Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/Slv5EysIJfqoj1W4QiO7_nqLr8M.roa
File: Slv5EysIJfqoj1W4QiO7_nqLr8M.roa (raw, json)
Hash identifier: QEh7KQjPqZHXmHa5K4SCBEacBail4SDZISiOpjuZGc0=
Subject key identifier: 4A:5B:F9:13:2B:08:25:FA:A8:8F:55:B8:42:23:BB:FE:7A:8B:AF:C3
Certificate issuer: /CN=1f29868e8487dcb4bc7205163f56b9400983644f
Certificate serial: 01856D8AF5C355DF292EA61F24A1E0B58176
Authority key identifier: 1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/Slv5EysIJfqoj1W4QiO7_nqLr8M.roa
Signing time: Sun 01 Jan 2023 13:35:01 +0000
ROA not before: Sun 01 Jan 2023 13:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42876
IP address blocks: 77.221.224.0/19 maxlen: 19
77.221.254.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f5:c3:55:df:29:2e:a6:1f:24:a1:e0:b5:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29868e8487dcb4bc7205163f56b9400983644f
Validity
Not Before: Jan 1 13:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5bf9132b0825faa88f55b84223bbfe7a8bafc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:5c:92:ab:35:51:ba:82:48:ef:65:c9:ae:
db:fb:c5:60:a9:5c:d4:2f:4d:db:0e:5a:45:e8:4f:
39:ed:bf:3c:21:b8:a8:ed:f4:00:a0:80:ec:3c:01:
4c:ec:11:6e:88:ed:49:f9:69:90:3e:04:10:42:4b:
36:2c:f1:35:e4:9b:7a:fd:55:b0:a9:77:8e:95:32:
52:7e:0b:4c:41:9b:1b:78:95:91:cd:4d:b3:3f:82:
4f:24:4d:09:0f:9c:da:cd:41:16:44:30:4d:e2:a9:
13:e7:e9:47:3c:82:f4:ea:f3:77:14:1c:b6:00:6f:
6d:bc:46:9c:4a:01:1a:b1:97:47:6c:c9:35:3c:ca:
6e:05:50:4f:c0:c1:f2:5c:b9:41:56:de:cc:7c:42:
fc:f6:ac:e0:d9:fa:a4:83:92:a1:0b:ab:c0:24:24:
22:b2:7c:a8:cf:29:f9:5d:e4:29:56:b7:35:3f:09:
21:80:02:f4:cd:cc:01:6c:47:eb:3a:f9:39:28:e3:
c1:a1:2f:5f:39:42:06:54:96:37:db:9b:da:e4:ad:
71:d5:a0:d0:19:05:e4:16:21:ce:33:34:95:a3:19:
74:61:96:2b:f3:f0:97:53:47:68:08:80:6e:b8:27:
01:85:3f:58:42:77:14:44:a8:16:bd:e5:c0:9d:8a:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:F9:13:2B:08:25:FA:A8:8F:55:B8:42:23:BB:FE:7A:8B:AF:C3
X509v3 Authority Key Identifier:
keyid:1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/Slv5EysIJfqoj1W4QiO7_nqLr8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:ad:78:03:a8:00:36:62:e9:c5:0a:bd:8f:b3:35:08:92:bf:
9b:a2:57:ff:bc:ed:3c:e4:c3:a2:b7:86:37:ea:b8:7e:a8:b2:
14:df:3f:a9:10:20:4e:44:7f:a6:c1:a7:af:c2:5c:66:a1:f9:
38:a8:ba:15:85:47:05:72:27:60:a9:06:27:1c:1b:0d:4b:d2:
6f:26:1f:91:8b:ff:9f:bf:55:5d:f0:21:a1:01:c8:41:a5:dd:
e9:f3:3d:30:28:05:73:5d:64:b3:0a:a5:40:d8:b8:09:50:80:
11:be:cf:e2:eb:40:cc:47:1a:60:d2:77:80:7c:02:7f:ba:27:
39:ad:c6:c6:de:35:6e:7c:7a:07:c6:01:2f:c6:6b:50:67:6d:
a0:51:ca:f9:54:84:0b:c7:81:14:34:7f:4e:7f:9d:60:2c:cd:
67:72:83:2a:ec:aa:06:1e:68:a1:fc:6f:c9:dd:6c:ae:04:f4:
ec:7c:5e:77:df:45:29:a5:77:fb:6a:72:12:90:e0:43:71:fb:
bf:90:66:2b:3b:b5:52:5b:46:49:d9:85:e2:18:e0:6a:3b:5b:
9f:5f:c9:14:b9:97:c0:57:89:ee:c9:b4:39:6b:0b:1b:5d:a7:
14:4e:92:5a:ee:39:be:40:01:53:aa:87:4c:91:2e:07:99:65:
b4:b9:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:37 2024 by rpki-client on console-fra.rpki-client.org