Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ine1yEaAcbRVi1F5qRXoRaz9fy0.roa
File: ine1yEaAcbRVi1F5qRXoRaz9fy0.roa (raw, json)
Hash identifier: ZK9bv0LQeASW0DaONvnAFb+SWfCAC+arYjrf452NSck=
Subject key identifier: 8A:77:B5:C8:46:80:71:B4:55:8B:51:79:A9:15:E8:45:AC:FD:7F:2D
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC43B16AC050521B7FCB26133FFC9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ine1yEaAcbRVi1F5qRXoRaz9fy0.roa
Signing time: Sun 01 Jan 2023 06:04:47 +0000
ROA not before: Sun 01 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198408
IP address blocks: 77.65.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c4:3b:16:ac:05:05:21:b7:fc:b2:61:33:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a77b5c8468071b4558b5179a915e845acfd7f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:7f:36:9b:ee:89:bb:03:24:72:c3:8f:a7:
28:28:a2:e8:68:21:92:c0:e0:3d:5a:a8:99:f4:34:
7f:91:a9:e7:45:71:25:e5:d6:28:8c:5d:0b:20:59:
d0:da:a8:c9:5a:b0:e0:ff:55:9d:c4:70:75:76:ee:
01:d7:e3:1a:f1:e0:10:0f:3f:80:88:b3:47:e8:d2:
b1:4d:12:b2:2f:b7:ef:e0:f1:5f:63:cd:12:24:68:
9f:34:24:30:54:2e:73:26:7b:a6:b8:79:d6:be:07:
a8:a6:0b:ff:a8:e6:6f:be:49:18:6a:15:5b:55:b9:
92:25:10:07:c3:c5:ca:d5:0f:c8:f0:a5:e2:4f:d0:
16:3f:c7:e6:ee:e1:af:18:62:33:df:a1:74:a6:83:
17:f0:d5:55:34:90:5b:80:c5:2d:91:f8:c1:e0:43:
c2:94:d1:68:fe:69:f1:9e:e8:1c:7a:c6:db:e0:4a:
9b:8b:7c:60:49:f3:bf:66:54:c1:e6:22:1f:d2:2f:
09:b3:75:3c:c5:df:89:e8:5b:34:72:37:33:5f:46:
04:14:84:ac:9a:15:a1:7c:c6:f9:df:8c:b9:a6:99:
67:cd:9f:a3:54:90:77:25:c7:aa:67:ee:86:d3:ac:
f9:bb:ba:dd:dd:75:ea:79:62:43:3c:c9:06:49:40:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:B5:C8:46:80:71:B4:55:8B:51:79:A9:15:E8:45:AC:FD:7F:2D
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ine1yEaAcbRVi1F5qRXoRaz9fy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.189.0/24
Signature Algorithm: sha256WithRSAEncryption
00:df:b7:e8:bb:1f:47:09:b0:cc:11:2d:11:bd:ff:a5:4f:b7:
cf:0a:16:9c:e1:de:50:af:51:e6:40:5f:df:50:6a:32:1e:c7:
49:af:74:a9:47:fc:6b:98:40:9a:93:5d:ae:61:20:ac:16:e4:
ff:9a:81:1e:fe:1c:90:6e:d0:a0:89:24:73:08:bf:b4:8c:79:
27:a4:a5:77:f7:5f:f5:30:55:d6:c5:6f:f4:6b:34:1c:58:f9:
b7:98:66:41:a7:67:2c:51:52:29:a3:49:c6:b9:ff:2d:76:b0:
d6:c5:4f:b2:dd:80:ed:05:9b:62:e4:c3:06:3b:ae:3c:c2:b9:
fd:f8:85:bc:3d:1b:ba:30:2c:ff:5d:e5:fa:1d:59:88:75:1f:
a9:2d:e9:24:aa:ec:56:2b:fd:52:3c:6e:c7:5b:8c:6f:09:5f:
73:22:fa:06:76:eb:a5:b3:6f:fa:0c:0e:48:d1:94:7e:25:87:
41:0b:bc:64:4f:b8:a3:21:17:c7:02:e1:f0:b1:bb:ec:0c:62:
dd:a5:e0:d3:fa:58:1d:2a:b7:ad:40:48:0a:7a:e1:aa:9d:27:
21:b4:bc:70:fb:2f:da:33:56:55:c3:83:a6:af:62:5b:13:d4:
0b:88:8d:95:eb:85:53:14:19:8f:13:b2:95:81:95:08:98:7f:
b9:fc:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org