Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/dSxNdPzKw7ChQwor--eNKgvF4SU.roa
File: dSxNdPzKw7ChQwor--eNKgvF4SU.roa (raw, json)
Hash identifier: KAGzNOQb9/70DnRDlexyi8UfWJ5dx2iND/p8rz1px10=
Subject key identifier: 75:2C:4D:74:FC:CA:C3:B0:A1:43:0A:2B:FB:E7:8D:2A:0B:C5:E1:25
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 01856E01CCD2E93D5F23AE3EB17BCFD3A9DD
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/dSxNdPzKw7ChQwor--eNKgvF4SU.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205016
IP address blocks: 77.111.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:cc:d2:e9:3d:5f:23:ae:3e:b1:7b:cf:d3:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=752c4d74fccac3b0a1430a2bfbe78d2a0bc5e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:cf:84:79:97:36:1c:ff:54:4f:49:8a:3b:
a7:19:c3:36:11:ad:af:4a:48:ac:31:d9:87:94:08:
e5:07:2e:ee:a7:11:2a:bd:eb:d7:5f:94:de:64:47:
92:76:59:88:60:b0:a8:c0:0d:d5:91:33:95:b5:d6:
8b:19:fb:9b:f6:cd:2d:d2:94:46:fc:96:86:09:68:
48:0d:bc:11:82:03:67:2d:eb:1e:c2:2c:80:03:e0:
f1:5e:34:a5:e3:e5:f0:2f:2f:42:e4:82:78:07:c6:
93:48:e4:c6:02:f0:48:d8:db:4f:c4:1f:e5:8c:b2:
b7:f3:fd:9d:99:65:60:12:4f:3b:eb:2a:84:56:c3:
f3:df:3c:1e:65:e7:37:41:2d:67:25:35:55:50:15:
b1:23:2e:20:82:b5:f6:eb:3f:2f:29:ef:58:ea:4d:
79:b3:70:3c:d9:0c:d9:59:33:f3:9e:71:6d:35:5e:
ef:a0:ed:ae:31:e5:7a:fa:d8:a9:0f:a1:f7:51:6f:
44:25:c6:7f:28:58:dd:e6:71:e9:d6:4f:5a:f4:c5:
5a:f0:c9:38:3f:20:79:93:a3:44:93:1d:ef:66:4f:
b5:28:a8:f9:fc:35:8f:ce:c1:f1:a3:df:3a:30:f0:
01:37:7b:04:d7:2e:f5:82:b4:60:c0:af:11:b9:90:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:4D:74:FC:CA:C3:B0:A1:43:0A:2B:FB:E7:8D:2A:0B:C5:E1:25
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/dSxNdPzKw7ChQwor--eNKgvF4SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:cd:69:86:69:36:6d:97:e9:e8:1f:bd:c4:8c:7d:e1:1e:e6:
22:da:f4:5b:9b:ad:b5:37:84:80:39:42:40:1b:c6:66:7c:4b:
3b:36:90:19:70:0a:b1:78:ef:35:81:8a:81:19:67:93:ce:35:
62:29:6b:09:31:03:da:7d:fa:13:6c:96:ad:79:4a:24:7c:fc:
ee:0e:44:b9:1a:40:d5:cd:cc:7f:20:09:50:b3:8c:7f:b6:e9:
dc:63:05:7a:e6:b6:7d:50:96:88:f4:7d:21:c1:74:34:9f:fb:
32:c6:06:70:63:8f:fb:24:fd:49:b2:cf:b7:e4:70:9b:2e:9f:
79:e5:bf:75:73:81:ac:15:d6:51:c9:55:e0:d0:af:be:e8:fe:
3d:ec:0a:29:87:1e:fe:b6:0b:ab:ac:e5:9a:35:68:04:f1:87:
74:9d:85:b2:f5:da:8a:02:02:7e:80:64:d1:cd:b0:dd:44:5a:
7b:ab:14:e0:69:af:18:19:7f:8a:36:6d:3b:bc:10:c4:82:59:
66:39:84:a9:65:38:83:e2:56:4b:21:fb:aa:27:be:d5:7f:9a:
06:05:0e:3d:e2:46:9e:7b:0d:0a:9f:f0:d1:7d:50:41:7f:08:
e5:7c:a9:57:77:59:9a:bc:92:6d:a0:4f:02:c3:1b:44:9d:bc:
08:bf:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:25 2024 by rpki-client on console-fra.rpki-client.org