Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/VS8Dm626G5FbEZEHQ2plHSfoKK0.roa
File: VS8Dm626G5FbEZEHQ2plHSfoKK0.roa (raw, json)
Hash identifier: UI97wj3bIRObEPl+Ab0Sf17sVW34T5a8sE8d7FX+B7U=
Subject key identifier: 55:2F:03:9B:AD:BA:1B:91:5B:11:91:07:43:6A:65:1D:27:E8:28:AD
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01879EE18621C24692A6F9838B24FEE7A206
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/VS8Dm626G5FbEZEHQ2plHSfoKK0.roa
Signing time: Thu 20 Apr 2023 13:36:32 +0000
ROA not before: Thu 20 Apr 2023 13:36:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203727
IP address blocks: 77.91.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e1:86:21:c2:46:92:a6:f9:83:8b:24:fe:e7:a2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Apr 20 13:36:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552f039badba1b915b119107436a651d27e828ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:19:ce:8b:25:88:98:28:3c:1c:5a:e2:00:
8b:ba:48:98:7c:ac:a8:36:3d:58:4c:90:28:eb:80:
8a:9a:51:8b:a9:a5:6c:a7:01:c7:6a:8e:58:3e:60:
17:01:72:a7:21:f2:ae:59:95:1a:33:65:01:66:cc:
17:28:8d:80:75:49:87:b4:47:ec:cb:a7:ab:a7:96:
04:a1:29:3c:c3:b5:60:f5:91:ba:ab:7e:b5:fc:55:
9f:14:61:ab:5f:95:a2:6e:27:f5:19:39:6e:fb:8a:
46:e4:6b:8b:9d:f0:b4:3d:14:c4:ee:44:07:9f:ca:
67:43:a2:93:28:40:41:d9:f0:a1:d2:29:0a:9f:f6:
d4:70:de:c3:12:19:cd:6b:71:7e:c5:8c:99:1b:40:
88:da:ae:90:fc:d0:73:61:36:f4:28:bd:52:12:5c:
0a:b0:f1:56:19:22:43:14:fd:0a:48:03:7b:a0:9b:
09:6a:57:f0:92:8d:8f:0c:54:d1:17:b6:1d:5d:b8:
3f:2c:38:c0:af:93:df:25:01:11:56:e1:fe:3d:47:
86:19:a5:56:80:19:8a:87:89:0b:b6:ca:83:0e:ef:
c2:db:97:d9:78:f8:8d:1e:5b:af:92:5f:9e:92:b4:
b5:71:4d:a3:12:51:2e:61:c2:fc:2f:10:45:05:4a:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:03:9B:AD:BA:1B:91:5B:11:91:07:43:6A:65:1D:27:E8:28:AD
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/VS8Dm626G5FbEZEHQ2plHSfoKK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.124.0/24
Signature Algorithm: sha256WithRSAEncryption
29:68:78:9c:8a:f3:61:2a:30:95:b6:23:c0:6c:30:1b:b9:80:
7c:cf:ab:4f:95:01:d6:47:7e:5f:a1:32:16:d3:79:be:71:a3:
11:bc:0b:82:22:23:76:13:81:22:ba:f8:78:07:27:03:ad:3d:
6f:b4:82:5a:8c:cf:b4:5c:e1:55:7b:08:d9:ad:5a:a9:06:c1:
b9:de:bf:92:fd:b1:dd:d4:ea:41:51:f3:5e:19:08:c9:34:bd:
79:c4:a8:7b:be:35:aa:1d:4f:ed:af:c2:36:fa:cd:88:b9:ac:
23:5a:83:ac:6c:c4:36:4e:23:53:20:f9:71:a9:4d:6a:ba:b4:
91:2e:d1:b1:c9:f2:ab:33:f4:51:86:0a:da:d6:e5:23:52:30:
95:d4:20:ba:2c:15:aa:24:c7:de:6c:c4:38:0c:30:da:90:8a:
df:f3:fc:69:ff:31:92:9d:ec:b5:c4:63:cf:5c:d3:14:6a:c4:
34:be:b0:93:86:c2:c2:7a:46:25:d4:a4:40:35:e5:50:57:ba:
38:d3:c0:77:97:3c:3a:01:eb:41:45:9b:9b:fc:33:36:f4:8b:
a9:02:d8:4c:51:96:17:40:d9:93:f3:b7:1d:dc:b9:1d:7f:b6:
a9:32:fd:51:3b:9c:1c:dd:57:ac:d1:e8:e4:0a:6a:23:77:75:
6c:79:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:47 2023 by rpki-client on console-fra.rpki-client.org