Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/qCfWXwIrlILOSDxOsYqJkZ7EK7o.roa
File: qCfWXwIrlILOSDxOsYqJkZ7EK7o.roa (raw, json)
Hash identifier: JwKqwX3itG/GkmBL2ydXyBhOD0oyKZeLOI8ak2h0Bmw=
Subject key identifier: A8:27:D6:5F:02:2B:94:82:CE:48:3C:4E:B1:8A:89:91:9E:C4:2B:BA
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 01856D4ABF50189D2227CE39AF5FC0C46B2B
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/qCfWXwIrlILOSDxOsYqJkZ7EK7o.roa
Signing time: Sun 01 Jan 2023 12:24:53 +0000
ROA not before: Sun 01 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202909
IP address blocks: 77.220.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:bf:50:18:9d:22:27:ce:39:af:5f:c0:c4:6b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jan 1 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a827d65f022b9482ce483c4eb18a89919ec42bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:0a:8f:c8:43:60:81:94:73:bb:59:08:39:
fb:54:5b:94:d7:4c:f6:e6:b7:6e:00:31:96:cf:67:
3e:09:b1:bc:84:83:34:04:51:cd:e8:2e:17:18:e1:
a6:7a:a1:04:95:b3:b4:ab:69:4d:a1:51:de:01:0f:
9d:95:b3:92:f3:88:60:6f:f7:11:c1:c0:8f:15:f5:
cb:de:ea:cf:8f:cc:ff:e5:d3:8c:1e:45:86:38:39:
0e:3e:92:bf:6b:e8:d1:0d:ed:eb:af:a8:6b:be:fd:
ec:f9:b3:d2:36:ae:0d:17:53:6f:b1:50:9a:8c:f7:
05:87:ed:73:ce:c9:10:60:73:e3:05:65:5e:47:6b:
f6:d2:0b:b0:80:61:c7:5f:8a:12:f8:28:fd:3e:fb:
7e:a1:24:6c:c0:c2:5b:99:15:5d:fa:12:3b:82:c9:
0d:d5:9d:30:14:d7:82:45:de:88:61:15:7a:bc:51:
8b:37:10:43:c0:05:d2:67:62:77:4c:3d:36:74:cb:
91:36:8e:ad:15:57:3d:4c:29:73:71:40:33:1b:a5:
f9:e1:c7:94:7b:e6:c9:20:77:ac:6b:36:0b:c5:61:
b1:25:1a:85:2b:6d:a5:aa:58:93:a4:34:0e:7d:da:
96:0c:57:9c:ba:0a:b6:ee:0a:44:36:d6:15:b2:7f:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:D6:5F:02:2B:94:82:CE:48:3C:4E:B1:8A:89:91:9E:C4:2B:BA
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/qCfWXwIrlILOSDxOsYqJkZ7EK7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8f:7b:72:1d:30:a8:7c:43:95:00:3b:fd:84:a2:72:85:80:
f1:aa:ad:e7:99:f2:f3:15:b7:75:66:83:ca:3c:70:08:f9:43:
f8:66:e8:0c:54:69:0b:7a:3d:9f:6d:2e:66:31:5c:db:5a:41:
ec:9b:8f:3a:3e:2a:bd:86:fc:91:bb:e0:fb:bd:af:7b:e2:12:
ad:66:48:88:fb:73:f4:69:69:dc:8c:f4:4a:d6:0e:19:9e:7d:
f4:19:0f:b5:88:4e:15:91:ac:60:63:53:65:71:e3:23:ff:74:
f9:8b:8f:a0:54:eb:b7:ac:78:19:c5:59:ad:51:73:88:ca:d3:
27:52:95:82:ec:6d:92:10:48:ac:07:b7:54:c1:3e:10:19:81:
42:2b:ba:54:92:a2:a3:a5:59:77:78:3d:21:f3:e4:85:a8:6d:
74:c1:a2:23:1f:70:16:18:6d:e5:b1:ff:52:34:78:d8:f0:6e:
30:e3:c6:4c:9b:b3:db:49:73:d2:f7:2a:0d:01:93:3b:00:78:
fe:ab:9d:43:05:ff:dd:dc:26:b3:06:8a:9b:b0:18:49:0c:98:
33:dd:71:79:2a:fa:d4:d4:ec:c4:48:fc:7c:22:09:04:c0:f9:
73:9b:db:c3:d2:1c:ba:c5:61:42:d8:68:13:7f:4e:f9:7b:32:
e9:ea:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:14 2024 by rpki-client on console-fra.rpki-client.org