Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/7JYnStlyHZeGrYkDQzJZVLd8sDg.roa
File: 7JYnStlyHZeGrYkDQzJZVLd8sDg.roa (raw, json)
Hash identifier: Ej6nb5P11O9Qf9a5c6STHlmdAfITBwA2xfb3O4205YM=
Subject key identifier: EC:96:27:4A:D9:72:1D:97:86:AD:89:03:43:32:59:54:B7:7C:B0:38
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 01856EEFF5B206117419FC96BAC079D1A916
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/7JYnStlyHZeGrYkDQzJZVLd8sDg.roa
Signing time: Sun 01 Jan 2023 20:04:57 +0000
ROA not before: Sun 01 Jan 2023 20:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49910
IP address blocks: 77.232.252.0/23 maxlen: 24
2a12:9940::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Mar 2023 11:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:f5:b2:06:11:74:19:fc:96:ba:c0:79:d1:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jan 1 20:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec96274ad9721d9786ad890343325954b77cb038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:42:f6:f2:e3:74:0e:d9:03:1f:ce:7e:c9:
00:ae:d3:c8:fd:85:d7:c2:dd:85:83:af:a8:c5:de:
4a:b1:48:da:40:23:c9:69:11:79:9f:89:5c:27:08:
92:fb:fe:3b:51:97:e2:65:c4:7e:99:9b:1c:8a:64:
df:94:0c:ef:a4:f9:46:6b:8e:02:ac:ca:4a:d5:f3:
dd:19:e9:f0:7c:7b:c6:0c:de:e1:45:62:93:35:0d:
dd:ad:3b:4a:e1:5a:33:6b:f2:a6:87:22:fc:8c:61:
fa:38:5c:9c:dc:3b:85:9f:cd:e9:24:4b:a7:26:d6:
18:92:2d:71:32:98:29:17:6c:53:ed:f1:89:0e:85:
8b:db:4a:9a:46:08:88:b2:05:34:c3:c6:b9:f9:73:
08:e0:f6:f6:53:ea:06:73:a7:af:36:a8:31:9c:c2:
a4:29:46:44:e9:fd:db:30:96:df:36:7b:cb:4a:88:
12:ee:b6:9a:16:b3:34:db:92:02:87:9c:fd:6a:08:
67:e5:2f:06:49:04:2c:5e:59:19:31:90:e4:99:e7:
f7:b7:01:10:a7:1c:af:a4:58:51:fb:4e:87:65:bc:
36:2e:e8:01:df:4a:01:0a:8b:cd:f2:9b:64:37:4b:
ae:bb:cf:2c:2a:cd:9c:4d:2f:54:52:be:33:b0:79:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:27:4A:D9:72:1D:97:86:AD:89:03:43:32:59:54:B7:7C:B0:38
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/7JYnStlyHZeGrYkDQzJZVLd8sDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.252.0/23
IPv6:
2a12:9940::/29
Signature Algorithm: sha256WithRSAEncryption
95:c3:fa:65:0e:2a:f8:1d:8a:dd:47:66:44:28:69:1c:8b:7b:
47:37:d9:8d:92:57:c9:c8:9d:69:29:0d:3a:5b:ec:9d:ce:c4:
14:80:15:f7:6a:55:07:b0:12:3b:57:6a:70:84:2d:69:11:9b:
3d:ae:95:e7:c7:c3:4b:c7:74:96:39:7a:fd:f0:d3:8d:7f:ec:
f3:ca:89:34:d5:3c:72:ce:47:44:1d:80:35:02:c3:ba:2b:50:
e8:72:48:d4:ec:7a:8b:29:07:3d:99:c3:1a:12:1c:42:f4:c8:
e5:a5:78:3a:82:68:63:e1:cf:c7:d7:62:b2:7e:fa:36:9f:32:
07:02:5a:be:6b:4b:fd:b4:dc:d6:c6:f1:ba:78:e3:19:83:97:
de:91:1c:85:86:26:8f:d9:bd:be:39:16:ef:75:a5:b5:ac:a7:
3d:3d:1e:14:61:3d:5f:e7:e9:8e:9c:e0:e3:2a:57:e6:d8:3d:
02:ea:73:d6:e9:7f:1e:c1:25:36:db:a9:30:8a:7b:80:0e:49:
73:53:64:e8:3e:1c:d5:ee:4d:cd:b7:b1:56:7e:c7:6a:3a:c0:
f7:58:00:36:d6:df:ff:6e:67:be:35:f5:fe:75:ed:04:0b:5b:
5b:b4:f8:2d:a2:73:93:99:1f:c4:95:b2:12:27:f8:48:6a:3a:
9c:ef:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:54 2024 by rpki-client on console-ams.rpki-client.org