Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/CPW9lAJnaA64muA2_P-QK8OiYeo.roa
File: CPW9lAJnaA64muA2_P-QK8OiYeo.roa (raw, json)
Hash identifier: Mv2KL7JmWfljrxQm0ctpAM7NI2c/j3BZ3qiQ3/9ZEjo=
Subject key identifier: 08:F5:BD:94:02:67:68:0E:B8:9A:E0:36:FC:FF:90:2B:C3:A2:61:EA
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01865F0E994955374615CB37B004C385FAE6
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/CPW9lAJnaA64muA2_P-QK8OiYeo.roa
Signing time: Fri 17 Feb 2023 11:07:17 +0000
ROA not before: Fri 17 Feb 2023 11:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 77.73.132.0/24 maxlen: 24
77.73.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:0e:99:49:55:37:46:15:cb:37:b0:04:c3:85:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Feb 17 11:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f5bd940267680eb89ae036fcff902bc3a261ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:b0:df:23:82:8a:13:19:cb:08:e6:a1:ec:
e2:10:cc:78:58:e4:a0:a6:6c:80:7f:61:43:0a:c6:
94:60:dd:c1:ba:87:7c:b1:8d:33:53:0d:82:2b:dd:
2f:5a:0b:2f:b2:16:84:c6:ca:d0:28:75:59:c0:dc:
07:38:44:33:f1:a4:a5:f1:15:6a:43:5e:23:40:71:
40:1d:9e:8c:d5:8a:67:76:4b:6d:d3:59:75:c0:64:
98:a9:e6:a6:32:24:2a:e7:6e:dd:db:48:17:67:4d:
55:f0:29:d7:14:4c:06:b6:24:15:e9:71:95:d9:b4:
f1:bf:c2:d0:f3:e6:38:69:61:dd:db:dd:ff:db:ec:
c0:fd:e8:9d:40:a9:2b:c8:60:22:d0:7a:11:bf:d5:
d0:a5:32:16:7a:3a:06:42:87:a0:67:5f:76:5b:95:
45:49:16:8b:f8:3c:07:8d:71:d0:66:92:0e:01:17:
6a:6a:7c:ca:1e:84:07:32:cb:7e:65:8a:ba:5f:36:
c6:b1:5f:93:8a:98:1e:31:48:d0:4d:58:76:e7:0d:
bf:94:0a:b5:92:c0:aa:5e:0a:8a:a2:3d:90:39:a5:
13:e0:a1:de:d1:8f:41:a6:19:21:bf:95:f0:1d:b9:
10:50:86:68:a5:38:63:ca:a2:ae:38:ff:f8:c0:be:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:BD:94:02:67:68:0E:B8:9A:E0:36:FC:FF:90:2B:C3:A2:61:EA
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/CPW9lAJnaA64muA2_P-QK8OiYeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/24
77.73.132.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d0:69:e9:16:21:17:91:fb:53:27:cd:9c:6f:64:61:38:4c:
cd:9a:a5:12:0a:36:00:1f:85:2f:e9:4c:28:63:50:c6:62:de:
59:c1:0b:71:a6:6f:14:db:4b:cf:22:1a:63:f7:ff:79:30:39:
27:2b:75:ab:7c:e7:15:cd:c2:78:1e:b4:e1:20:e8:91:25:94:
41:ff:16:e2:33:d0:b6:66:5b:a7:0e:1a:c2:71:1e:f3:b5:79:
2b:1c:89:33:15:b1:7b:28:0b:38:4e:63:37:53:39:8a:a9:c3:
36:23:eb:c2:4c:b6:95:4d:5b:db:91:2d:2f:af:f7:09:e1:3b:
9b:6a:04:32:c7:f9:25:13:54:dc:ee:16:13:bd:bc:ca:bf:7b:
64:87:16:6f:af:e3:43:f9:6c:ff:dc:c6:ef:84:e7:ff:a1:18:
0a:a9:0a:d4:15:73:9a:67:d8:40:e0:6d:7f:a5:e7:b8:33:c9:
a2:5e:62:ad:59:af:26:c6:ef:e4:93:b7:6a:f8:8d:56:90:4d:
16:f4:3a:90:21:0d:5f:1d:70:8b:d8:31:f7:3b:4d:56:92:94:
fa:e7:95:14:cc:fa:be:0a:27:21:55:6e:13:96:5a:22:fc:75:
33:72:66:e8:0b:b6:1d:7b:74:26:3d:39:91:b5:16:ff:7d:9a:
ca:25:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org