:d1:60:d9:22:e0:fa:f7:46:4f:a8:8d:81:58:c7:
d3:df:02:68:75:ee:d0:26:c0:73:bd:d2:26:ca:56:
95:5e:ab:3b:35:85:49:e7:ea:e7:d3:08:50:41:9b:
f8:c1:99:f7:31:91:15:df:19:30:c2:1e:78:3b:f3:
99:38:94:18:8b:7b:f3:09:dd:fb:8a:c4:25:98:30:
f5:3f:28:97:a3:7e:9e:6b:42:0d:c2:35:40:4c:01:
96:5b:e6:72:e7:30:77:33:24:0c:af:cf:59:19:38:
73:58:5c:d4:3b:12:a7:75:f4:ee:09:ad:33:80:80:
3e:c5:99:e2:40:49:10:78:f7:25:ee:05:9d:22:10:
8c:d1:76:88:0e:cf:28:0b:82:5f:9a:0d:be:2c:0d:
fc:1d:f3:17:70:69:8f:bf:ef:86:5a:22:c0:73:8b:
e4:66:3c:31:ba:85:e9:13:da:f8:45:5b:fe:d6:87:
b0:f0:33:4e:a3:dc:9c:5e:12:d5:a7:7f:c4:97:e1:
21:0c:db:d1:ef:e7:18:a0:e3:e0:b5:59:51:f2:80:
8b:6e:30:ef:72:62:fa:a6:11:3a:67:64:8b:02:57:
2a:ef:61:d0:11:31:6e:14:9c:15:89:2c:03:82:bb:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:B1:8B:B2:54:69:60:FD:08:BE:1D:61:95:31:EB:08:28:B4:F4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/I-axi7JUaWD9CL4dYZUx6wgotPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ff:0c:5d:2e:52:23:39:6e:81:4d:10:36:9e:ef:7b:b6:7c:
1a:72:bb:62:24:1d:88:40:6e:e9:22:0d:44:6f:7b:25:8a:50:
0d:84:39:8f:43:b2:b3:33:c5:1c:eb:22:aa:28:17:b3:e8:b9:
46:b3:19:90:f0:b6:65:07:7a:09:d3:cf:d2:33:f9:c0:79:ef:
77:1a:7a:d2:a1:63:ab:97:5b:7c:cd:d0:a6:80:c8:94:1e:31:
e3:f1:13:ea:5b:05:83:26:23:34:30:27:28:b0:97:e2:9c:23:
b1:34:f8:8f:ba:7d:bf:eb:23:6e:20:fc:dd:2b:ab:34:d9:c2:
b2:fe:19:6d:eb:97:1c:4b:2c:8e:08:da:85:64:14:b8:32:57:
cd:f1:18:49:1e:18:2d:57:28:8b:ac:78:25:a0:69:35:53:c4:
7e:58:b7:42:74:2b:66:e4:30:ee:16:f1:45:12:23:c5:6c:03:
92:95:c8:7d:83:b1:5d:b5:2f:ba:54:5d:e5:d6:cb:03:34:f3:
0c:8d:70:e3:62:fe:ff:44:62:43:8e:16:f6:20:06:e8:87:df:
54:d4:63:24:89:10:a7:d3:06:1f:82:99:04:34:d9:02:49:c8:
c7:7d:b7:d5:ac:42:74:73:d4:b2:3f:5b:c7:a0:7a:f9:9f:a9:
90:5d:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org