Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/FTgGepUZ3UE_AkoXLh811m9enzc.roa
File: FTgGepUZ3UE_AkoXLh811m9enzc.roa (raw, json)
Hash identifier: JTdNEZeTxVbSIypY0/NCDPCQDgssn24QEOQFsxr9gg4=
Subject key identifier: 15:38:06:7A:95:19:DD:41:3F:02:4A:17:2E:1F:35:D6:6F:5E:9F:37
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01856E26772CCAED52846F81E0602E135F2D
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/FTgGepUZ3UE_AkoXLh811m9enzc.roa
Signing time: Sun 01 Jan 2023 16:24:52 +0000
ROA not before: Sun 01 Jan 2023 16:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50386
IP address blocks: 77.73.130.0/24 maxlen: 24
77.73.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:77:2c:ca:ed:52:84:6f:81:e0:60:2e:13:5f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 1 16:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1538067a9519dd413f024a172e1f35d66f5e9f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:8b:e0:e7:ab:2b:36:c3:40:b0:c2:75:f1:
33:fb:3e:68:52:c3:48:6a:ab:3f:4b:1a:ba:2c:28:
c3:c6:0d:07:d5:37:8f:9e:d5:7e:36:06:a3:5a:b9:
1a:3e:aa:6b:b6:27:00:37:23:5f:5b:4a:84:b5:99:
ae:3d:15:a9:82:a0:34:c6:36:f1:06:67:56:c0:9e:
e0:e0:a1:82:3d:97:2d:e7:7f:06:15:1e:f7:e7:81:
72:48:2c:35:03:72:55:3e:72:78:99:c6:02:f5:ad:
b2:d8:1f:34:f3:c9:b7:bf:0d:99:9d:3d:6a:e6:cb:
18:28:89:4c:17:dd:c2:fe:3e:28:87:b4:74:0d:cd:
6a:2f:bd:1a:64:34:09:0b:db:80:3a:5e:f1:49:c0:
93:4a:0f:d5:ff:ba:01:b7:28:03:82:70:f4:5b:18:
3d:08:f1:39:6d:20:58:2c:36:30:5a:62:f2:2a:d4:
b3:4b:76:2c:e9:85:60:0f:d3:92:16:00:51:9c:ae:
bd:71:c1:ae:b7:92:57:b2:7a:85:ba:55:a4:2d:1f:
2c:78:c0:63:8b:a0:95:0b:4c:bd:15:5a:38:c4:bf:
53:4f:70:b6:4f:95:12:3a:23:d5:30:47:9b:1c:f8:
f8:8d:7c:ec:d3:36:6c:b7:19:4f:b2:1a:9b:54:9d:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:06:7A:95:19:DD:41:3F:02:4A:17:2E:1F:35:D6:6F:5E:9F:37
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/FTgGepUZ3UE_AkoXLh811m9enzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.130.0/24
77.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:f5:f9:d4:c5:05:ec:91:06:60:51:a3:c4:e5:86:f9:72:
5e:87:74:a6:e5:81:ac:d6:67:a7:a4:14:fb:c8:73:ae:db:26:
26:5c:5d:d2:4a:ed:04:58:62:80:40:c3:7a:bd:8b:c0:fd:16:
5f:21:02:c3:28:92:14:2c:53:d6:15:7a:0f:25:b2:95:f6:7c:
da:75:8c:5e:56:99:3c:2c:bc:a9:56:31:80:ae:e4:b8:5e:e3:
fb:03:59:25:ac:63:c3:8d:d7:68:1b:f2:63:5a:6d:2c:05:13:
fe:31:43:62:d7:49:49:75:53:c2:a7:4c:f3:ca:97:55:dc:92:
31:20:6f:b0:94:f2:b5:70:b4:c5:c8:7b:d3:aa:40:f2:de:86:
bb:e8:ae:41:e9:7a:2c:8c:e7:dc:84:9a:c6:51:63:f5:49:17:
61:3a:8a:d6:0a:9e:30:b1:9e:87:c1:70:69:95:bd:a9:b4:e2:
1f:45:85:32:61:36:7c:09:d6:b6:23:09:49:d6:18:7a:e1:14:
04:98:b0:1a:45:17:c5:3c:3f:ec:ca:f8:05:fc:7e:50:f2:f5:
54:86:39:a4:ff:67:6e:95:4f:5d:96:8b:2e:1b:0c:5b:75:a8:
90:41:1c:96:39:17:b5:c1:1a:1d:b1:6b:32:34:9b:d4:9d:ec:
d9:0c:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org