Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/p51fd1Es0f0QhiEJPJIBwYPMlOM.roa
File: p51fd1Es0f0QhiEJPJIBwYPMlOM.roa (raw, json)
Hash identifier: tUId/kTpve51EQv6dRzQHEMSnSn+WthSMFXnW04/+WQ=
Subject key identifier: A7:9D:5F:77:51:2C:D1:FD:10:86:21:09:3C:92:01:C1:83:CC:94:E3
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 01856D0A9E106B3D9E99A257AB1E178611FC
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/p51fd1Es0f0QhiEJPJIBwYPMlOM.roa
Signing time: Sun 01 Jan 2023 11:14:50 +0000
ROA not before: Sun 01 Jan 2023 11:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28753
IP address blocks: 77.223.144.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:9e:10:6b:3d:9e:99:a2:57:ab:1e:17:86:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 1 11:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a79d5f77512cd1fd108621093c9201c183cc94e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:c7:86:d8:32:93:bd:27:f6:ef:41:eb:25:
33:88:45:b6:6e:a5:ea:78:a8:d9:f1:05:81:7d:bd:
a7:12:ba:25:12:30:82:77:47:3d:ec:71:3d:29:42:
6b:4d:85:2d:e1:32:d2:b8:ad:7a:91:21:8d:8c:4d:
3e:08:ae:c9:c4:f0:f0:f4:69:1a:5b:1d:9d:09:61:
6b:69:8d:7d:7e:03:3e:7d:90:fb:a1:0f:ff:38:fd:
8d:08:48:cb:1e:f0:9a:d6:a5:b4:ed:ab:de:af:12:
33:54:f4:92:b0:a0:80:26:70:ec:fe:58:0c:0d:a1:
b6:8c:a8:4e:7a:5a:d9:5d:e3:ce:24:3c:b5:5d:1a:
d0:29:19:97:5f:98:84:68:75:6e:41:3e:90:dd:01:
4b:2b:a5:4f:37:af:5d:ee:99:73:33:af:0d:69:63:
04:b6:d4:a6:25:9e:07:a0:31:cd:75:8f:85:b7:61:
00:ac:6a:89:8d:d0:67:0b:db:53:58:16:cc:b2:7c:
31:86:41:60:09:b2:01:13:67:66:ea:f9:2a:8e:f5:
70:bd:ae:38:23:9f:c0:80:1e:47:10:bb:b1:7e:31:
27:eb:0d:73:c5:e5:03:6b:78:80:c8:fb:8a:1b:f7:
70:c4:ed:5e:28:42:bf:3d:01:91:7f:7d:07:62:40:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:5F:77:51:2C:D1:FD:10:86:21:09:3C:92:01:C1:83:CC:94:E3
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/p51fd1Es0f0QhiEJPJIBwYPMlOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.144.0/23
Signature Algorithm: sha256WithRSAEncryption
21:81:cb:fc:b0:60:99:a4:a4:51:b7:31:13:88:3b:b1:f6:72:
23:66:0c:6e:ff:e7:25:a4:0e:4f:36:04:5e:6d:30:8f:92:ca:
f2:e8:3e:f7:4d:3b:07:a5:4a:d8:9f:91:72:c8:be:24:6f:fd:
39:7d:a5:a3:cd:f8:b8:f3:db:eb:a9:35:91:a8:5a:a1:9c:1c:
a8:58:c9:5c:7c:da:70:ce:60:6d:23:b4:3e:a2:96:74:50:1b:
79:31:50:d0:4c:c9:45:7a:3d:fd:56:c1:33:e4:d2:cb:89:f9:
e0:ec:43:61:c8:6a:83:bf:af:ea:40:44:5a:8e:17:d1:75:0a:
4b:64:dd:eb:5b:b4:00:e6:93:cc:87:91:ff:24:56:94:ed:2e:
e5:61:6b:c2:06:62:d9:e6:1a:ea:1f:78:0a:ef:76:9f:2e:15:
ad:35:1d:c4:c3:d2:57:05:21:60:48:b8:5f:11:07:50:f4:17:
65:90:1c:96:49:3a:a1:3a:b3:84:17:54:df:de:55:2c:a4:86:
0a:41:f7:68:8f:fa:60:41:16:e9:bc:ba:26:ae:07:90:29:e7:
a1:8d:1d:b5:04:13:a7:c9:de:de:72:05:82:06:4d:70:1b:5a:
d2:4c:d8:59:2d:fa:99:ed:28:9e:56:23:38:ca:00:6f:c2:6b:
82:cf:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:09 2024 by rpki-client on console-fra.rpki-client.org