Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/osyTQeYRrXDFj0VpVpznGypyk-g.roa
File: osyTQeYRrXDFj0VpVpznGypyk-g.roa (raw, json)
Hash identifier: yYZzLnykjgfIcfaJwVmyfZY2N2J7SD/z96F5dycG150=
Subject key identifier: A2:CC:93:41:E6:11:AD:70:C5:8F:45:69:56:9C:E7:1B:2A:72:93:E8
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 0188B8C9D64762A8159C5904F5E9ED7E66D6
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/osyTQeYRrXDFj0VpVpznGypyk-g.roa
Signing time: Wed 14 Jun 2023 07:23:35 +0000
ROA not before: Wed 14 Jun 2023 07:23:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198178
IP address blocks: 77.91.126.0/24 maxlen: 24
77.91.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:c9:d6:47:62:a8:15:9c:59:04:f5:e9:ed:7e:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jun 14 07:23:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2cc9341e611ad70c58f4569569ce71b2a7293e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:f0:82:fb:8c:9f:93:12:03:3f:8a:a4:80:
9a:d2:f2:83:ae:b1:79:f4:6d:2f:a7:58:d4:df:f3:
b5:52:da:29:70:6e:bd:6c:bf:f7:f2:24:6c:42:31:
b2:68:8b:6b:e8:04:e6:89:e2:28:17:46:ba:5d:98:
17:dc:7f:25:dc:b2:cc:11:78:6d:09:a3:31:c0:ac:
08:36:41:2f:7e:ab:e2:0d:ac:05:6b:b7:fc:fe:1d:
6c:03:ef:dc:65:c3:f6:73:a7:92:93:21:a7:6d:6d:
da:2b:d3:29:9c:27:35:69:08:c1:db:9d:4a:16:c8:
42:ed:41:eb:27:c9:54:d8:a4:53:44:e1:dd:07:2f:
d3:a0:9e:ce:05:6e:da:4f:f9:2b:92:bf:45:4c:e1:
b8:25:3a:34:7d:6c:32:02:f1:4d:b3:2f:9e:c3:ff:
e0:ee:5a:f7:9d:41:b0:10:b5:54:80:cc:9d:98:91:
03:18:11:8e:17:5a:65:ce:e1:9b:3f:1f:45:cb:b4:
1f:44:38:b1:dc:82:bf:15:e7:d9:17:88:a2:68:e2:
09:41:35:1c:e3:a4:76:e9:f4:bd:76:f6:26:95:70:
88:11:25:a1:6b:d6:51:da:63:10:af:a6:7c:17:f2:
08:3a:9e:f2:b0:75:95:80:3b:c2:98:e0:56:06:f2:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:93:41:E6:11:AD:70:C5:8F:45:69:56:9C:E7:1B:2A:72:93:E8
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/osyTQeYRrXDFj0VpVpznGypyk-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.126.0/23
Signature Algorithm: sha256WithRSAEncryption
49:7e:48:1a:8e:12:57:c0:56:b4:be:aa:f4:63:96:01:37:75:
6e:62:a6:84:e3:c8:d2:f7:b8:d9:5a:c8:a1:3a:88:94:d6:15:
9c:e4:67:eb:5f:0b:e8:b7:10:2f:f9:e9:2e:6c:cb:47:b1:77:
c5:4f:ff:89:d7:04:ea:84:b7:9a:7e:d2:e8:61:3a:bb:18:d4:
56:c0:8a:41:6c:14:42:f9:81:70:77:af:be:ea:5e:ee:73:5a:
d1:b3:40:93:fc:b2:b3:f6:1c:d4:12:54:72:c6:75:cc:ee:16:
a4:ac:38:e7:7a:3c:97:d5:d9:1f:d8:9e:b7:b9:36:2b:e7:d5:
1a:d7:8d:b2:ff:54:e5:57:87:28:a6:79:bb:1e:9b:5e:82:46:
f8:7c:42:50:60:ce:24:64:0e:f8:7a:f5:fe:62:98:b9:8e:a7:
84:6e:0b:7b:6e:d3:64:42:bc:56:3e:ca:e3:58:02:c0:81:09:
0b:1b:1a:c9:dd:d2:5a:d7:7d:bc:2a:f9:5a:6c:e0:3a:93:65:
51:de:a9:22:52:da:2b:80:36:2e:9c:d2:a8:94:3a:69:44:ed:
8a:f9:df:65:c9:be:59:c0:07:c6:8f:c6:98:5b:70:bc:27:55:
6f:4f:15:d1:e8:13:6f:f7:74:42:47:71:58:4a:bf:15:08:7b:
ea:5a:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 21:56:45 2023 by rpki-client on console-fra.rpki-client.org