Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qWMsrPzlYpERLjWKs5xRnY8o20g.roa
File: qWMsrPzlYpERLjWKs5xRnY8o20g.roa (raw, json)
Hash identifier: 4Hr0RIMy15T4mujqxcwvZ8xm1XwSdKoY3+dXXxd1eYk=
Subject key identifier: A9:63:2C:AC:FC:E5:62:91:11:2E:35:8A:B3:9C:51:9D:8F:28:DB:48
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01879EE1830E357350F0524E9C30D7483B39
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qWMsrPzlYpERLjWKs5xRnY8o20g.roa
Signing time: Thu 20 Apr 2023 13:36:31 +0000
ROA not before: Thu 20 Apr 2023 13:36:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 77.91.103.0/24 maxlen: 24
77.91.102.0/24 maxlen: 24
77.91.101.0/24 maxlen: 24
77.91.100.0/24 maxlen: 24
77.91.123.0/24 maxlen: 24
77.91.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e1:83:0e:35:73:50:f0:52:4e:9c:30:d7:48:3b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Apr 20 13:36:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9632cacfce56291112e358ab39c519d8f28db48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:55:ae:29:21:07:b9:75:fa:4d:b0:ae:77:
f9:7a:8a:b1:b1:d3:4b:1b:49:8d:9e:06:ff:30:cc:
cf:16:00:2e:d1:9f:7c:22:6d:69:3f:0f:87:00:00:
cf:77:76:a2:1b:b5:91:22:f1:ff:94:24:f0:7c:8a:
ff:4d:b8:50:c0:cf:e4:96:06:0c:f5:51:0a:18:68:
4e:67:d9:4c:87:82:a0:ec:3d:ab:fd:96:58:4d:a4:
c1:d2:d9:f4:e8:3b:6a:f2:08:96:d2:3e:1e:8d:5b:
82:ed:93:de:7c:9e:da:fd:f6:4c:66:ce:43:06:44:
26:ee:df:bd:38:68:bd:fa:c8:70:95:8c:35:6a:f0:
f7:6b:8b:1d:7f:5d:75:92:60:49:2a:b3:63:40:b2:
5e:10:e8:c8:b2:17:b3:b0:fe:51:bf:3a:70:4c:71:
58:4b:6a:2d:ec:49:55:35:eb:77:e9:c5:8c:dd:0b:
be:da:6c:da:63:cc:8f:7e:fc:90:7f:7c:aa:6c:48:
27:95:b3:03:12:3a:29:d5:c9:38:89:b5:dd:6b:cb:
8c:cc:78:94:8e:12:5e:34:e6:a0:3e:0a:45:22:05:
05:1f:4a:2e:41:5c:7d:df:83:8d:d3:f0:75:d3:01:
76:e9:1b:21:d6:fb:e5:ac:b7:c8:38:82:55:eb:19:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:63:2C:AC:FC:E5:62:91:11:2E:35:8A:B3:9C:51:9D:8F:28:DB:48
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qWMsrPzlYpERLjWKs5xRnY8o20g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.100.0/22
77.91.122.0/23
Signature Algorithm: sha256WithRSAEncryption
17:1a:72:25:a0:fa:df:34:44:aa:e4:91:dc:62:de:6c:70:6f:
4e:6d:d2:be:4d:4a:60:2b:dc:60:91:33:32:a1:c6:46:8c:ed:
6e:df:8e:c8:bf:66:54:91:9d:a7:4a:a2:a1:fc:f9:d9:b2:d4:
2e:c4:31:a9:79:d6:9c:2b:48:29:ed:70:1c:e2:51:57:d5:c0:
d6:04:96:47:9d:ea:81:39:90:5f:6a:8c:54:c0:0c:a6:9a:d9:
39:0d:1c:8c:41:91:24:5d:70:31:34:b2:dd:69:74:9b:aa:45:
68:c9:a0:18:26:c1:a6:2e:b9:20:a4:b6:4e:b5:73:48:84:1a:
c9:14:90:e7:64:22:7b:dd:42:27:db:88:99:c9:d6:03:f7:62:
08:c4:ea:be:7e:0b:a0:1b:36:51:76:38:60:8e:df:63:99:bf:
9f:1a:b7:88:a2:f5:64:82:52:4b:ac:c8:ca:29:da:be:2e:97:
7d:15:e2:65:f2:4d:7a:88:31:20:08:d2:6f:ba:fe:1a:95:af:
19:a7:6f:cc:01:9c:87:c5:2d:42:8c:e4:45:c8:12:aa:00:01:
52:ec:b1:a6:3f:8a:f2:b3:a0:58:9e:d8:bc:7d:bd:53:e9:6e:
c5:dc:11:46:3d:9a:c6:33:b5:de:26:b4:7c:90:0d:aa:0a:3b:
0e:30:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:10 2024 by rpki-client on console-fra.rpki-client.org