Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/Hyj65JRW2C9ivPqZVTCeDkMBVQA.roa
File: Hyj65JRW2C9ivPqZVTCeDkMBVQA.roa (raw, json)
Hash identifier: nHgbsDNkKxJ9wejcRNgzUc2eziKdt/mVTSyEzQBmJNs=
Subject key identifier: 1F:28:FA:E4:94:56:D8:2F:62:BC:FA:99:55:30:9E:0E:43:01:55:00
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 018896FBEAE5141C126C499F68FC1AC21F49
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/Hyj65JRW2C9ivPqZVTCeDkMBVQA.roa
Signing time: Wed 07 Jun 2023 17:51:11 +0000
ROA not before: Wed 07 Jun 2023 17:51:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 77.243.91.0/24 maxlen: 24
77.243.89.0/24 maxlen: 24
77.243.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:fb:ea:e5:14:1c:12:6c:49:9f:68:fc:1a:c2:1f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jun 7 17:51:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f28fae49456d82f62bcfa9955309e0e43015500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:2b:ea:3a:43:9b:3e:e6:1e:f6:87:f2:59:
b0:a5:51:59:6b:fe:28:54:b1:f4:2a:59:da:c4:63:
45:8e:0b:56:dd:8c:3a:e1:53:4e:ad:d3:83:eb:a6:
fc:47:2f:0b:71:f8:06:01:da:41:b3:8d:b9:b3:e7:
bb:82:41:44:05:6e:8d:ab:f4:7c:2d:e8:eb:7e:6d:
cb:16:6b:e5:4a:ff:06:22:3e:11:bb:b4:72:1a:02:
cd:9b:33:9a:1a:54:62:0b:55:7c:ee:b8:f2:13:7c:
76:d3:19:f3:93:75:ff:00:73:83:c6:0a:22:d1:92:
67:60:04:62:d4:a0:b2:f2:4a:83:68:18:79:85:65:
23:bd:f6:da:bf:d5:d1:96:cf:07:e6:cf:b3:67:d5:
e5:c0:ff:65:bc:47:d6:3d:83:cc:85:19:49:96:9f:
7f:ef:b5:a4:66:a4:24:08:e6:97:9e:35:c8:8d:67:
39:28:bc:c1:19:ff:4c:9c:0c:9c:c3:93:18:99:af:
d6:18:00:d9:be:3c:a8:a0:ad:cd:81:c5:d1:81:0d:
72:47:6b:c0:d9:7d:30:8a:cc:62:0f:ad:b4:de:a5:
fe:3b:0a:d7:9b:7d:43:36:58:ec:db:96:9b:3d:ff:
be:ca:14:62:43:d2:93:fb:d0:ce:66:5a:a0:c7:ca:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:FA:E4:94:56:D8:2F:62:BC:FA:99:55:30:9E:0E:43:01:55:00
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/Hyj65JRW2C9ivPqZVTCeDkMBVQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/23
77.243.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:af:a2:85:dc:05:f7:fe:57:ab:60:b2:5a:f4:a9:e2:dc:36:
9c:35:c9:66:e2:fa:bd:fe:0b:3d:a2:94:06:f7:84:24:c1:58:
06:d2:16:9a:8c:8d:cf:3f:9e:f9:bc:ee:5c:c7:27:79:4b:5e:
b9:f4:f9:e9:b2:f1:e3:a0:64:e2:8e:18:c0:24:4b:00:10:e1:
d8:68:1d:77:1d:19:4b:7e:da:0c:e4:41:34:6b:18:cf:4d:a1:
a9:11:79:d9:d0:07:5a:4c:a9:d4:97:74:9c:40:7c:4f:83:bd:
ca:f9:2d:e6:8b:02:60:5c:1c:a1:b7:2e:31:c7:fb:a6:67:68:
fe:dd:3d:ee:16:59:a8:31:5b:7c:8b:92:61:1d:37:d6:81:68:
58:ad:7c:f4:f2:0f:25:e7:65:ea:97:4b:b1:b8:d1:03:3b:91:
9b:56:86:cb:aa:5c:31:df:a8:90:95:da:2e:7b:37:3b:45:25:
dc:c6:09:e6:35:fb:c2:0f:2b:c2:9a:4f:ff:ed:ab:1f:f2:81:
f0:92:90:7c:82:02:41:d8:ec:10:8f:06:f0:55:e5:bb:6e:f6:
cd:4c:a6:0f:3e:1c:47:89:cb:a7:f1:f6:1b:8d:4f:b5:7d:e4:
88:9f:32:50:be:27:a7:2f:c9:eb:5f:d8:ca:8f:a4:db:1b:70:
c5:b9:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-fra.rpki-client.org