Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/C986PSiNl0vgkgenf3rL_vF-lWU.roa
File: C986PSiNl0vgkgenf3rL_vF-lWU.roa (raw, json)
Hash identifier: rduwzRWtkIb/PWIpWbLWY0liTtFcDLWSZaXxJ2Cz48M=
Subject key identifier: 0B:DF:3A:3D:28:8D:97:4B:E0:92:07:A7:7F:7A:CB:FE:F1:7E:95:65
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018DE8AFC005B132350C74946AB3BE0C91A6
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/C986PSiNl0vgkgenf3rL_vF-lWU.roa
Signing time: Tue 27 Feb 2024 03:50:48 +0000
ROA not before: Tue 27 Feb 2024 03:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 77.73.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 05:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e8:af:c0:05:b1:32:35:0c:74:94:6a:b3:be:0c:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Feb 27 03:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bdf3a3d288d974be09207a77f7acbfef17e9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:98:fa:d3:6a:70:e2:bb:e4:d2:81:8d:ed:
fb:a4:70:78:b1:8b:38:04:b5:61:0b:1c:1f:0d:42:
ce:57:da:5e:dc:bf:54:b4:21:aa:eb:81:79:4e:04:
6d:c6:af:6a:93:95:5d:96:49:bc:e4:12:85:58:98:
05:61:82:c1:c3:7e:e9:19:f3:02:88:4f:7f:f8:11:
59:95:07:23:be:6f:6f:31:0d:fb:33:03:a1:30:7c:
5b:30:c0:02:c1:de:0e:3e:96:58:ce:2b:91:24:0d:
ff:7d:3a:d6:3f:1e:4f:2e:73:3c:e3:77:66:70:5c:
a6:b2:04:3b:97:23:89:a0:2c:17:46:be:f5:fc:e5:
8f:7e:64:ee:14:b2:30:7c:c0:7a:30:54:5c:1a:e8:
52:61:79:df:f9:de:7d:43:93:0f:5f:ca:3e:a1:ae:
45:fe:56:64:1c:62:2e:cf:30:c8:20:38:c8:8a:8f:
32:38:e3:0f:87:13:44:3a:d8:99:bf:ec:8b:bf:40:
a2:14:9a:78:30:a5:5c:c1:21:b5:ef:90:49:3c:32:
1c:d5:16:e0:8b:22:43:64:c2:91:72:f1:83:6a:ab:
e8:c1:af:87:d6:81:3a:48:09:35:da:02:a0:99:32:
8d:c0:52:6f:f9:d0:0c:92:4d:4b:6d:2f:2c:11:a1:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:3A:3D:28:8D:97:4B:E0:92:07:A7:7F:7A:CB:FE:F1:7E:95:65
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/C986PSiNl0vgkgenf3rL_vF-lWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.134.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0f:91:34:f2:96:fd:13:b4:1e:f2:f2:3f:54:34:37:d6:14:
c1:18:eb:ea:e4:0f:35:cb:44:bc:90:6f:6c:20:ef:8f:11:0f:
72:a1:f7:ca:36:e8:4d:f6:f2:cb:76:e2:6f:6e:8c:29:ac:26:
a9:c9:32:4d:62:a1:a5:c3:11:2e:0a:1b:44:15:74:a0:a6:ca:
5b:a9:1f:64:95:86:5d:eb:08:dc:08:66:0d:86:f0:f5:9c:07:
d9:fb:08:d5:1d:9c:18:89:7d:46:ee:b8:ad:06:59:e5:eb:05:
ff:9f:d5:22:16:29:38:3f:29:cd:71:7b:5b:9c:e7:4a:b2:ff:
6a:82:8d:a1:d4:5e:23:8a:17:48:52:a4:a0:27:a8:c2:77:d2:
61:54:51:c7:a9:9b:9b:b2:53:4a:89:59:c3:1c:85:62:f2:be:
67:cd:e8:49:c6:f4:33:a1:10:88:83:90:96:75:50:8b:bf:cb:
a4:c0:73:ed:4a:5b:fd:b9:d2:b4:72:dc:a6:ba:6c:ff:e3:f1:
8e:9c:f3:b1:b9:0c:3a:39:18:fd:0b:12:cb:b0:57:27:25:62:
53:e3:33:5c:05:ab:84:06:9d:52:d0:fb:a4:f3:f9:eb:6f:b4:
4c:56:b2:ed:d9:19:2d:99:79:91:8e:32:16:a7:b4:61:2f:61:
87:b3:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:28:09 2024 by rpki-client on console-fra.rpki-client.org