Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RQd0ngJNaxhi6krqGKZvpByWyMU.roa
File: RQd0ngJNaxhi6krqGKZvpByWyMU.roa (raw, json)
Hash identifier: ZXYRCsFZoD5dP4GH/A2hmIw53KGZ5Io2MMPzywh4ql0=
Subject key identifier: 45:07:74:9E:02:4D:6B:18:62:EA:4A:EA:18:A6:6F:A4:1C:96:C8:C5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186783F9168249CB95995193E15DB996ABF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RQd0ngJNaxhi6krqGKZvpByWyMU.roa
Signing time: Wed 22 Feb 2023 08:31:17 +0000
ROA not before: Wed 22 Feb 2023 08:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 79.175.66.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:3f:91:68:24:9c:b9:59:95:19:3e:15:db:99:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 22 08:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4507749e024d6b1862ea4aea18a66fa41c96c8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:76:1c:e8:d8:3a:3f:df:29:5a:0d:d8:05:
0a:c8:ba:64:c9:c2:b8:6a:e7:c5:c1:07:8c:b3:e8:
b9:c9:3e:2d:fd:1d:e0:0d:85:e6:19:f3:6b:f7:bf:
ad:c8:e4:00:32:b2:e6:52:92:8a:6b:c6:6a:8d:a6:
c2:db:24:bb:de:0f:ad:bc:60:59:de:9f:d7:88:42:
20:8c:d2:97:72:33:f2:41:6c:2b:98:03:0a:70:94:
e2:c7:97:44:05:ae:42:aa:56:22:f0:37:a8:b7:aa:
5e:38:68:8f:88:e0:f6:f3:f6:04:1c:2e:a5:d7:ea:
e3:a8:2d:82:84:04:0b:6a:f1:10:8a:ed:d8:6e:e6:
c3:51:d6:68:9f:80:48:b4:e5:7f:1e:d7:81:ab:d9:
25:92:c6:f4:e9:c8:3d:45:71:e5:91:aa:82:28:13:
d1:da:fa:8f:b7:d6:3b:23:9d:12:bd:a4:51:6a:73:
cf:0a:b4:6c:be:9d:9a:96:91:56:24:09:60:11:c8:
15:85:ed:a4:c5:b7:5a:08:86:61:2f:22:ff:f2:2a:
28:99:81:8d:58:28:29:4d:07:a0:a9:5c:25:35:20:
a7:58:49:ef:21:f0:94:9d:74:c0:e9:76:58:eb:33:
a3:1a:89:62:95:b4:8e:35:b3:4e:f1:12:8a:c3:dc:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:74:9E:02:4D:6B:18:62:EA:4A:EA:18:A6:6F:A4:1C:96:C8:C5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/RQd0ngJNaxhi6krqGKZvpByWyMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
79.175.66.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:43:70:71:c0:c6:32:58:0d:36:6d:97:54:52:24:c2:ee:62:
40:93:cc:3b:7e:7e:52:83:15:0a:78:7e:73:20:32:d9:1f:94:
02:25:1b:2a:7f:ec:23:2a:fe:27:1e:06:60:59:fe:64:22:5f:
c4:45:27:b2:2c:79:b5:51:de:84:4d:6b:6b:89:c9:18:9e:78:
43:8e:de:ad:95:fa:bc:8b:96:6d:47:f1:75:9d:4e:e2:69:9d:
18:77:5a:5f:18:a5:8e:91:83:8d:23:f6:f4:8c:fc:cc:00:8c:
16:87:4d:46:2d:51:64:fa:d5:d3:37:c0:ea:47:87:18:a1:29:
aa:08:ab:e7:7f:44:e9:c6:1e:bd:54:c2:c8:09:89:d5:f8:cb:
c5:b7:6f:0c:56:02:11:d0:c6:4d:ae:6b:75:a5:5e:d9:7a:66:
99:91:3b:c9:9f:7f:1b:a3:e8:7a:5e:c8:b9:be:73:8d:41:67:
55:68:e0:d6:e5:61:d9:d6:ec:2c:ec:30:cd:74:33:cd:c4:83:
42:aa:6c:d7:c5:82:e9:1e:bb:11:ad:cd:71:e6:c2:9d:3a:0e:
5c:19:06:1d:57:1b:ad:44:60:9a:44:b3:d2:6a:04:67:b7:4b:
96:5d:83:68:1d:c5:0f:f1:f7:80:8c:e7:7a:25:ed:b8:80:b6:
a6:1d:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org