Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/scklTj-TPd0KJ6sc_KHuhvU754I.roa
File: scklTj-TPd0KJ6sc_KHuhvU754I.roa (raw, json)
Hash identifier: uc1CmzN/L2Yecd3iKsFCArzPOXAEPZQdHWuHOD301oQ=
Subject key identifier: B1:C9:25:4E:3F:93:3D:DD:0A:27:AB:1C:FC:A1:EE:86:F5:3B:E7:82
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01879EE186E443C91EE1D63C5705C7F2FFD5
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/scklTj-TPd0KJ6sc_KHuhvU754I.roa
Signing time: Thu 20 Apr 2023 13:36:32 +0000
ROA not before: Thu 20 Apr 2023 13:36:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205983
IP address blocks: 77.91.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e1:86:e4:43:c9:1e:e1:d6:3c:57:05:c7:f2:ff:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Apr 20 13:36:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c9254e3f933ddd0a27ab1cfca1ee86f53be782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:7d:3c:21:38:03:a9:5c:4f:48:6c:8a:a5:
c4:8f:31:74:04:39:85:ac:97:c7:55:46:15:5b:bc:
2f:56:68:29:f0:83:f6:44:60:6d:52:39:bf:a0:03:
99:a4:5b:60:78:39:87:37:1b:6c:00:df:63:c2:7a:
8c:db:c3:77:ec:64:9f:43:27:9e:61:02:ac:fc:89:
63:13:17:61:c4:05:b7:ba:08:3c:6e:06:ef:5d:5d:
a9:b9:d2:a4:db:20:0c:c3:19:16:bf:1c:11:5f:45:
cc:77:ea:7f:e5:f5:25:a5:7f:2f:1d:b2:7c:74:01:
45:08:e3:55:45:82:f1:b4:75:ab:d0:15:59:e9:3b:
88:73:e9:fb:44:b3:3d:31:50:e9:76:f1:58:e1:a3:
b3:d7:c5:4b:47:eb:e8:3d:13:74:9d:42:ca:1e:c0:
2f:80:44:e7:d1:e6:91:da:bf:c1:1e:07:80:60:d3:
80:a0:25:c1:d1:a9:58:85:53:ba:49:ac:a5:73:34:
b2:da:70:34:9c:b0:c2:54:5f:36:f8:77:54:96:65:
72:29:7e:7d:c0:0a:8d:3d:b1:d4:5d:42:e6:cf:67:
5d:fc:28:a2:3b:6b:f9:14:13:db:f2:ca:f5:50:91:
43:90:09:0a:bd:04:2f:26:e9:b9:01:a9:b5:64:c4:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:25:4E:3F:93:3D:DD:0A:27:AB:1C:FC:A1:EE:86:F5:3B:E7:82
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/scklTj-TPd0KJ6sc_KHuhvU754I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.97.0/24
Signature Algorithm: sha256WithRSAEncryption
15:95:1d:31:7d:67:a2:6a:b8:e0:f2:73:a0:fc:18:79:99:64:
1a:ef:48:b0:61:a3:88:02:a6:28:e4:e7:d7:34:71:6b:c8:35:
e9:c7:39:06:dd:dc:1b:d0:38:0d:b5:44:3d:b1:82:f1:9c:c3:
e2:2a:1f:9a:96:43:9f:9a:fb:14:73:69:9a:58:6e:d1:e5:44:
7a:b2:bc:6e:0d:93:7c:d0:19:1c:44:65:2a:0a:cf:13:4f:ba:
7d:27:00:a7:f0:06:5a:d1:10:c0:0b:70:a7:18:ea:0e:f6:36:
4f:48:a3:4a:3a:51:90:9c:e4:11:22:9a:bf:19:5d:d1:cb:22:
ef:d6:9b:12:f4:0a:88:7e:da:7e:b0:53:a5:f8:29:af:de:35:
15:3d:d2:64:dc:e1:a4:aa:bc:d3:49:35:d7:72:49:70:68:78:
d8:e0:c3:35:52:57:1e:83:aa:b4:22:35:01:7a:19:78:58:69:
34:27:68:cc:2d:de:4a:25:2c:be:fb:b8:20:ac:38:19:77:88:
02:d0:cf:68:3b:22:5d:86:d4:9e:78:b2:16:9b:ad:02:0e:42:
cd:08:a1:0f:94:f2:5d:5f:0b:4a:93:f6:5c:b8:a5:ca:0c:7c:
f8:21:8c:75:82:32:bf:c1:74:03:7b:23:d1:c1:aa:ca:05:ed:
ea:a3:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 18:17:51 2023 by rpki-client on console-ams.rpki-client.org