Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Ej-S2XNImzbphcBFQtToju4jr8s.roa
File: Ej-S2XNImzbphcBFQtToju4jr8s.roa (raw, json)
Hash identifier: d3w3BRmQXKZJrkCrAKNq3Rc5hezJKBtL6bUfblZmSBw=
Subject key identifier: 12:3F:92:D9:73:48:9B:36:E9:85:C0:45:42:D4:E8:8E:EE:23:AF:CB
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01856E267A73A0F24B91BD6B5A619F3EC4F4
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Ej-S2XNImzbphcBFQtToju4jr8s.roa
Signing time: Sun 01 Jan 2023 16:24:53 +0000
ROA not before: Sun 01 Jan 2023 16:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 77.73.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:7a:73:a0:f2:4b:91:bd:6b:5a:61:9f:3e:c4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 1 16:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123f92d973489b36e985c04542d4e88eee23afcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:e1:b4:f2:72:04:e4:3a:7f:88:92:89:c8:
90:de:87:21:e7:1a:bf:52:64:d6:4f:40:12:bb:53:
e3:7f:0b:b2:93:4d:b1:54:0c:97:00:3e:1a:e8:3d:
7e:b6:98:89:bb:3a:6c:8f:82:a6:f4:9a:58:85:7e:
7d:2c:b9:13:b6:be:ce:05:61:93:a5:a3:cf:c5:55:
63:70:95:24:80:11:93:a4:88:2c:19:ee:de:91:a0:
e8:13:b3:94:fd:a6:d8:b4:99:53:a9:74:67:47:70:
cc:eb:75:05:24:ad:e3:13:d1:21:08:d2:74:19:d0:
6d:b8:a5:38:a5:a6:d5:62:95:52:37:23:40:06:ed:
23:56:26:c4:f5:c2:d6:e8:b7:10:af:8c:af:26:0f:
29:fd:c4:0d:c1:33:f5:4f:2d:ba:02:a2:30:ed:66:
bc:21:fa:0c:d3:f7:77:d7:5b:30:5a:58:11:88:0b:
ca:f4:7c:75:29:1e:08:78:8a:d7:05:41:72:3a:3c:
54:72:8d:94:29:53:c0:a6:b8:44:df:18:19:e5:0e:
e6:58:36:12:22:db:c1:10:d9:49:f9:57:78:cb:d5:
87:5c:44:61:d9:19:6a:16:29:50:13:81:5e:67:08:
8f:ac:f2:9c:69:62:e4:2e:11:0a:f6:8e:1f:90:f8:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:92:D9:73:48:9B:36:E9:85:C0:45:42:D4:E8:8E:EE:23:AF:CB
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Ej-S2XNImzbphcBFQtToju4jr8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.131.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ce:bf:36:92:5c:bb:c5:1c:2f:b7:d4:64:9f:33:56:3a:c0:
9a:f0:dd:bb:1a:f8:d0:14:24:d2:5e:8b:5a:88:e1:63:ea:ab:
82:b2:05:70:75:07:c1:d6:52:58:b2:31:84:65:6e:26:00:9d:
4d:18:4f:a5:3f:99:99:10:ef:0d:d8:12:73:7e:c4:22:d2:16:
ee:31:40:61:11:b6:93:16:7f:26:be:c5:0e:a5:cb:0e:3a:64:
92:2b:1f:b2:59:be:2b:e0:8f:6c:d7:90:78:dc:eb:a2:5c:9d:
6e:2c:d3:81:5d:b0:0b:19:80:fc:8e:3b:44:a7:7e:51:b6:73:
fe:d0:6a:d7:65:9a:99:5b:e1:a1:0d:89:a1:48:69:d3:b9:97:
71:83:0b:49:7e:4d:8b:b8:c5:48:7c:df:99:52:71:9e:c1:32:
06:06:be:b7:37:2e:86:ac:11:5d:96:22:2d:08:1a:83:af:53:
cc:c2:6c:37:45:31:79:00:97:46:a7:7f:71:84:2e:b5:c1:df:
09:49:9f:89:55:5d:20:dd:31:d1:53:89:02:02:c8:37:18:cb:
1b:7c:07:3f:1a:5a:e6:3d:f0:28:99:65:76:b6:de:ce:12:2b:
17:bf:3f:e4:00:59:f6:ea:6c:72:e0:b3:ff:1f:26:72:d4:b0:
96:6b:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org