Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/h31a2E1FtguF7EsNEPAlA5P6OQQ.roa
File: h31a2E1FtguF7EsNEPAlA5P6OQQ.roa (raw, json)
Hash identifier: bP59jlLpC67OIksHhoj9v+iFEZs+NIHXQ2ew+0+Sj9U=
Subject key identifier: 87:7D:5A:D8:4D:45:B6:0B:85:EC:4B:0D:10:F0:25:03:93:FA:39:04
Certificate issuer: /CN=177842e619e5e31527ca0e51fceb3145f21ee914
Certificate serial: 01856F3013B6A2DACED0A09935C259088147
Authority key identifier: 17:78:42:E6:19:E5:E3:15:27:CA:0E:51:FC:EB:31:45:F2:1E:E9:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/h31a2E1FtguF7EsNEPAlA5P6OQQ.roa
Signing time: Sun 01 Jan 2023 21:14:59 +0000
ROA not before: Sun 01 Jan 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41622
IP address blocks: 185.244.112.0/22 maxlen: 22
77.245.176.0/20 maxlen: 20
217.194.48.0/20 maxlen: 20
2a01:760::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:13:b6:a2:da:ce:d0:a0:99:35:c2:59:08:81:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177842e619e5e31527ca0e51fceb3145f21ee914
Validity
Not Before: Jan 1 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=877d5ad84d45b60b85ec4b0d10f0250393fa3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:29:d7:20:02:45:f9:e6:df:42:fa:12:1c:
d1:5f:ee:de:72:7a:61:57:e4:49:24:16:d9:e6:7f:
2d:48:c8:8c:5e:8d:70:15:02:07:64:7b:1e:14:49:
fc:22:81:c0:f4:34:d3:50:af:10:2b:4c:36:6e:93:
ed:ff:19:6f:18:c2:d8:1f:e9:0a:d6:66:66:d7:4d:
de:70:1c:5f:e4:5a:23:04:48:df:e7:32:bb:0e:a6:
0b:92:19:5d:84:60:66:c3:f9:15:54:90:ed:c6:43:
5a:65:93:c9:0d:0f:dd:93:1c:1e:d0:b6:29:88:f3:
ca:36:12:01:ff:1a:53:fd:7e:6e:6a:0d:db:88:9b:
27:32:ad:cd:65:f1:c3:c6:84:c0:74:29:8d:c1:a7:
b9:97:99:01:00:32:e6:2a:a3:94:65:4e:69:30:dc:
38:0b:0c:69:72:6a:9b:5b:3f:01:6d:37:56:98:a0:
90:7f:56:3a:e7:54:60:24:d2:39:c5:37:19:5b:ff:
82:04:f3:5d:c3:ec:cf:85:73:5c:73:53:2f:33:2a:
fb:2a:ab:e8:8f:f5:7a:91:75:35:65:38:4e:17:51:
5d:7b:3f:09:db:34:aa:c0:86:06:f3:19:44:62:a9:
1b:5f:cd:e4:06:2a:98:0c:50:cb:7a:23:2d:9d:84:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:5A:D8:4D:45:B6:0B:85:EC:4B:0D:10:F0:25:03:93:FA:39:04
X509v3 Authority Key Identifier:
keyid:17:78:42:E6:19:E5:E3:15:27:CA:0E:51:FC:EB:31:45:F2:1E:E9:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/h31a2E1FtguF7EsNEPAlA5P6OQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7a906c-6e47-4252-9c24-b64e3c7884ca/1/F3hC5hnl4xUnyg5R_OsxRfIe6RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.176.0/20
185.244.112.0/22
217.194.48.0/20
IPv6:
2a01:760::/32
Signature Algorithm: sha256WithRSAEncryption
1d:70:e6:05:1d:3a:65:0c:43:f6:63:35:71:91:38:b8:0c:c2:
b4:50:93:0f:fb:5d:1b:bd:dc:3c:d0:43:6d:88:9a:90:c2:1b:
2e:c2:79:a1:43:8d:f7:da:e0:d2:42:b3:f6:d1:11:a5:90:34:
63:13:14:f0:e0:df:a7:85:8f:b2:3a:93:cc:fd:af:34:c7:04:
cf:1b:d0:e4:29:b6:38:3b:4f:1e:a7:d1:5d:47:87:67:60:02:
0a:45:7c:64:c5:24:41:07:c1:1a:05:29:48:a7:7c:82:3d:b2:
7a:61:48:67:ba:01:bf:c5:6f:66:86:be:ba:34:84:44:6b:81:
e3:2a:eb:e9:04:87:93:b7:ff:85:0e:2f:e2:26:e4:cf:4b:20:
49:d9:47:94:e1:9e:18:53:62:02:89:ea:ec:fc:4b:bb:44:e9:
f9:73:0c:ad:c5:8e:ab:02:ad:96:83:6f:ea:68:1a:b6:f6:ed:
83:46:ad:df:89:bf:31:d9:f8:50:ad:c3:43:4f:32:42:96:2d:
57:a0:6c:6e:d4:6e:eb:8c:1b:66:0d:c5:f5:0e:e1:da:4e:e5:
40:c9:d1:53:46:f1:45:e5:84:fa:49:7e:c5:9d:de:55:3d:f8:
25:44:0a:c3:bb:2b:41:1b:8b:cf:13:7e:e0:73:1b:54:17:4b:
c0:be:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:33 2024 by rpki-client on console-ams.rpki-client.org