Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_wVP1muYhV3aiNLg26iZRK2CAo.roa
File: Z_wVP1muYhV3aiNLg26iZRK2CAo.roa (raw, json)
Hash identifier: jJF0OsDq47jTspw8HKKOP/dOysPt670vwcOQEdP8DFw=
Subject key identifier: 67:FC:15:3F:59:AE:62:15:77:6A:23:4B:83:6E:A2:65:12:B6:08:0A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018B0955DCC2095F836F4DF44EAFB58EEDD0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_wVP1muYhV3aiNLg26iZRK2CAo.roa
Signing time: Sat 07 Oct 2023 08:51:43 +0000
ROA not before: Sat 07 Oct 2023 08:51:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27796
IP address blocks: 201.77.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:55:dc:c2:09:5f:83:6f:4d:f4:4e:af:b5:8e:ed:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 7 08:51:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67fc153f59ae6215776a234b836ea26512b6080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:3f:0d:c3:5c:17:0b:81:75:ca:95:93:fc:
a2:59:0d:b4:85:c4:b4:75:48:80:85:f4:a9:a8:c1:
53:38:1d:41:1c:8c:e3:86:fd:d9:39:fb:21:53:65:
9b:e5:56:73:04:0a:a3:30:a3:5a:5d:1a:a8:f8:0c:
a5:6f:d9:b4:11:22:24:d6:ff:83:75:44:09:16:84:
d1:46:30:b0:e0:9d:20:6d:18:e8:7f:b6:2b:78:11:
7b:62:ce:43:35:6a:50:65:3c:f1:5d:05:00:0f:e3:
72:e0:0d:d1:70:fc:55:de:9b:f1:e3:c6:f5:11:cf:
50:5a:d5:2e:2a:89:13:32:7e:fe:ea:7e:0b:44:78:
55:4b:4b:b6:9f:7e:82:05:e0:15:1e:34:b4:3e:5b:
37:76:f3:01:3e:96:72:eb:a6:77:9c:94:5b:49:f7:
65:d3:f5:2a:b1:96:09:78:b0:72:6e:21:56:65:98:
bb:22:92:60:ff:bf:44:17:30:c0:ae:ae:a2:32:17:
5f:87:d6:aa:a4:d2:6a:b1:8c:ea:d2:46:82:64:dc:
dd:4a:33:92:75:c0:e7:aa:22:93:45:bd:96:5f:a0:
69:ea:fc:42:07:2a:29:18:67:d8:12:ed:bf:26:83:
23:29:cc:93:c1:22:7e:1d:7b:31:94:b6:35:e3:00:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:15:3F:59:AE:62:15:77:6A:23:4B:83:6E:A2:65:12:B6:08:0A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_wVP1muYhV3aiNLg26iZRK2CAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:14:f8:2a:23:4c:9a:1c:ab:64:7d:ca:e2:67:c2:60:af:51:
9c:bf:ca:3e:03:45:e3:2e:38:53:b2:58:3e:5d:7e:e2:44:64:
86:78:cd:02:9c:0e:84:a5:c6:cb:ac:a8:10:13:b2:3c:15:c7:
03:3d:94:4d:3d:ed:52:ab:a1:c8:5f:33:29:75:08:e2:ce:7f:
d4:49:14:da:2f:7d:8e:fc:2d:4f:61:7c:24:60:e8:5a:f7:5b:
31:cd:1c:74:65:7e:ef:fb:1f:4d:30:7d:9e:5c:fa:10:c0:62:
39:fb:86:ae:ae:90:ab:56:54:ed:2a:3f:b4:f4:99:e2:d0:e0:
b6:31:5b:83:00:a0:f4:d3:7f:63:24:09:58:b9:86:1b:cd:49:
12:95:c7:c0:f2:e8:01:30:38:8b:25:17:c4:fc:5d:2a:06:fe:
11:5b:8a:0c:9f:91:a8:ed:cb:02:67:56:bc:f5:02:89:62:a3:
73:07:2b:53:2f:c2:70:2a:c7:9e:4e:b5:e1:85:c7:8b:cd:ad:
5b:49:70:68:13:49:3f:dc:69:11:a4:df:1c:c1:81:1d:0e:b6:
7f:09:1b:44:15:c8:7c:3f:56:dc:3d:b5:8f:2c:47:2e:dd:dd:
60:38:cd:f2:cb:29:69:77:71:0c:f3:f3:70:89:a3:63:36:04:
4b:52:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org