Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/BsMwZsE3aZzlSLLMD0IWlQvlgbM.roa
File: BsMwZsE3aZzlSLLMD0IWlQvlgbM.roa (raw, json)
Hash identifier: j3Ybz/hkl4xcvd82IEXYY/QpiHkSJkoiTmdwu7f9wyM=
Subject key identifier: 06:C3:30:66:C1:37:69:9C:E5:48:B2:CC:0F:42:16:95:0B:E5:81:B3
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0186C68CFE51C023FA92E62341543C6F1EB0
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/BsMwZsE3aZzlSLLMD0IWlQvlgbM.roa
Signing time: Thu 09 Mar 2023 13:26:14 +0000
ROA not before: Thu 09 Mar 2023 13:26:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 77.73.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:8c:fe:51:c0:23:fa:92:e6:23:41:54:3c:6f:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Mar 9 13:26:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c33066c137699ce548b2cc0f4216950be581b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:b2:e2:0f:2a:40:67:ab:8b:78:d6:c2:b7:
42:ab:3b:62:b9:10:99:bd:09:8d:31:19:8f:6a:fd:
de:80:ea:c1:99:20:ca:4a:5e:40:8e:b4:23:68:8e:
bf:48:cb:5e:24:83:65:84:7f:8e:62:69:9b:02:c1:
99:37:fa:a0:a2:09:7f:73:80:0e:c4:9a:63:36:78:
43:a2:ba:fc:20:b8:02:10:6d:06:46:e5:05:84:a2:
0a:2d:97:6a:72:c5:1a:05:51:3a:9a:b1:0c:cc:b8:
ee:46:9a:d8:e2:19:5c:ed:3a:52:35:f4:9e:90:09:
71:19:ca:da:3d:b5:53:3c:df:69:37:a7:36:1d:c1:
6a:e6:0a:dc:d8:15:b5:77:ce:f7:d9:5f:95:75:21:
fc:cd:3f:c7:6a:02:16:fc:1c:ed:8d:33:59:66:f4:
9e:4a:3c:08:25:0e:07:8d:ca:96:38:59:52:84:d7:
86:82:59:f5:be:c9:27:0f:58:5f:7b:44:7d:29:72:
f3:3e:fa:42:60:f5:b3:ff:ae:9a:c8:bb:26:df:bc:
0a:05:3f:ca:1a:ec:4d:9b:e7:ec:9d:9e:c7:2b:e5:
9c:5c:40:6e:81:60:37:3a:0f:83:af:eb:b8:83:a5:
f8:a1:07:ce:e8:b8:d9:7f:0d:7d:94:10:79:ac:c4:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:30:66:C1:37:69:9C:E5:48:B2:CC:0F:42:16:95:0B:E5:81:B3
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/BsMwZsE3aZzlSLLMD0IWlQvlgbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
83:31:fa:69:c1:79:0f:39:1e:15:05:af:0b:13:d8:1f:89:36:
47:b8:d3:71:98:a0:32:01:b4:46:1b:28:c9:af:86:80:46:04:
82:47:7c:96:87:e5:72:1d:31:58:b7:e7:db:1f:d3:b0:cf:72:
0e:d7:9b:d4:62:18:dc:fa:4d:a9:8a:68:7f:70:6a:0d:b1:21:
19:4f:3d:3b:da:b0:e1:cd:2e:8f:33:d1:29:0f:9e:d6:65:b1:
ff:a0:5c:ef:41:79:8e:ad:e0:f8:8c:bf:f6:93:e4:0d:c7:87:
e7:2a:4a:31:40:dd:24:27:16:a2:40:54:94:63:0c:11:84:5c:
d6:76:2e:69:0f:16:6f:84:ff:b2:13:43:20:0f:ce:12:3e:47:
2e:ae:e0:ce:56:ce:47:21:f5:a0:7b:bd:b5:36:e0:00:49:d9:
a4:44:cb:7c:b4:8c:54:df:2c:db:28:ba:12:f1:b7:5a:77:64:
f5:8c:8a:b2:59:4b:f5:22:f4:2b:cc:65:04:cd:c3:e4:47:aa:
40:ab:72:ed:d4:de:33:89:be:3d:be:22:2a:df:89:49:81:d1:
8a:4a:71:3e:60:33:0c:91:a6:3d:fd:8d:c8:56:e1:a1:f3:db:
24:31:ad:c3:ba:91:c7:3b:68:98:69:d6:fb:74:03:a7:c9:28:
e6:c2:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:16 2024 by rpki-client on console-ams.rpki-client.org