Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kw_dVWMuRrYry-RFltDCQp1G-ss.roa
File: kw_dVWMuRrYry-RFltDCQp1G-ss.roa (raw, json)
Hash identifier: ag1CfKz+gVDfkhW3mBfXlRcsTwT7idIT3fAj3C2M7Tw=
Subject key identifier: 93:0F:DD:55:63:2E:46:B6:2B:CB:E4:45:96:D0:C2:42:9D:46:FA:CB
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEBDD7D6FA0D6BF645E7136C60E543
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kw_dVWMuRrYry-RFltDCQp1G-ss.roa
Signing time: Sun 01 Jan 2023 06:04:46 +0000
ROA not before: Sun 01 Jan 2023 06:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51769
IP address blocks: 77.65.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:bd:d7:d6:fa:0d:6b:f6:45:e7:13:6c:60:e5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=930fdd55632e46b62bcbe44596d0c2429d46facb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:27:30:de:d8:be:d9:80:06:de:4f:ea:a7:
6b:d2:6b:12:f7:2a:8b:15:1a:92:0d:99:32:b7:9a:
56:82:9b:11:34:77:ad:0e:b4:3f:07:e3:4c:c9:44:
be:d8:2e:90:86:1f:9d:fb:c1:67:9c:4f:7e:95:55:
f6:33:15:1e:e5:a6:88:b9:00:7c:24:85:84:e9:0a:
14:ee:64:8e:dc:dc:ab:40:81:cb:f1:c3:75:58:2e:
53:b6:3f:7c:63:12:d9:19:2b:71:4e:0d:59:a2:ae:
53:ac:84:64:d9:43:20:37:06:83:d7:5f:b6:4a:86:
29:80:53:2a:83:e1:3d:8c:34:00:da:01:10:bf:b8:
04:10:dd:bf:d3:ed:bd:aa:f2:8b:07:60:42:2d:c0:
51:61:cb:49:b1:80:08:b2:8a:52:ae:23:17:db:a2:
92:8a:0e:41:59:b8:c8:f7:b4:4d:1a:67:b6:c6:2e:
8b:9a:2e:11:e0:3e:77:c3:47:57:f2:c8:43:2b:c1:
ce:dc:50:67:2a:47:34:72:56:4b:ff:57:79:ad:6c:
df:1f:2c:ac:df:72:f4:23:52:6b:4a:4b:21:28:67:
d1:56:f8:60:a6:8b:59:ae:2a:ed:c9:78:ba:07:f9:
32:3f:13:d0:05:dd:05:2f:ee:2a:79:11:da:8f:f1:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:DD:55:63:2E:46:B6:2B:CB:E4:45:96:D0:C2:42:9D:46:FA:CB
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kw_dVWMuRrYry-RFltDCQp1G-ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.190.0/23
Signature Algorithm: sha256WithRSAEncryption
85:d7:bd:f3:06:fc:f5:6f:23:98:31:10:bc:d9:2e:ef:cd:93:
21:9b:ba:88:98:9b:69:50:92:b3:a3:09:6b:e9:75:a4:a3:2e:
1a:74:f8:db:f9:48:e0:e7:c6:87:e6:b7:e6:c9:7c:7d:0f:be:
fc:20:fe:98:94:9c:14:77:28:8d:b2:50:86:e1:8e:03:bb:0c:
a3:bb:d8:bd:59:96:a8:8b:6c:a9:d4:66:ef:6b:b5:c0:fa:58:
b1:90:db:0e:d3:3c:46:3d:4a:79:6d:60:c4:10:9c:77:b6:1a:
f4:8d:ad:d8:2e:c9:fe:c1:46:fd:2b:1e:7d:e7:cc:6f:88:63:
12:eb:1e:f3:da:9a:7a:e3:7c:0f:f9:2f:60:bd:a3:67:16:02:
66:52:77:eb:22:93:fd:c8:d7:3e:cb:18:01:d4:d6:30:e5:1d:
60:b5:51:8e:e2:5e:34:8b:c8:f2:b6:72:27:f1:04:7c:63:d4:
ec:14:ee:6c:dd:fd:11:d6:3f:dd:e2:32:22:e0:89:54:85:6f:
ce:ac:17:cc:8d:71:37:e2:cf:86:b4:e4:e7:6e:cf:eb:08:2d:
14:db:3b:3f:2d:a6:72:30:3d:0b:0b:65:0a:27:03:5c:62:99:
e7:4b:e8:79:b9:58:0d:d8:78:89:42:2e:e3:37:74:97:b1:12:
3f:b2:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org