Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Nr76vOtBZqNrYuT1JRvHEo6l1V4.roa
File: Nr76vOtBZqNrYuT1JRvHEo6l1V4.roa (raw, json)
Hash identifier: uvuf7CLp/GqsmDfGlFc/pnbgKvxAhp3hN8YlEHbAnBo=
Subject key identifier: 36:BE:FA:BC:EB:41:66:A3:6B:62:E4:F5:25:1B:C7:12:8E:A5:D5:5E
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A36CAE6B23D22070B859B0BA09E5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Nr76vOtBZqNrYuT1JRvHEo6l1V4.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39112
IP address blocks: 82.177.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a3:6c:ae:6b:23:d2:20:70:b8:59:b0:ba:09:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36befabceb4166a36b62e4f5251bc7128ea5d55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:78:12:fe:80:66:f6:ad:60:f4:7e:14:96:
a5:7a:38:8a:e8:0e:0c:df:bb:a9:f9:3f:9c:e1:2d:
8b:85:75:9b:ec:92:86:66:dc:38:2d:94:66:ff:bd:
d7:c8:0a:9c:83:a5:eb:e9:06:32:87:30:a7:59:7f:
bc:e1:4b:09:c8:5b:93:bf:6c:ad:82:a7:4e:0c:b6:
57:6b:fc:c5:57:9a:40:10:e2:4d:b8:18:b8:e2:63:
ea:a4:7b:6f:9e:3b:bd:fb:b1:56:ad:00:1f:aa:e8:
5d:96:b5:24:04:fd:bf:97:d4:78:a8:a8:a1:49:2c:
10:4a:69:67:2a:2f:7d:64:0a:40:ad:e6:e5:6f:51:
12:88:3f:f4:36:8b:a4:95:22:dc:1d:59:50:55:fd:
72:c8:8a:fa:f6:1c:a2:30:24:d8:d6:fd:42:45:6e:
f3:b0:1f:95:0d:b9:19:87:14:cf:b4:2a:f5:96:3b:
68:db:4d:e7:ba:89:85:0a:c3:b7:1c:ed:89:a9:57:
a7:18:bc:e1:d6:67:66:93:9f:6a:d9:bd:28:19:b2:
bf:96:3d:67:e4:d8:ca:97:b9:bf:f9:f5:a7:57:b9:
da:69:8d:04:b7:a6:cd:09:77:ca:bb:23:21:49:d1:
ac:4e:8f:59:f6:9a:47:45:47:e8:9c:d9:f4:0b:d9:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:FA:BC:EB:41:66:A3:6B:62:E4:F5:25:1B:C7:12:8E:A5:D5:5E
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Nr76vOtBZqNrYuT1JRvHEo6l1V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.253.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ef:b2:df:d5:22:f9:03:5a:50:6d:b7:b3:08:48:0d:8d:af:
b3:fd:fa:3d:d1:29:d1:22:9c:30:0b:ca:d9:dc:ef:25:81:8a:
59:f3:8c:76:81:0a:63:74:fa:bb:43:f0:2d:ea:a7:2b:55:4d:
31:0d:71:79:d1:42:1d:a5:4c:13:73:6f:a0:86:3c:2b:5b:a7:
89:46:0c:ed:d6:5f:15:d9:6d:af:76:8c:ca:db:8e:ef:bc:33:
9d:ce:2b:7d:60:71:e4:3d:28:96:0a:2b:a9:c9:86:33:00:12:
d0:15:98:55:d8:70:ce:3c:49:db:c3:5f:66:41:ff:ff:9a:4a:
99:a8:aa:68:a0:86:1c:e8:3d:92:7d:5e:07:87:c4:02:74:1b:
94:de:e3:66:13:35:0f:cf:40:bf:ec:48:db:0b:4c:f5:cc:5f:
7a:82:9f:cd:b8:fc:6c:52:1d:fa:0c:10:18:f3:cd:d8:86:88:
99:9a:7d:b7:b0:fc:74:ba:b7:cd:f5:e1:5f:d9:e3:82:48:64:
09:81:68:44:5b:e8:ea:49:13:12:60:16:7f:6b:c6:45:72:84:
82:db:f9:9f:24:d9:ff:e0:c9:fa:1e:83:d1:95:9d:92:6e:e6:
da:e3:d8:39:ad:61:96:ef:44:0b:3b:cd:2d:45:0a:99:73:db:
bc:f8:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org