Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tK72PAI9pY9KiHLLyP4iVVeUXB8.roa
File: tK72PAI9pY9KiHLLyP4iVVeUXB8.roa (raw, json)
Hash identifier: +ZsM4Lp8OYBCDywpKn784pB9vxI6ENwHpP7oFymeEJA=
Subject key identifier: B4:AE:F6:3C:02:3D:A5:8F:4A:88:72:CB:C8:FE:22:55:57:94:5C:1F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D607AC9B20D023B51C0B2D518650
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tK72PAI9pY9KiHLLyP4iVVeUXB8.roa
Signing time: Mon 02 Jan 2023 09:37:28 +0000
ROA not before: Mon 02 Jan 2023 09:37:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60672
IP address blocks: 77.105.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d6:07:ac:9b:20:d0:23:b5:1c:0b:2d:51:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4aef63c023da58f4a8872cbc8fe225557945c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:2c:2a:98:c5:99:cc:80:32:db:be:92:31:
3c:34:5e:70:fd:fa:ee:d4:cf:d4:5b:32:dc:48:8f:
60:28:c9:e9:bf:fa:e5:31:13:34:3a:af:64:99:86:
e0:fa:75:c2:f8:4c:59:92:a0:84:4b:e6:5a:1f:55:
ec:2a:31:8d:92:f7:52:df:2a:b5:34:1a:a8:59:87:
c2:19:f1:a3:7b:53:52:ea:5b:b4:42:c7:16:8c:3d:
b4:e8:0e:0f:f4:59:11:33:e1:cd:cd:3b:a5:75:d7:
f4:36:84:67:75:d5:85:64:c3:2c:09:5e:70:31:95:
04:b7:b5:ef:d9:53:a1:1b:a7:e9:af:4a:a0:77:3e:
99:03:62:b0:1a:cd:90:55:71:1c:cc:2f:9c:6f:38:
de:4a:3c:9f:01:11:9d:48:d9:4c:a1:74:15:b4:c6:
f0:cb:78:c2:f9:b6:58:f7:62:0e:30:f0:b9:70:ba:
e3:26:5e:3e:8a:a7:3c:11:55:09:bd:be:a0:a4:c6:
b1:db:76:02:ec:97:5d:f0:b3:fa:44:c2:56:78:88:
e7:b9:a0:40:6f:31:e5:9b:70:de:0f:3a:a8:b6:9a:
34:f2:3c:29:6c:20:1c:08:57:f9:17:35:06:c0:1b:
ae:e4:3b:96:04:87:1d:4c:ae:0d:c9:c6:fe:06:c0:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:F6:3C:02:3D:A5:8F:4A:88:72:CB:C8:FE:22:55:57:94:5C:1F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tK72PAI9pY9KiHLLyP4iVVeUXB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:26:6f:7f:74:62:22:06:1e:1e:c2:91:9c:b3:f6:25:00:3f:
58:f9:af:34:1f:96:e4:95:79:97:d9:f1:b6:9f:2d:f0:86:d7:
f8:87:e7:70:fc:6b:4c:61:f8:53:68:f1:88:c6:5c:8b:ac:e5:
f2:9f:a2:d6:2f:be:ba:1a:1a:f9:d1:bd:39:ec:1f:cc:5f:68:
c1:91:69:5f:61:78:5f:a2:bb:c9:d1:89:67:9a:d4:25:be:c7:
22:e4:be:36:fe:93:4b:fd:5a:5b:82:3f:39:f7:7e:98:ed:49:
a9:bd:ff:d4:e5:a1:07:e3:77:a7:52:2a:67:2c:bb:45:50:1f:
0d:b9:d7:f7:59:9b:c2:66:7b:0b:7e:f7:c3:d6:74:13:57:01:
fa:7b:59:9a:a5:14:54:1c:cc:43:56:8e:6d:1c:01:49:6b:ae:
e4:a5:31:12:4b:db:7c:7f:3c:73:03:ca:70:b4:df:a4:09:de:
67:37:b6:bb:a0:34:51:8a:bb:1a:0f:97:b5:df:91:8c:4d:41:
ab:ab:d5:6b:a0:1d:79:86:06:58:ee:18:ee:45:f8:7c:d5:cf:
47:5a:39:93:44:12:a6:0c:f9:d6:b8:68:06:61:4d:c6:81:12:
83:d8:fd:2b:41:fb:7f:9a:4b:ec:05:93:37:72:41:c3:df:c5:
cb:7b:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 14:03:34 2023 by rpki-client on console-ams.rpki-client.org