Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/uryXATXPPFIfmNcvQNDLT4F74qU.roa
File: uryXATXPPFIfmNcvQNDLT4F74qU.roa (raw, json)
Hash identifier: nln/pts0PVdURcQ6BY3h9OuwfhCMm41GOPRZBidXtbk=
Subject key identifier: BA:BC:97:01:35:CF:3C:52:1F:98:D7:2F:40:D0:CB:4F:81:7B:E2:A5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A4A79F78BD47A48FC660A97C2814
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/uryXATXPPFIfmNcvQNDLT4F74qU.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42246
IP address blocks: 82.177.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a4:a7:9f:78:bd:47:a4:8f:c6:60:a9:7c:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=babc970135cf3c521f98d72f40d0cb4f817be2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:ac:a9:45:ba:90:0c:92:ac:89:c4:e6:93:
e8:dd:3a:64:91:6e:7c:39:23:92:06:af:0a:24:f2:
93:b4:30:c3:bf:36:77:1a:cb:e2:3c:c1:e7:71:0c:
cd:d0:2e:c9:b1:8e:80:50:1f:c6:37:4b:bb:02:08:
3a:7d:60:40:6c:db:f6:f5:e2:fc:3c:32:e6:04:cf:
2b:a4:af:bb:c9:a6:ac:a6:02:9e:73:55:8c:89:aa:
d4:a6:3b:b7:78:56:28:2f:56:76:bb:96:3f:2b:12:
1f:51:0c:20:55:b7:a6:15:d4:fc:36:b1:d5:cf:dd:
19:ac:c4:20:23:8b:8e:b8:ef:c2:a2:b0:70:ff:e5:
e9:c1:0f:dc:59:3f:ee:ef:02:00:cc:15:ee:65:93:
95:2f:98:97:88:98:01:d0:1e:2a:d3:69:b4:49:18:
ac:9f:bb:76:e8:9b:fa:66:d3:43:a0:2d:23:98:66:
fb:ea:b5:41:f6:13:83:17:fd:6e:b3:ce:20:49:67:
d9:c8:f3:81:93:9c:0e:c2:d9:bb:5f:f1:26:e0:f7:
48:ef:6c:3a:a3:80:88:fc:b2:f1:9e:f1:60:29:1f:
88:6d:73:17:60:36:8b:85:31:fb:b5:24:49:f5:2e:
31:43:c1:8e:d8:f5:95:82:b6:8b:15:6f:06:c6:f3:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:97:01:35:CF:3C:52:1F:98:D7:2F:40:D0:CB:4F:81:7B:E2:A5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/uryXATXPPFIfmNcvQNDLT4F74qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.201.0/24
Signature Algorithm: sha256WithRSAEncryption
90:96:02:a8:0d:86:e4:cc:50:7c:bd:65:3e:5c:b4:c1:30:ac:
10:b7:76:2a:3e:8c:be:bc:f3:7f:6f:9a:35:a8:4f:dc:d8:7e:
3e:03:c1:a9:32:58:05:39:7f:04:15:89:a9:a1:8e:22:1d:d9:
a8:8d:e7:f9:50:63:45:7c:78:d3:57:62:e5:8e:12:9c:fb:da:
4c:1b:c4:08:ee:50:c5:af:d0:d8:90:f9:8f:37:fd:f7:a0:81:
15:6f:2f:6a:67:51:9e:ae:00:2f:e9:ff:cb:62:af:cd:19:20:
e6:55:24:79:a1:e5:b3:7a:33:b2:fc:b1:86:80:15:00:b6:17:
0d:4f:6a:40:3b:0e:dd:43:20:1d:dd:24:27:c2:0f:b7:73:46:
67:f8:5e:78:54:a8:76:35:0b:07:e2:69:05:94:8b:ee:77:49:
63:51:85:37:70:26:a0:53:c0:d6:d5:ab:4d:6d:22:52:54:57:
b3:61:a9:cc:1c:8e:d2:cf:e2:32:e9:ad:8f:6d:86:00:03:9e:
2c:30:9e:a7:6f:93:bb:41:c8:0d:24:01:e3:6c:05:5d:72:a6:
5d:ec:4d:7b:a0:bf:0e:86:95:f5:1e:50:ce:e5:bf:55:75:18:
86:e7:d5:b4:60:ac:0f:13:fe:ad:8c:63:6a:8b:31:26:88:81:
c4:af:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org