Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dFSjwbOpV0xIAhvM-pKqKYOLOe4.roa
File: dFSjwbOpV0xIAhvM-pKqKYOLOe4.roa (raw, json)
Hash identifier: E+YaC4+w1BU4YnocRPd1ZNuXEXBdn/5nrSYcXvGjvxk=
Subject key identifier: 74:54:A3:C1:B3:A9:57:4C:48:02:1B:CC:FA:92:AA:29:83:8B:39:EE
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F09AA2FDEF875A69BD6FD910271445
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dFSjwbOpV0xIAhvM-pKqKYOLOe4.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24577
IP address blocks: 82.177.142.0/24 maxlen: 24
82.177.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9a:a2:fd:ef:87:5a:69:bd:6f:d9:10:27:14:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7454a3c1b3a9574c48021bccfa92aa29838b39ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:41:c4:1a:c7:5d:2c:72:cc:6b:0b:e9:dd:6c:
59:2a:69:6b:90:07:41:51:51:b8:b7:66:0b:cc:f2:
10:b6:67:bf:28:23:a6:df:4e:eb:00:20:b5:38:81:
f6:7c:2a:f9:81:b5:68:7f:91:c4:d7:e2:a1:08:24:
3d:bd:34:4c:a4:2a:0f:02:66:d5:f9:33:9c:69:60:
f1:eb:49:f5:ad:a3:4f:4f:91:bf:d0:64:fc:4c:d6:
8c:82:e3:f3:41:fd:f4:69:e9:b0:e4:c9:b9:14:c5:
87:32:44:f5:e6:e8:be:79:cb:0e:2c:f4:e8:e1:36:
90:c1:ae:a3:9b:18:1e:f8:bb:9c:3a:25:50:4d:69:
f8:b8:47:90:99:aa:37:e8:1a:44:e2:8e:1d:58:ae:
22:e6:92:fc:54:10:b8:c1:8c:71:b0:07:69:6c:1b:
08:57:4e:c5:89:fe:95:0c:54:54:81:96:a1:c1:81:
c2:0a:aa:0d:33:dc:53:1a:04:99:63:2b:3f:2c:bb:
8d:60:12:c4:85:b0:77:67:e9:bc:e4:ef:f9:2b:79:
42:c3:d9:f1:16:39:ce:23:23:1d:36:e5:1b:30:85:
0b:f9:c4:39:9d:1c:e7:a6:da:21:3c:2f:44:4a:5c:
8b:10:d5:54:b3:16:b6:44:c5:90:30:3b:0d:23:45:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:54:A3:C1:B3:A9:57:4C:48:02:1B:CC:FA:92:AA:29:83:8B:39:EE
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dFSjwbOpV0xIAhvM-pKqKYOLOe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.142.0/24
82.177.189.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dc:32:01:29:b8:9b:bf:40:91:dd:6a:b1:fa:3a:f9:e4:26:
6b:9f:e5:03:ec:7e:b5:21:9d:73:f0:31:92:5a:90:4d:17:f3:
74:e9:8e:35:85:57:92:e8:c9:55:5c:09:84:7a:20:0c:c2:e5:
27:f9:2c:5b:3d:78:0f:56:20:22:47:1b:e4:12:87:9d:03:b1:
a5:c5:22:20:b3:00:cf:60:a5:19:9b:c6:9f:7a:6b:ab:c9:cd:
33:3b:f6:c4:50:80:e3:43:72:0f:4b:84:2a:8f:9b:fc:43:f8:
3c:97:0e:1c:48:03:71:eb:5c:a3:8c:dc:b6:35:72:e2:c8:ec:
29:21:f0:f0:01:1a:c4:84:97:68:81:3a:ea:c4:a5:70:7d:1a:
1c:e4:ac:51:51:76:65:9c:8c:6e:2d:0d:eb:6f:b4:45:b2:65:
59:6d:1c:88:bd:20:07:63:a2:42:11:64:c6:ea:bf:42:fb:99:
e6:43:dc:29:78:1f:99:27:4d:ae:90:1c:a9:bf:65:c9:92:e1:
c2:8f:00:3e:3a:a1:66:01:7e:d9:46:83:96:33:ba:7b:c0:42:
2b:f2:2e:0b:37:fe:78:0a:81:bd:81:92:b1:64:62:15:fb:f9:
89:50:c8:56:be:1e:63:2c:30:21:b8:2c:aa:c9:e7:a4:c0:01:
fa:24:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org