Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/roTQE-WpuQ7M9JGxArOhxShJq3A.roa
File: roTQE-WpuQ7M9JGxArOhxShJq3A.roa (raw, json)
Hash identifier: +QTjjwLi7ahL61SOWgYpfBaMR+e6UJh5hQMXIl2EZKY=
Subject key identifier: AE:84:D0:13:E5:A9:B9:0E:CC:F4:91:B1:02:B3:A1:C5:28:49:AB:70
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7E09F8EB9195E532ED667F2A3D28E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/roTQE-WpuQ7M9JGxArOhxShJq3A.roa
Signing time: Mon 02 Jan 2023 09:37:31 +0000
ROA not before: Mon 02 Jan 2023 09:37:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208798
IP address blocks: 77.105.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e0:9f:8e:b9:19:5e:53:2e:d6:67:f2:a3:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae84d013e5a9b90eccf491b102b3a1c52849ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:b0:f7:58:66:0e:c1:9a:ce:00:f4:67:19:
81:99:ef:a3:d9:46:27:10:cd:d1:b1:8f:1e:6d:1f:
bd:3a:29:94:ca:97:f3:05:07:a2:cc:11:e0:c1:c6:
b9:e3:48:cc:2c:24:df:6a:ba:90:ce:c5:82:05:df:
ef:66:2b:2e:c8:dd:54:6b:b8:a4:e1:17:06:33:79:
22:fa:a1:48:4c:47:97:69:e5:39:1a:3b:92:49:9c:
c8:22:ca:01:2a:89:09:18:da:36:4a:e3:19:e6:7c:
40:97:39:98:77:c3:45:5a:89:2f:f5:8f:3d:a3:99:
27:5f:aa:21:81:7e:85:e9:32:bf:b9:e9:9c:ae:93:
7d:05:ed:61:7f:1d:c4:ed:b9:89:da:41:97:e4:d1:
e5:3d:58:12:f7:f6:77:93:1e:9a:55:62:44:58:b5:
a0:12:84:db:8b:a5:2c:14:a3:08:74:a2:ae:cd:db:
e8:ce:cb:af:49:5c:d7:a4:b1:59:a5:85:f8:ac:54:
db:43:46:c2:3c:1b:7f:ea:60:35:c4:da:7f:06:6d:
9c:92:58:9a:ca:2f:cd:a7:50:0f:ed:de:06:c9:48:
db:0f:02:c6:80:38:78:55:de:43:c6:80:10:a1:4b:
36:c5:9b:7c:eb:81:a4:0a:73:bb:cc:d6:59:0e:08:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:D0:13:E5:A9:B9:0E:CC:F4:91:B1:02:B3:A1:C5:28:49:AB:70
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/roTQE-WpuQ7M9JGxArOhxShJq3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d6:60:a7:f6:e8:e9:7b:27:3f:67:01:90:e5:9e:e8:72:8c:
7f:2f:f4:69:4e:54:e6:88:c3:4d:2e:ce:88:62:72:53:d9:b6:
d1:38:e2:28:0a:b1:de:e9:74:96:9d:e5:81:47:73:82:ae:35:
ad:2b:df:7d:45:4c:d9:42:78:4a:5f:e1:97:a6:9c:91:fe:41:
5c:a3:34:32:e5:fb:37:57:70:84:ef:56:01:a1:16:ed:38:5e:
e4:8e:f5:7e:a8:23:94:81:a0:24:c7:2d:f7:cc:1e:88:8a:60:
9b:36:6c:22:b4:1f:7f:02:f1:3f:17:54:21:72:c9:25:a9:4c:
60:a2:0f:ef:ed:08:a7:b9:0f:7e:0c:78:de:33:a6:3e:51:86:
d1:c2:96:35:f7:97:d9:92:b8:b4:2e:94:0a:07:08:5c:e1:05:
31:d6:a9:c0:23:29:e9:b8:48:a7:62:68:65:45:fb:2c:fb:e1:
ae:09:2c:1b:b9:e9:38:4c:cf:24:a2:1a:4f:ed:8d:97:a1:6d:
c6:a5:03:cc:43:6a:3a:59:ea:d7:ec:18:3c:54:9c:15:dc:35:
d1:e4:ba:88:66:f6:2a:f3:d1:2f:20:a8:a2:73:91:96:ec:a3:
b3:c5:ba:64:da:c9:01:11:9b:69:5f:83:41:a0:90:0f:5d:a8:
e0:37:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:36 2024 by rpki-client on console-fra.rpki-client.org