Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Hmm8V6VAizXMyZFc3Gil3T7ad4Y.roa
File: Hmm8V6VAizXMyZFc3Gil3T7ad4Y.roa (raw, json)
Hash identifier: pDPG6BskqhbSfRFMCW0KzG6WoXE0fJYvtvpccBcYGWE=
Subject key identifier: 1E:69:BC:57:A5:40:8B:35:CC:C9:91:5C:DC:68:A5:DD:3E:DA:77:86
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD511A12EDDBBEE19B5A478E5815414
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Hmm8V6VAizXMyZFc3Gil3T7ad4Y.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13209
IP address blocks: 77.81.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:11:a1:2e:dd:bb:ee:19:b5:a4:78:e5:81:54:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e69bc57a5408b35ccc9915cdc68a5dd3eda7786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:a9:a3:5a:73:4f:9c:c5:82:3a:e5:50:96:
3e:4d:11:de:92:3b:e0:ad:04:5c:a4:f3:a7:14:e1:
c9:a2:15:7f:68:ad:87:f5:c0:71:de:b3:2c:43:b8:
f9:85:96:3c:4a:53:3a:ee:15:04:f1:34:8e:4b:f3:
df:a4:73:9c:f1:45:06:c8:f5:5c:54:36:b9:f3:01:
a4:10:5f:9b:c2:fd:af:7b:12:80:80:ea:25:26:11:
a3:ef:1c:03:a1:05:f8:f2:fe:44:94:1d:e3:42:02:
27:ae:92:ee:8a:5e:59:c4:ac:f0:39:96:00:18:0f:
5b:c1:ff:66:a2:b7:c5:1f:7b:31:86:21:8e:36:09:
e9:04:25:0f:22:f0:f4:48:2b:d9:94:9a:6b:6e:35:
6c:1a:fa:d8:0e:c4:ed:f5:d2:ac:bc:60:9b:ff:f6:
41:df:3d:a6:23:b3:9c:f2:0c:0c:bd:9c:98:da:a7:
15:47:43:e3:bf:2c:b0:4f:92:73:8d:9a:f0:27:a0:
2c:f1:24:a6:2c:f5:43:dd:67:52:ca:0c:64:63:eb:
f0:c7:28:0b:da:e7:86:ab:37:59:73:9d:6e:40:fc:
a7:ca:79:03:20:4d:7b:5e:50:b7:73:a9:f6:e9:06:
82:0d:71:0d:0e:ed:7d:bc:01:e2:31:d8:89:95:82:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:BC:57:A5:40:8B:35:CC:C9:91:5C:DC:68:A5:DD:3E:DA:77:86
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Hmm8V6VAizXMyZFc3Gil3T7ad4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
96:05:4f:f2:b4:51:8d:06:a4:b3:86:09:a3:e1:ae:59:d9:96:
5f:f8:5e:2d:5b:33:e4:39:4f:6c:9c:95:9f:c2:79:f8:29:32:
3b:f4:2c:2b:21:c9:6d:53:e5:18:ee:5f:07:aa:e5:98:a1:88:
9f:93:d0:f6:eb:e6:a6:da:bb:bf:7a:6f:98:74:c0:35:2b:68:
45:24:1b:9c:50:af:fd:f1:a3:b9:85:fa:46:76:a3:fd:4f:ad:
28:48:b0:69:7c:02:e5:b7:e0:c9:a5:51:ca:cd:84:47:96:52:
cb:3e:cc:b0:c8:07:e1:4a:82:17:43:98:9e:f2:e9:b7:cb:82:
5c:d0:42:74:7d:7a:2d:4f:e1:61:4f:e0:e1:aa:f5:7f:a6:36:
3d:80:67:cc:df:de:84:90:16:74:44:e7:0e:80:dc:9c:c4:24:
c1:4e:0f:bc:c0:be:c1:00:a3:73:fe:64:3b:ff:98:15:c3:79:
a0:89:d3:50:ec:16:70:14:89:24:25:7c:15:b8:ec:91:00:29:
cc:61:19:bd:78:2e:72:7c:48:82:45:a9:47:2c:12:53:c2:cb:
99:c5:7f:95:6b:84:cf:85:da:5e:42:a3:e2:20:7b:91:5e:4b:
58:04:4a:41:8b:64:7b:0b:38:ec:96:61:6b:fc:79:14:29:36:
4e:35:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org