Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T-7qJzEFYrLHqYuwvZNuAvx3gCw.roa
File: T-7qJzEFYrLHqYuwvZNuAvx3gCw.roa (raw, json)
Hash identifier: o3GvDv/Hr31VpnM3K8UvvrC6stvdL9UMQCYuEJPm4+0=
Subject key identifier: 4F:EE:EA:27:31:05:62:B2:C7:A9:8B:B0:BD:93:6E:02:FC:77:80:2C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C98F0546D4E7326023187D45A8A1
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T-7qJzEFYrLHqYuwvZNuAvx3gCw.roa
Signing time: Mon 02 Jan 2023 05:25:06 +0000
ROA not before: Mon 02 Jan 2023 05:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208112
IP address blocks: 82.177.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c9:8f:05:46:d4:e7:32:60:23:18:7d:45:a8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4feeea27310562b2c7a98bb0bd936e02fc77802c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:c8:e2:78:60:58:ce:f9:7d:80:d2:00:74:
c1:90:81:52:7a:73:19:d6:46:52:1b:29:41:09:26:
57:7a:5c:08:32:ed:e1:c1:18:b5:d4:50:c7:04:28:
5d:7f:b1:63:9e:e1:ea:e2:fa:91:bb:87:dd:2a:c9:
f0:c1:50:2a:d2:8a:00:0d:dd:68:8f:94:8b:18:89:
58:af:00:71:11:54:7c:98:68:5c:0b:f1:90:94:b3:
5c:99:23:6d:1f:2e:68:e6:91:c1:00:22:d7:32:69:
29:ac:58:e8:bc:2f:bb:a5:4c:94:ae:86:59:74:ab:
75:59:be:0e:c7:c7:81:2e:d2:e4:57:0f:d3:80:96:
fd:a8:99:2d:ce:20:89:d3:bc:56:fd:29:64:33:0e:
36:fd:8e:44:4e:dd:07:a6:04:af:c9:59:7b:dd:cc:
16:df:f1:84:fe:bb:6e:ec:80:75:68:86:8c:69:e2:
26:06:f1:62:96:f8:ab:30:5f:83:a6:47:0c:13:d7:
cd:cc:e1:5e:ea:ff:fc:f5:aa:4c:ea:ff:22:41:1f:
8b:1d:f1:92:d3:bf:0a:7b:83:1b:67:dd:9e:f2:cf:
11:70:3a:ef:b2:26:67:4a:14:cc:f7:12:9e:49:a9:
78:15:97:33:ca:9f:04:7b:28:81:07:d8:ac:e7:21:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:EA:27:31:05:62:B2:C7:A9:8B:B0:BD:93:6E:02:FC:77:80:2C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T-7qJzEFYrLHqYuwvZNuAvx3gCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.2.0/24
Signature Algorithm: sha256WithRSAEncryption
25:34:29:23:2b:d0:dc:d4:4d:59:e9:23:b8:be:24:ff:42:7f:
81:e4:52:d2:39:eb:4b:5b:67:52:01:ad:65:38:34:55:9f:30:
e0:86:af:d1:8b:39:ec:e1:18:cf:e5:16:c6:f5:b5:6c:8d:34:
d4:94:ea:3c:3c:af:90:c5:d3:29:62:62:47:51:11:52:cc:8f:
17:91:34:9d:e5:2b:b1:dc:7b:ed:2b:5f:75:c1:12:f7:55:78:
51:85:7f:37:3b:f2:b6:d7:7d:bc:8c:be:67:d6:12:01:50:09:
48:5e:7d:41:63:de:52:c2:59:d7:73:cc:b5:75:15:1f:36:15:
a2:a7:01:32:f7:a6:11:83:ca:70:06:ac:0f:74:44:46:63:04:
09:69:23:ce:bf:d0:a8:67:8d:a3:24:51:15:22:0e:4b:47:59:
c6:6c:b5:9d:ab:0b:20:e8:99:fd:cf:6c:f1:df:40:17:01:6d:
ed:1f:ce:16:8d:7c:9f:83:55:e0:2a:c4:c3:04:26:a2:fe:53:
c2:5a:75:84:bb:48:f1:ab:c9:ba:25:0a:41:fa:b6:7c:50:ea:
e9:c4:b0:f1:f1:1f:25:f5:b2:ba:2d:a6:cb:70:83:5c:e2:58:
97:97:16:9d:5f:af:b6:5f:99:f0:2a:cb:39:4d:9d:61:cf:64:
26:ef:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org