Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/l-yz43AbsXR0NGgEFzmKBSz8O2w.roa
File: l-yz43AbsXR0NGgEFzmKBSz8O2w.roa (raw, json)
Hash identifier: nQ5IR0VDVwTJ7ftpLf0QQePEPhA5RFClzANHbjDsjYY=
Subject key identifier: 97:EC:B3:E3:70:1B:B1:74:74:34:68:04:17:39:8A:05:2C:FC:3B:6C
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0186EB843EBE3D1272CF8A4CEF2AFD136730
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/l-yz43AbsXR0NGgEFzmKBSz8O2w.roa
Signing time: Thu 16 Mar 2023 17:42:37 +0000
ROA not before: Thu 16 Mar 2023 17:42:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 77.83.152.0/22 maxlen: 24
77.83.154.0/23 maxlen: 23
139.28.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Apr 2023 07:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:84:3e:be:3d:12:72:cf:8a:4c:ef:2a:fd:13:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Mar 16 17:42:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ecb3e3701bb1747434680417398a052cfc3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:17:fb:2d:a6:a3:9f:97:eb:ed:c4:13:b9:
29:a7:ba:ca:04:d4:28:a6:44:36:82:0e:96:f1:49:
7c:c1:dd:ae:d9:40:a7:fe:8b:78:22:4b:d1:5d:fd:
c4:83:79:a0:f1:2b:97:e0:a0:18:ec:cd:c7:c3:33:
23:93:49:51:a9:1f:17:e7:a2:8b:48:86:49:a6:22:
a6:84:90:07:26:9c:a9:22:0a:bb:e4:05:eb:0d:f2:
8c:f1:f4:b6:b2:17:89:ef:19:dc:b8:44:ee:90:0c:
78:75:35:21:39:7a:f5:e4:7c:ef:04:10:5e:aa:c9:
6a:42:58:1a:05:9e:b1:24:29:fa:41:78:d9:0e:99:
ae:5c:59:4c:18:81:62:91:c7:48:ab:fc:4e:7d:6f:
bd:37:9e:89:72:f5:a6:0c:e2:96:1b:72:c3:7d:b4:
77:52:4f:c7:7d:80:0f:86:5a:66:01:e1:ff:94:96:
7b:55:de:67:6e:f9:04:c3:d5:fc:5b:a2:43:6d:8c:
c9:e9:e6:a9:e2:1b:a9:b4:f2:9c:f1:d4:a0:32:c3:
7f:66:9c:64:e0:d7:d3:e7:76:3e:57:bc:b0:f5:db:
56:c1:23:a4:ab:e9:75:a9:6d:70:01:22:e1:67:71:
b1:f9:f8:2c:ef:11:5b:a0:22:7f:27:b4:44:c3:bb:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:B3:E3:70:1B:B1:74:74:34:68:04:17:39:8A:05:2C:FC:3B:6C
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/l-yz43AbsXR0NGgEFzmKBSz8O2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.152.0/22
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
61:ee:a4:b6:d8:89:ff:6e:67:00:6a:ea:a7:b1:3d:97:e5:47:
1d:4e:0e:67:7f:06:0e:5e:45:ee:16:12:b6:d3:0f:fa:34:70:
e0:6a:0a:86:13:52:7f:5e:0e:68:ce:4a:09:51:2d:27:42:64:
3a:bf:0e:0a:5d:f1:58:ed:ca:2b:5b:eb:ba:50:a1:af:2a:d1:
0b:c9:6e:df:33:fd:57:f4:a4:d4:f8:b4:28:db:34:6a:d6:ca:
c1:fe:e7:3a:db:33:9d:39:a5:b4:5e:e5:d2:03:b6:8e:e6:ec:
04:a3:93:8d:7c:de:da:61:66:57:67:7b:03:eb:7a:fa:0a:43:
b6:59:64:29:ba:30:67:ae:b1:29:5f:4c:f6:fc:8e:2e:c3:4a:
d2:c0:01:8d:78:3d:9b:58:4e:d6:32:82:39:d5:78:93:3a:33:
86:d5:3f:6d:9b:db:a0:3a:2e:a4:ad:76:a2:19:b2:41:06:d2:
5f:dc:61:04:d4:b1:b6:e5:d0:51:7a:86:f4:52:0c:c1:33:2c:
9e:e2:4d:dc:6c:04:b9:42:c8:ae:c2:80:cc:43:81:c6:86:89:
be:a7:83:e3:ae:7d:3b:1b:30:3d:c4:c2:1e:34:fd:b8:38:79:
fe:15:64:3e:0f:4e:74:f7:02:4f:5f:55:57:02:51:a2:26:be:
cb:96:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org