Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/T9H1Mbg-tKqueDIHoqpniFii8CA.roa
File: T9H1Mbg-tKqueDIHoqpniFii8CA.roa (raw, json)
Hash identifier: xPxHhSjCw2y7vLz1vQS3gjjjKKp632VbEdAfeRVupoc=
Subject key identifier: 4F:D1:F5:31:B8:3E:B4:AA:AE:78:32:07:A2:AA:67:88:58:A2:F0:20
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 018BD8F1B6EC9FAA64638D21ADCC86E95438
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/T9H1Mbg-tKqueDIHoqpniFii8CA.roa
Signing time: Thu 16 Nov 2023 16:23:21 +0000
ROA not before: Thu 16 Nov 2023 16:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 77.72.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:f1:b6:ec:9f:aa:64:63:8d:21:ad:cc:86:e9:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Nov 16 16:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd1f531b83eb4aaae783207a2aa678858a2f020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:5e:3d:3c:aa:62:77:01:d3:f4:23:9f:6f:
36:85:7b:a7:11:d3:67:f7:67:f8:2e:72:7e:b0:75:
1d:c6:70:05:a9:36:bd:23:d0:bc:71:4c:17:19:c6:
f9:01:60:19:77:e0:32:14:d3:fb:62:8f:da:30:6e:
e9:ca:da:98:1c:4d:25:98:79:ed:a3:62:c5:b4:91:
96:87:a0:91:7f:68:8b:3f:05:14:a8:3d:cf:c7:11:
17:06:a9:b3:e0:de:f7:91:ce:48:3e:ba:6b:f3:77:
03:1d:4e:48:29:2d:27:67:b6:5c:b4:73:d0:a3:c0:
a6:0a:cb:44:f3:fc:81:05:f4:dd:01:e4:c6:a0:06:
30:07:11:87:97:d0:01:17:48:90:77:5f:30:ab:3f:
72:52:bd:24:d6:56:a7:54:42:40:51:36:2c:3a:49:
66:be:c2:dd:f3:5a:3f:dd:2b:a4:fc:f5:19:06:75:
ea:d8:f6:c5:fa:63:cb:ee:b0:34:03:ba:5c:73:ea:
70:7e:8d:7e:00:11:5b:24:a0:42:a4:9d:1c:09:cc:
59:bb:14:3c:41:49:f2:ad:ca:52:15:32:35:20:04:
ff:0b:8c:2e:00:45:a4:5a:12:21:4f:66:83:07:c7:
63:c7:59:4d:c0:36:93:b9:0d:32:db:5e:3d:06:1e:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:F5:31:B8:3E:B4:AA:AE:78:32:07:A2:AA:67:88:58:A2:F0:20
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/T9H1Mbg-tKqueDIHoqpniFii8CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1b:df:64:e2:8d:e4:09:12:19:cb:58:f7:5b:69:c4:86:86:
b7:d2:47:1b:f1:2f:44:d3:a5:29:ff:ab:9c:02:44:18:b5:a3:
ba:8a:55:52:75:0d:0a:81:7c:f4:ee:d4:ef:30:cf:ee:2e:d7:
21:5b:39:47:04:70:e4:43:9b:29:64:65:57:20:b2:83:e7:ff:
2a:ed:d8:49:62:52:59:db:c5:2d:e0:3b:76:0d:99:0e:25:c2:
53:38:cd:c4:60:86:55:b2:75:8b:47:ea:53:04:8d:68:27:57:
e8:3e:4b:ac:73:bb:af:c9:bf:c5:60:19:fd:62:82:3f:b2:f8:
3c:ee:21:ab:56:0b:85:01:47:54:cb:75:ba:fe:eb:74:db:e1:
8a:cc:c8:d2:3d:2f:80:84:84:80:8f:1a:74:20:3f:c9:6a:b7:
ac:a2:fd:93:0b:19:a7:89:ba:a6:94:5b:c2:32:df:48:d8:7c:
74:7a:b1:69:da:7c:ea:c0:4c:7e:cf:4e:13:e4:49:3c:e1:be:
e2:23:26:6f:31:1d:37:21:36:b8:11:fc:54:18:c9:e1:9d:90:
51:ed:e7:0e:e9:a7:d1:e1:93:e0:15:c3:f5:df:e7:cf:69:67:
68:ee:a0:9a:2b:2e:c2:e5:9a:54:ef:43:a6:5f:b0:e8:c4:a8:
db:50:ef:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:08:57 2023 by rpki-client on console-ams.rpki-client.org