Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_4rD7JIHJw8fCgtpSkwvZOsfhew.roa
File: _4rD7JIHJw8fCgtpSkwvZOsfhew.roa (raw, json)
Hash identifier: Re7Y0qKA0qNpfBszDKclkqURlFNel+w7o4VWU8DCAfw=
Subject key identifier: FF:8A:C3:EC:92:07:27:0F:1F:0A:0B:69:4A:4C:2F:64:EB:1F:85:EC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01860EE546A9BE722A3E9FA40CA095C0C9DD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_4rD7JIHJw8fCgtpSkwvZOsfhew.roa
Signing time: Wed 01 Feb 2023 21:32:32 +0000
ROA not before: Wed 01 Feb 2023 21:32:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:e5:46:a9:be:72:2a:3e:9f:a4:0c:a0:95:c0:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 1 21:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff8ac3ec9207270f1f0a0b694a4c2f64eb1f85ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:f8:0f:1b:52:e3:e4:e3:11:24:31:f2:79:
63:9f:28:a5:83:dd:fc:bc:e3:1a:60:bc:13:9c:70:
1d:d7:6e:70:7a:13:79:3a:3a:00:8c:15:e0:72:dd:
d0:d4:0e:22:92:5c:90:91:7a:d0:f6:ac:22:b1:89:
3a:4d:72:4d:ff:bb:28:55:0e:76:1c:33:22:bc:fc:
8d:21:73:ff:e1:6d:14:e1:bf:71:b2:4e:06:0d:1d:
f3:d7:7f:d4:85:99:c5:a3:55:06:9c:ef:48:d8:bc:
b5:4a:c4:a2:ee:dc:29:2b:9e:5e:a9:6d:20:05:8e:
5c:d6:f2:2d:f6:57:0e:42:b6:c8:b4:78:dc:01:c8:
a4:7e:f3:94:d4:40:63:97:ed:08:4e:1a:ee:b8:99:
69:19:fc:78:e6:89:ac:71:df:4f:9f:a9:ef:32:3d:
0c:89:66:10:ec:c3:22:86:ce:c7:e3:21:c9:13:d6:
f6:6e:7d:cc:14:de:a6:5b:96:f3:63:79:d5:f3:b2:
e4:04:4d:96:f8:4b:97:8d:f0:cb:b6:63:75:78:44:
da:3e:66:46:09:e9:5d:42:98:11:9e:33:f8:65:80:
c9:8a:79:9f:00:72:fa:67:82:84:dc:fb:c4:fa:9e:
db:fd:02:d9:3e:f4:3d:f1:51:6c:a7:2c:eb:f1:e0:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:C3:EC:92:07:27:0F:1F:0A:0B:69:4A:4C:2F:64:EB:1F:85:EC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_4rD7JIHJw8fCgtpSkwvZOsfhew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7c:1f:17:e4:88:10:35:b8:a9:b8:ba:50:83:19:33:e7:62:
1f:95:8f:1f:15:6d:c8:c4:4d:d2:dc:81:89:b2:d8:f3:98:39:
c4:cd:4b:d0:01:77:92:ec:7d:57:14:ee:c6:73:7e:da:84:4b:
08:bc:d2:49:af:64:3e:0b:da:3f:4b:cd:cc:be:bf:bf:8b:d3:
ec:4a:97:e3:c9:12:b3:ba:1d:86:2a:36:14:06:af:ce:f2:2c:
5f:03:4b:0a:c7:ac:10:72:a9:22:47:88:8d:a7:50:5f:e4:e6:
51:fd:7c:e6:82:1b:62:27:f4:aa:a4:ab:b0:c9:6b:51:7d:f4:
f5:5b:91:97:5d:e4:f0:0e:e7:41:a2:61:55:ba:c0:d7:c2:f2:
e4:d7:0a:0a:a0:b0:17:45:78:5a:25:d1:7a:75:90:6d:b2:40:
74:44:d9:54:71:59:b8:77:58:90:44:3d:67:be:42:2c:b7:5f:
43:54:df:a5:d5:de:21:a1:ad:16:1a:13:70:f5:ab:f2:fd:5b:
c4:40:73:29:6e:d2:95:9f:ba:94:04:2d:85:b1:78:e4:9b:7d:
12:c1:e3:02:b7:0c:a8:b1:8c:6d:3b:49:84:04:5e:b7:1c:82:
e5:63:f0:7b:4f:1b:3d:ad:e6:e1:5e:e9:65:33:99:74:da:80:
16:50:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org