Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/AaNnNqLzo581Hw75VjZCJwVOUQ0.roa
File: AaNnNqLzo581Hw75VjZCJwVOUQ0.roa (raw, json)
Hash identifier: W00FpOtf2GU+fYYIvYkjEFUVYCM06pe24zPqFD9M4Vw=
Subject key identifier: 01:A3:67:36:A2:F3:A3:9F:35:1F:0E:F9:56:36:42:27:05:4E:51:0D
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01888269CDB5F1317DFBFA134353B37CC059
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/AaNnNqLzo581Hw75VjZCJwVOUQ0.roa
Signing time: Sat 03 Jun 2023 17:59:12 +0000
ROA not before: Sat 03 Jun 2023 17:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50200
IP address blocks: 77.74.123.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:69:cd:b5:f1:31:7d:fb:fa:13:43:53:b3:7c:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 3 17:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01a36736a2f3a39f351f0ef956364227054e510d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:e1:4f:9f:ef:9d:37:7d:a4:5d:0c:7e:a1:
f9:47:1c:ed:d2:06:58:f2:db:d8:90:80:41:69:61:
23:9f:7d:10:bd:3d:63:2e:61:27:82:19:ea:02:09:
7a:80:34:67:bc:31:45:af:03:4d:ce:e8:38:95:27:
bc:f7:84:e9:d2:eb:c4:76:f7:90:4d:ad:ae:42:c8:
84:83:8a:23:0c:e8:d3:06:1b:f6:11:86:95:cc:2b:
27:46:0a:b6:2a:07:be:3b:cd:cc:04:2d:77:13:f2:
b5:ba:82:38:c0:51:58:18:df:8d:29:da:9c:ea:ad:
3c:cf:8b:4a:18:e6:85:c6:2b:8e:d4:2b:2a:c5:b8:
76:37:63:d8:bf:24:96:88:40:6c:b8:6d:31:98:83:
0e:40:1f:02:fe:13:60:d3:a1:cb:75:bd:1a:0f:88:
b9:08:42:18:8f:47:91:b5:ab:14:20:72:66:df:05:
67:24:01:52:40:4c:6b:1a:49:75:9e:54:90:6c:82:
2b:ad:be:fd:7a:e5:4f:0e:c8:8b:cb:af:55:58:e7:
8c:1b:b5:39:9a:45:3b:46:db:c7:48:4c:6a:c2:95:
37:33:7c:93:db:b4:74:f0:74:06:6d:c6:12:3c:62:
61:22:de:cb:cb:9d:66:a5:d4:67:e5:21:6b:d2:8d:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:67:36:A2:F3:A3:9F:35:1F:0E:F9:56:36:42:27:05:4E:51:0D
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/AaNnNqLzo581Hw75VjZCJwVOUQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.251.0/24
77.74.123.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f5:e4:88:03:ef:02:2b:41:1a:31:6b:a0:cf:c1:a3:d4:05:
c2:74:c4:21:7f:34:3b:b7:ce:b1:2a:aa:aa:34:75:f5:96:60:
99:07:5f:b9:03:23:e8:94:17:7c:bb:b5:63:f4:5b:43:42:ab:
76:fc:4a:3c:04:8a:47:da:17:58:ba:68:4e:85:28:2a:80:7a:
39:46:56:82:27:c3:fd:4b:60:d5:10:d7:2e:32:66:c0:3e:5e:
60:46:87:ae:89:09:69:57:a9:70:f8:a8:2a:33:f9:e9:e0:0d:
e7:d2:fc:c3:51:a5:74:1d:23:bd:39:4d:62:42:a1:0c:d5:7b:
cb:b1:7a:3f:0b:5a:08:9c:ad:5d:88:ab:47:5c:14:9a:4d:de:
d6:ee:39:98:69:7d:9f:62:93:42:ad:c2:69:7f:b8:42:0d:d8:
4d:33:80:43:4b:a7:1a:bc:a2:48:4d:34:72:90:b6:28:f7:67:
6b:ca:e5:b9:5b:cb:f8:6d:0b:22:11:49:de:06:a6:3f:58:bf:
1a:e4:07:a7:a4:3e:d3:be:e0:84:47:c4:c6:62:6a:98:5e:f6:
45:4f:a3:fa:23:1c:18:49:6e:c5:a1:be:e0:1e:28:72:f0:8c:
52:9d:56:d5:df:ca:35:90:7a:f7:1c:8b:12:d4:cb:b7:2c:bf:
3e:96:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 02:21:05 2023 by rpki-client on console-ams.rpki-client.org