Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/B9Dg7o2Vbuu7VCl-Frs4KQeEhu4.roa
File: B9Dg7o2Vbuu7VCl-Frs4KQeEhu4.roa (raw, json)
Hash identifier: d3C/4W/GOk2AgHIpmFrAANuyEzTvrS6SOWaBw5qS7zE=
Subject key identifier: 07:D0:E0:EE:8D:95:6E:EB:BB:54:29:7E:16:BB:38:29:07:84:86:EE
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0187799021ADC9205C51AECA1279196A38CE
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/B9Dg7o2Vbuu7VCl-Frs4KQeEhu4.roa
Signing time: Thu 13 Apr 2023 07:41:41 +0000
ROA not before: Thu 13 Apr 2023 07:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 77.83.154.0/23 maxlen: 23
139.28.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 19 Apr 2023 06:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:90:21:ad:c9:20:5c:51:ae:ca:12:79:19:6a:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Apr 13 07:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d0e0ee8d956eebbb54297e16bb3829078486ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:58:ca:7c:d3:32:49:07:aa:fe:2d:99:85:
c1:cf:12:2b:d9:3d:2f:bd:c2:4a:9b:cc:96:f5:ae:
99:80:46:23:ca:50:a3:c5:d6:17:40:03:07:ab:2d:
85:c4:49:c5:b7:21:08:a2:ae:6a:10:20:3e:5e:f5:
37:64:e8:1c:06:4b:41:2e:c5:84:5b:75:09:2a:d9:
9e:e5:22:ff:71:7a:94:ce:b5:57:4c:4e:1f:86:fe:
33:9b:f0:22:8d:9f:de:c3:b6:78:fc:cb:59:d0:95:
19:82:15:08:53:f2:3a:37:52:2a:85:97:34:33:da:
af:fb:d2:2f:4f:1e:2a:e6:41:e5:f0:90:b5:53:58:
a2:4d:ef:e8:d5:db:48:82:6f:01:1d:b8:33:af:b7:
d5:89:ab:02:72:cf:14:ea:1a:17:dc:98:31:56:9f:
ca:ed:c6:cf:98:26:9e:c6:60:62:51:24:69:db:15:
42:09:8e:af:50:99:5a:76:00:0e:a1:46:e3:57:7c:
9c:29:10:8c:6b:1d:6d:10:ac:5f:7a:26:69:47:39:
b6:d7:50:bb:bb:67:b2:53:35:4b:7e:59:58:fa:62:
72:6b:97:81:51:5e:ad:90:f3:c2:0d:b6:a7:35:d0:
87:19:95:cc:59:42:82:53:93:e4:e3:7f:b7:32:33:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:E0:EE:8D:95:6E:EB:BB:54:29:7E:16:BB:38:29:07:84:86:EE
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/B9Dg7o2Vbuu7VCl-Frs4KQeEhu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.154.0/23
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:81:03:a4:51:a8:0a:0e:e7:02:c4:9e:41:f9:10:ab:62:e2:
44:b9:c3:9a:20:dc:81:4d:a9:ee:fc:f2:54:0a:94:08:ba:d8:
df:81:80:8f:33:7c:bf:05:a1:e2:97:43:69:16:b6:74:32:1d:
e1:d9:ca:81:94:d2:bd:76:49:8e:15:58:bb:fb:26:b0:46:60:
44:b1:b7:6f:ff:82:a0:be:bf:16:99:a3:c0:7a:09:19:69:4d:
9a:8d:00:02:e3:1c:58:a1:78:03:85:b5:59:a9:13:c0:8c:02:
3c:bf:c6:18:4a:9c:e2:02:e9:66:d7:8a:18:c1:86:a6:6e:47:
6b:02:f2:38:3f:79:5e:88:b3:9d:20:b1:3a:1b:c8:fb:fc:81:
69:e2:92:f7:ad:d7:b8:92:f9:23:cc:61:37:f4:f9:0b:37:3a:
6a:aa:7e:29:00:27:93:80:d3:38:63:56:c8:d3:91:13:09:9e:
31:c0:3c:35:e4:64:9f:d6:6c:8e:21:cb:7e:3c:c7:29:75:ae:
88:b6:4b:a9:ae:c3:8f:0f:a3:31:95:da:ab:78:e6:9a:7a:93:
c9:e8:ea:4d:5b:5c:44:a3:06:f6:4f:5a:7f:19:96:a9:b4:cf:
1d:c8:72:ec:41:57:b6:7b:a6:de:19:a7:02:ea:9e:27:87:4c:
80:50:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org