Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/1-GJNEhvVgFMRwjGeKI5mJaxRmDs.roa
File: 1-GJNEhvVgFMRwjGeKI5mJaxRmDs.roa (raw, json)
Hash identifier: E69UIl0IjDtNmb3shgADAwSK5F6z3EiZj2SeZqHtr4k=
Subject key identifier: F8:62:4D:12:1B:D5:80:53:11:C2:31:9E:28:8E:66:25:AC:51:98:3B
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0185704296D64FC576DE1ECD957D8D8C5293
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/1-GJNEhvVgFMRwjGeKI5mJaxRmDs.roa
Signing time: Mon 02 Jan 2023 02:14:50 +0000
ROA not before: Mon 02 Jan 2023 02:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 77.83.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:96:d6:4f:c5:76:de:1e:cd:95:7d:8d:8c:52:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 2 02:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8624d121bd5805311c2319e288e6625ac51983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:5c:03:c8:a1:12:af:38:fb:f3:e7:76:23:
cf:81:a4:ac:8a:ad:c1:2e:24:32:b2:20:1e:9a:98:
17:5e:9a:b0:8f:c2:e8:ce:99:8d:8a:b3:8c:b4:5c:
b6:93:70:5e:26:58:a0:15:24:40:a2:c9:e9:28:f5:
13:be:e8:8f:6f:a6:3c:39:ee:f7:2d:6d:f7:26:ba:
92:a9:c1:f3:8e:22:a3:b2:5a:6c:0e:ac:de:db:b2:
72:61:1d:b3:c7:cf:94:7a:3d:46:9b:16:7c:ac:c4:
46:40:04:71:8c:6f:87:73:67:8b:ca:16:0c:43:5a:
75:aa:e1:9f:22:c6:b5:78:e8:76:b7:e1:b9:d8:65:
c9:aa:41:d1:06:96:74:45:76:ab:79:17:92:6c:6d:
1f:a4:f2:c8:8c:db:81:e1:15:d7:08:ef:db:07:65:
ec:f8:af:a6:20:56:ef:83:9c:36:66:7d:9a:ce:12:
97:5d:b8:19:66:ee:f2:82:7c:88:0f:0d:d0:45:78:
44:4a:e3:4c:d6:77:3d:46:64:37:aa:1b:c6:cf:b8:
55:4f:13:ff:38:b1:11:f6:bd:81:88:78:23:e2:0b:
12:81:3c:b1:c7:ac:01:15:23:ad:ab:98:e9:8f:b6:
56:03:a8:ba:59:14:67:0c:28:90:83:80:3d:64:e4:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:4D:12:1B:D5:80:53:11:C2:31:9E:28:8E:66:25:AC:51:98:3B
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/1-GJNEhvVgFMRwjGeKI5mJaxRmDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.153.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7e:6c:7e:e4:4d:c6:7e:28:51:35:c1:29:02:a9:54:2d:9b:
95:f2:c9:81:02:0b:f4:6f:5a:73:fa:88:f7:af:6f:cc:40:7d:
5e:76:8b:f7:1f:2c:9b:d5:4d:36:a0:44:33:ba:0c:98:73:eb:
4e:30:2c:c2:d1:ad:e6:ed:8e:f7:c3:48:18:d6:3b:14:46:0f:
21:fa:5c:4b:09:66:20:77:c4:ed:5b:5d:14:b3:50:21:82:de:
fc:c4:5e:7a:22:73:4f:9b:66:d1:5a:f6:b3:f3:99:0a:4e:6d:
75:7f:60:a6:25:b8:fe:40:eb:b2:89:9e:e9:15:d2:8f:97:b8:
95:77:46:06:7e:ab:75:13:9e:14:92:a7:a6:bf:9e:27:e8:b4:
73:4d:06:23:e4:44:7b:da:95:39:49:89:30:27:f9:a3:cf:68:
7e:b6:14:ab:5c:90:eb:34:75:36:4d:af:53:22:f3:c0:02:07:
8c:c2:ee:74:88:a8:8f:38:48:ce:2a:92:e5:f8:ed:03:a2:80:
c0:6c:48:65:8f:2a:b5:9e:f2:5e:3b:9c:0a:5b:a6:09:55:6a:
1f:f0:c1:5d:30:00:19:7c:61:a5:37:f3:d6:9e:8c:7c:a1:da:
6b:93:2f:39:56:4a:8d:9f:c3:c4:f1:8d:e9:4e:96:00:25:f2:
b0:ae:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org