Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Fdj6KduedWgKkrG7-Btka0OneIA.roa
File: Fdj6KduedWgKkrG7-Btka0OneIA.roa (raw, json)
Hash identifier: oVDcwFerAqML8q3HDuceMQrZV0FTo4+1QJWJ8HtK1Xk=
Subject key identifier: 15:D8:FA:29:DB:9E:75:68:0A:92:B1:BB:F8:1B:64:6B:43:A7:78:80
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01856E26764C8FBA0A13159518A95A9A1722
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Fdj6KduedWgKkrG7-Btka0OneIA.roa
Signing time: Sun 01 Jan 2023 16:24:52 +0000
ROA not before: Sun 01 Jan 2023 16:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42233
IP address blocks: 77.73.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:76:4c:8f:ba:0a:13:15:95:18:a9:5a:9a:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 1 16:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15d8fa29db9e75680a92b1bbf81b646b43a77880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:38:74:eb:21:0f:9a:c2:31:f1:84:be:65:
78:63:e9:0f:3c:ed:88:8f:da:3a:58:c0:5f:7f:fe:
f8:eb:74:8e:6d:15:b0:d4:fe:1b:ff:19:18:42:ea:
c2:10:e5:92:42:c6:d8:d3:9f:5f:17:85:b6:d1:be:
cf:4b:c9:d0:d3:fb:6e:28:18:38:1a:20:ca:19:34:
4b:db:fb:af:e4:be:14:be:d2:3f:18:98:7f:71:df:
12:22:f6:33:98:7e:67:df:cd:c1:ae:5c:6a:b8:25:
19:21:be:b5:8b:ef:64:73:3f:e9:a8:c6:dc:6a:23:
0e:e4:96:e9:94:31:e2:93:7d:7c:18:ab:f9:de:91:
ee:01:0a:a7:4d:0c:6e:a9:da:ca:23:e3:56:30:dd:
70:de:0a:10:88:42:c7:29:d0:ee:ee:b3:b5:d0:5b:
23:8e:21:47:4c:8a:ee:c9:eb:6c:00:78:bf:63:90:
55:d0:1a:1f:a7:1c:82:c1:ca:e8:cb:3a:e3:ec:10:
a4:7e:34:87:80:4c:42:81:d1:ae:3b:7e:e8:70:df:
1d:67:ff:a1:7b:99:a5:0f:92:c6:e6:df:6e:d8:48:
35:80:e2:13:15:ba:19:72:32:48:cb:19:cf:63:5b:
34:a3:f0:7e:aa:5b:b4:70:16:7d:31:d7:37:e8:88:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:FA:29:DB:9E:75:68:0A:92:B1:BB:F8:1B:64:6B:43:A7:78:80
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Fdj6KduedWgKkrG7-Btka0OneIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:88:85:0f:68:fd:a6:3e:e4:4f:61:4f:90:d2:14:87:35:6c:
f3:65:d3:28:c3:b0:48:f4:7d:b3:64:60:31:b2:f9:8e:00:04:
5f:78:6b:14:58:5a:a4:71:8b:16:6d:b9:d3:1c:95:d0:93:e4:
7c:e5:b2:1b:bf:c4:4a:d0:b6:c0:5c:af:cf:c9:43:65:eb:5d:
12:67:cd:25:ea:0c:6c:ee:5f:5f:2a:60:65:76:c5:96:3a:46:
01:32:7c:9e:d2:41:1d:4f:ec:a0:4c:1f:e8:96:62:b2:5c:e8:
50:92:b8:2a:f3:7c:54:70:66:50:51:d2:54:2c:b7:d2:05:17:
0c:c4:98:b2:bd:3c:6a:eb:6b:8a:b6:8f:a6:18:8a:4f:4d:22:
3e:d5:c4:4e:1d:6a:0d:9c:9d:b0:fe:d2:9a:a7:62:8f:12:d2:
3b:90:73:45:95:fe:5a:be:41:f6:04:87:1d:e1:8b:fb:28:77:
f9:b4:21:fc:80:2c:79:73:39:23:bd:aa:8b:71:3e:12:fb:1a:
03:92:13:24:32:4f:fc:7c:71:aa:bb:e9:8c:ac:19:ce:21:58:
64:11:4d:fd:e8:8d:7a:9d:20:cd:dd:ac:1d:49:7b:c6:7c:76:
74:eb:da:bc:94:55:c6:2b:c7:1d:62:ea:8a:d5:6f:8a:93:3c:
9d:95:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org