Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/HUX0U8Xv0H2pq43SAlf9NNbX1fE.roa
File: HUX0U8Xv0H2pq43SAlf9NNbX1fE.roa (raw, json)
Hash identifier: c2V9njpAsgEbuLTJbT0Xj2jpXA0vIg1et8YQiMuwFvU=
Subject key identifier: 1D:45:F4:53:C5:EF:D0:7D:A9:AB:8D:D2:02:57:FD:34:D6:D7:D5:F1
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 0185701510428DAF210E8B2FD78CEE4C211E
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/HUX0U8Xv0H2pq43SAlf9NNbX1fE.roa
Signing time: Mon 02 Jan 2023 01:25:06 +0000
ROA not before: Mon 02 Jan 2023 01:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.145.0/24 maxlen: 24
77.105.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:10:42:8d:af:21:0e:8b:2f:d7:8c:ee:4c:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jan 2 01:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d45f453c5efd07da9ab8dd20257fd34d6d7d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:b7:d7:6e:36:17:af:0e:01:d2:ca:16:77:
62:06:da:3d:2a:58:5b:ca:bc:2b:3d:3b:39:05:41:
e5:96:ba:23:51:15:a2:05:61:c3:b1:36:21:af:1e:
06:1e:aa:bb:d0:b0:b4:48:c5:5e:ac:d0:72:b6:fb:
55:f5:c0:1e:5e:27:fd:d4:13:37:e3:bd:82:06:c1:
02:56:c7:82:b9:a0:8d:39:f4:9f:7f:62:65:76:8f:
3b:4a:8f:bd:cd:62:04:03:83:25:d4:58:73:14:15:
2e:3e:cc:6c:64:a5:61:1a:d9:f4:b1:6c:93:55:e3:
93:4f:45:93:a2:9c:76:e9:05:61:ec:de:c2:c2:19:
91:19:a0:97:c7:af:23:86:cd:c0:4b:91:9f:1b:64:
66:54:b2:ce:3b:e4:28:95:c7:97:ab:01:88:40:58:
8e:d3:68:fe:bd:f0:8f:01:27:63:bd:99:3f:c0:fd:
aa:f0:07:56:4f:f5:71:5e:55:95:be:ef:b6:2a:28:
e2:a8:ac:3a:65:09:44:12:1d:1c:86:87:05:37:52:
44:e8:eb:b2:48:2a:13:e3:89:2f:d0:0d:25:e1:06:
96:0c:06:ad:12:fe:69:36:03:4b:49:ba:26:b6:eb:
f7:9b:b5:0c:42:dd:b8:db:51:fd:09:21:27:08:77:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:F4:53:C5:EF:D0:7D:A9:AB:8D:D2:02:57:FD:34:D6:D7:D5:F1
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/HUX0U8Xv0H2pq43SAlf9NNbX1fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.145.0/24
77.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fe:57:e2:3b:4d:82:27:80:e6:6e:1f:ec:77:68:8d:32:d2:
1f:f3:5b:42:6f:92:85:53:9c:93:49:38:51:f9:37:cf:c4:35:
1f:9c:72:95:5d:98:37:0f:c3:cf:04:da:8a:af:ec:5a:f8:d1:
cf:57:dc:6f:bc:d3:a5:16:08:9c:b7:08:93:89:cd:1a:90:4b:
56:6f:71:22:28:25:0a:52:f5:23:70:f7:e3:65:3d:7b:3f:51:
c2:98:a1:10:07:84:80:30:92:af:83:3f:59:0a:59:55:bc:13:
af:3f:8a:78:ed:4e:78:b4:d5:57:23:d5:12:d0:eb:8d:3e:22:
1e:3f:82:8b:0b:a3:84:71:36:ad:19:83:87:db:d2:cc:e0:64:
03:8e:fc:43:47:6e:04:32:39:12:35:df:94:f1:10:e2:30:87:
89:21:fd:a4:ce:f6:3c:06:60:5e:b9:91:16:72:e3:6d:02:c8:
02:20:1e:31:2d:48:7b:5d:49:5a:78:a8:06:9d:cd:f0:1a:05:
a0:db:5c:26:91:13:1e:1a:fe:d8:11:a6:46:8d:9c:6b:bc:d9:
7a:e9:ab:da:25:f9:8b:f9:62:52:5f:2d:26:7b:bb:18:c9:16:
44:47:08:32:1d:75:c7:4e:82:3d:48:43:1a:40:9a:e9:c8:ca:
b8:29:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:00 2023 by rpki-client on console-fra.rpki-client.org