Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/9n-jqjIIbrZ-tVAmK3v08hVnClE.roa
File: 9n-jqjIIbrZ-tVAmK3v08hVnClE.roa (raw, json)
Hash identifier: qY1LEbo+gy+lnMr0f0fXqZB+UOzX/JVFLsB7uWzN30o=
Subject key identifier: F6:7F:A3:AA:32:08:6E:B6:7E:B5:50:26:2B:7B:F4:F2:15:67:0A:51
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 018BCD3D3B67B4924D4946F4E2E3C3C29D2B
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/9n-jqjIIbrZ-tVAmK3v08hVnClE.roa
Signing time: Tue 14 Nov 2023 09:50:23 +0000
ROA not before: Tue 14 Nov 2023 09:50:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58024
IP address blocks: 77.105.145.0/24 maxlen: 24
84.54.46.0/24 maxlen: 24
77.105.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:3d:3b:67:b4:92:4d:49:46:f4:e2:e3:c3:c2:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Nov 14 09:50:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67fa3aa32086eb67eb550262b7bf4f215670a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:be:2b:b9:1c:28:42:c0:3a:65:85:b4:1b:
17:e8:25:d2:e8:57:ec:e0:cd:42:b9:27:68:14:2b:
2f:57:56:5e:6c:40:39:52:82:96:9f:49:12:25:4d:
0e:d7:be:f2:8e:f4:54:13:7c:4a:8f:7e:d6:1f:62:
bc:e9:18:32:6c:54:2c:74:84:ec:30:42:02:d0:cf:
3a:c8:17:b8:e1:3f:97:0e:8d:45:15:5b:fb:81:16:
96:50:59:ef:ad:02:34:1e:2c:f0:87:eb:07:5a:94:
3f:dd:12:de:b9:a2:c8:10:f8:56:41:3b:ae:a1:12:
04:da:d8:59:1c:f6:17:b0:ea:b5:bf:9e:18:65:c4:
e9:93:cc:0b:05:2d:c1:ce:80:d3:cc:a1:6c:0b:24:
14:4d:d6:0b:89:44:0a:24:ee:ef:8b:90:a8:91:2c:
c0:62:e8:c4:da:9d:d7:5f:e5:9e:f6:26:8c:a1:43:
5c:38:27:27:ff:5b:85:9d:ab:02:ab:b9:ca:18:38:
a8:6e:4d:5e:5a:be:79:76:d7:68:bf:b7:63:e2:ad:
30:ab:72:e4:17:f3:09:69:c7:6e:1d:57:6b:15:ea:
98:b8:78:85:bc:91:70:c6:7d:2e:ce:2a:74:70:14:
cf:bc:7c:2a:a7:9d:28:ad:2c:6a:fb:60:d0:24:f2:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7F:A3:AA:32:08:6E:B6:7E:B5:50:26:2B:7B:F4:F2:15:67:0A:51
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/9n-jqjIIbrZ-tVAmK3v08hVnClE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.145.0/24
77.105.165.0/24
84.54.46.0/24
Signature Algorithm: sha256WithRSAEncryption
64:56:94:7c:15:10:ff:90:be:e3:a0:d5:e0:2f:1c:d5:19:d1:
c3:b2:95:65:96:5f:a4:86:d2:23:55:fa:74:43:da:c1:36:33:
12:6f:be:e6:f0:57:75:c9:da:b2:bd:f1:f8:91:44:a4:f7:ec:
07:19:f9:b5:8d:f2:f8:8f:c5:93:aa:27:e5:68:60:3b:65:ad:
85:02:4b:2c:34:b4:ff:d4:54:81:a1:95:a3:61:4c:2c:f5:e2:
d0:30:66:8b:2c:c5:81:6b:7f:5f:76:49:67:52:56:5d:8b:86:
9e:0f:1e:c8:be:4f:75:07:14:b7:70:88:a4:cb:14:54:39:f8:
db:c0:16:94:4f:ed:dc:e4:21:55:1e:86:eb:f7:72:b1:6d:6b:
01:8e:4d:a7:a1:b2:5c:c4:50:c0:1c:c1:78:db:f7:92:5a:3a:
d4:5a:78:02:ba:50:05:0a:20:aa:ec:d5:40:d1:1e:ea:89:8b:
64:71:17:40:44:cb:93:5c:7f:3e:a7:5d:ca:b5:65:b4:b9:b4:
2e:48:f0:2d:9a:27:e0:65:04:86:23:31:98:0f:7f:ae:b7:a9:
51:0e:4d:13:82:e6:f0:73:df:74:9d:26:35:d6:8c:6e:52:15:
da:9b:05:95:eb:67:ef:2e:32:a6:94:1b:cd:28:9f:17:e1:fe:
81:3b:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:21 2024 by rpki-client on console-ams.rpki-client.org