Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M2gyX3lAyVX2GDR83N3mFl0hf5k.roa
File: M2gyX3lAyVX2GDR83N3mFl0hf5k.roa (raw, json)
Hash identifier: EcgFwhVSEZS7010EjRRhvsyzYCj2Wx6AvBWoAzjEL4U=
Subject key identifier: 33:68:32:5F:79:40:C9:55:F6:18:34:7C:DC:DD:E6:16:5D:21:7F:99
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEE3DACDC04E5C858FF08F96A41579
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M2gyX3lAyVX2GDR83N3mFl0hf5k.roa
Signing time: Sun 01 Jan 2023 06:04:56 +0000
ROA not before: Sun 01 Jan 2023 06:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210379
IP address blocks: 77.65.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:e3:da:cd:c0:4e:5c:85:8f:f0:8f:96:a4:15:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3368325f7940c955f618347cdcdde6165d217f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:10:41:80:ef:e5:bb:3d:1c:ae:43:89:76:
9d:63:1b:98:ee:ec:c5:7e:f8:d5:68:c1:b5:03:fb:
29:00:8b:b1:0c:0c:de:8e:55:a2:67:8e:fb:0a:43:
5c:b5:32:54:89:9c:dd:30:69:3c:cd:2d:7a:96:c0:
9d:87:c2:d4:fc:7d:bf:45:8d:49:b0:55:d6:2c:ce:
e8:9f:25:a5:ed:48:b1:3d:a2:bd:ff:ad:49:46:1b:
76:d8:8c:f0:87:96:86:50:d9:4d:f0:13:e5:90:20:
75:a5:49:fb:0e:8a:e6:f3:aa:af:c7:0c:06:5c:5d:
ac:0d:a4:4b:7c:b1:f4:a7:40:59:e7:8d:b6:9c:9f:
ef:1a:ee:51:59:a1:a3:fd:3f:03:89:dd:ee:d4:fa:
d9:f6:02:0b:41:f0:b9:53:d8:07:a5:bb:dc:15:e5:
fd:61:6a:1c:89:b0:79:9b:3e:c3:9b:a0:15:ab:d7:
00:ae:3b:b6:5d:8c:10:ab:46:bc:26:18:d2:1c:1a:
1d:73:5d:5b:bb:da:d4:52:17:ff:da:05:23:10:e1:
d8:31:1f:50:8a:ac:a6:3e:32:ae:ac:74:a8:0a:12:
74:aa:79:6d:c0:38:fe:c5:7b:39:8e:eb:cc:48:46:
e0:4a:c0:59:b5:05:71:12:65:48:20:e0:33:d3:47:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:32:5F:79:40:C9:55:F6:18:34:7C:DC:DD:E6:16:5D:21:7F:99
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M2gyX3lAyVX2GDR83N3mFl0hf5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.212.0/22
Signature Algorithm: sha256WithRSAEncryption
47:87:11:f3:de:25:86:47:18:f4:c0:cc:8c:de:f2:7c:52:54:
2c:0c:03:85:29:12:40:07:05:55:bf:9f:7c:53:cf:aa:af:9b:
fc:c5:b2:af:f9:fe:a7:c6:b6:4f:00:dc:3b:41:6c:bf:38:65:
b1:f5:65:2a:62:22:ef:5a:e0:02:e3:cb:96:39:89:72:1a:48:
9c:c6:3b:c7:58:08:ba:07:da:d5:be:ca:83:83:11:fd:6d:7f:
4c:42:4a:b7:b4:48:a4:19:37:f5:d9:d5:72:b4:0a:42:7d:46:
62:1b:f3:22:0c:69:7e:5c:ab:39:37:d1:eb:5e:40:43:b8:71:
ba:16:58:ff:f5:a7:36:59:0e:c6:16:a7:46:d3:8c:65:09:9c:
8a:75:b0:bb:14:af:30:35:8d:67:0c:8b:74:28:b2:d1:6f:a3:
7b:76:35:b4:fa:d3:e5:52:93:50:9b:e9:c5:65:e4:3f:c8:66:
44:ef:74:cb:c7:92:8f:db:21:bd:49:a7:62:61:67:f7:d0:a7:
96:a2:3b:86:82:cb:23:34:46:2c:eb:9c:11:42:50:04:6c:1a:
2f:92:0c:89:cc:8e:dc:14:e8:01:11:30:5f:12:b2:f9:05:f8:
ce:86:8c:52:cf:ac:4c:1a:ad:7e:c3:fc:24:40:c1:7b:92:99:
b1:48:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org