Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4NGW2ywREq0LTSVsjouMyZcEFNs.roa
File: 4NGW2ywREq0LTSVsjouMyZcEFNs.roa (raw, json)
Hash identifier: Evlf0Fs9z12iWVumn/FQgF4QsHKFX1FGFK1KplkV1kk=
Subject key identifier: E0:D1:96:DB:2C:11:12:AD:0B:4D:25:6C:8E:8B:8C:C9:97:04:14:DB
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEBBC6AD6E98CD94068A94F3218D2E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4NGW2ywREq0LTSVsjouMyZcEFNs.roa
Signing time: Sun 01 Jan 2023 06:04:45 +0000
ROA not before: Sun 01 Jan 2023 06:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42402
IP address blocks: 77.65.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:bb:c6:ad:6e:98:cd:94:06:8a:94:f3:21:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0d196db2c1112ad0b4d256c8e8b8cc9970414db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:60:d6:23:f8:a7:dc:ce:be:49:a9:b4:e2:
d3:85:de:fc:29:7a:7d:a9:67:6a:f7:1d:fa:a1:f1:
bf:08:d8:0c:ac:8e:1c:49:42:1e:9d:1f:b8:30:b3:
f5:61:7e:2b:93:4c:90:33:fa:bf:0e:c1:b4:04:26:
2b:f9:89:fe:cb:e1:e6:52:6c:73:b1:32:93:f4:27:
65:9f:31:e5:ee:02:be:e8:63:82:be:84:4a:fc:c3:
36:7a:1f:f7:fd:6f:90:05:4d:09:a5:3b:60:52:4c:
57:74:64:9f:ec:34:a7:63:9d:3b:fe:ca:92:05:f6:
b9:91:98:d5:ad:2a:1c:3f:f4:d2:c5:92:87:44:0f:
50:8e:d2:4d:14:1b:d9:32:cf:88:7f:18:a3:35:08:
de:9c:15:6c:68:19:78:ca:1d:9b:21:cb:88:7c:0c:
7f:d3:58:a3:85:49:49:43:c9:bf:10:90:37:af:5a:
a5:99:0a:7c:5a:8d:66:de:18:6e:24:7b:53:94:6f:
d1:2a:7c:b1:3d:cf:8f:d5:a0:61:4b:33:99:18:52:
ae:fa:27:8c:1d:6a:15:de:d0:77:2f:0b:e3:96:58:
4f:8a:88:cf:e3:61:dc:3c:01:55:82:f9:06:8a:b2:
03:62:34:d9:cb:de:86:0d:d7:89:2f:f5:25:22:9b:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D1:96:DB:2C:11:12:AD:0B:4D:25:6C:8E:8B:8C:C9:97:04:14:DB
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4NGW2ywREq0LTSVsjouMyZcEFNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.136.0/22
Signature Algorithm: sha256WithRSAEncryption
85:ed:55:49:80:da:7c:6f:d3:3d:81:70:fa:f0:8a:fc:ee:d0:
f0:c1:57:d9:f8:26:c3:98:a6:3e:50:2e:97:f9:2e:4c:1f:3d:
ca:79:81:b1:7b:c3:47:56:15:74:20:be:4b:4c:09:b2:e3:db:
6c:10:f2:87:f3:8d:d4:5d:e7:54:7a:af:2a:1a:39:79:e9:75:
e8:e6:e1:86:93:58:23:11:64:2f:20:4e:39:f3:4b:01:e4:81:
5a:ac:01:6f:09:9b:16:88:88:b3:24:7d:45:82:90:6a:b5:17:
60:13:09:cd:80:af:e2:61:b5:ce:fc:aa:0d:f9:e9:de:a7:f9:
16:1f:34:69:93:2a:90:15:b0:ef:e2:16:c7:94:a3:00:73:90:
f7:35:e6:8b:dd:f2:c3:d0:2a:2f:d5:ce:50:54:67:29:e3:d5:
69:64:3a:64:5f:70:3e:2c:d0:4c:4a:75:80:3a:72:5a:83:ba:
67:ab:aa:21:b0:fa:b7:0c:7b:a8:b5:ad:87:19:93:ad:bf:30:
d5:9e:c9:fe:12:c4:85:4a:c8:ed:56:f2:dc:b0:10:dd:57:ac:
d8:bf:22:39:1f:06:11:a7:8d:09:53:97:b2:54:22:bc:30:3a:
63:31:a0:9a:57:3c:97:fc:16:a2:a7:a9:1e:14:87:a6:aa:68:
4c:ec:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org