Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/b7a3eJ2TkY1yu8Texmlv8v8W5aI.roa
File: b7a3eJ2TkY1yu8Texmlv8v8W5aI.roa (raw, json)
Hash identifier: TnC2CUkLxQHC2T7v86ytB5lgXqhgD6o6Msny+bX3Qw0=
Subject key identifier: 6F:B6:B7:78:9D:93:91:8D:72:BB:C4:DE:C6:69:6F:F2:FF:16:E5:A2
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0186C68CFDA9537519DCE124FF387B9C7533
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/b7a3eJ2TkY1yu8Texmlv8v8W5aI.roa
Signing time: Thu 09 Mar 2023 13:26:14 +0000
ROA not before: Thu 09 Mar 2023 13:26:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 77.73.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:8c:fd:a9:53:75:19:dc:e1:24:ff:38:7b:9c:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Mar 9 13:26:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fb6b7789d93918d72bbc4dec6696ff2ff16e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:e4:f8:f4:8d:1f:1b:23:bb:7d:75:1c:62:
7b:57:bc:e5:05:eb:a3:ad:4f:37:e6:57:99:bf:40:
d4:7d:21:31:3a:7a:a8:9a:b6:27:cd:a3:11:fd:8c:
98:3f:ff:93:bb:1f:2d:1c:20:f9:e4:d7:a8:e6:7f:
77:40:87:3c:49:b1:45:be:18:48:37:96:25:4d:71:
ce:ae:5d:0f:fa:2a:53:7e:80:6e:5b:0f:9d:22:e9:
12:1b:c8:7d:26:cf:65:ad:89:23:ba:0c:10:b8:68:
2c:fd:a0:8a:33:29:a9:a2:d5:c3:5b:50:4c:19:41:
84:c2:2a:ab:1f:bd:03:02:ca:da:53:20:90:b4:11:
ef:2b:38:21:0e:c5:06:82:a0:13:b7:a1:c5:20:a3:
aa:bd:14:93:90:4c:b7:21:49:a3:04:92:43:04:5c:
d2:9f:11:7f:39:37:09:98:30:bc:03:d8:7f:68:9d:
97:2e:de:2d:25:a7:54:62:2b:bb:7c:f2:65:79:3a:
ea:68:6b:e0:a0:16:46:fb:bf:fa:7f:c0:4d:79:5b:
dd:dc:e1:84:b9:79:8b:ad:48:ff:41:4f:98:74:c1:
10:7e:09:60:26:6f:a2:1e:6b:fc:b0:ed:98:7b:b9:
44:50:a9:be:08:26:4f:2f:a3:86:5e:62:6d:4e:e6:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:B7:78:9D:93:91:8D:72:BB:C4:DE:C6:69:6F:F2:FF:16:E5:A2
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/b7a3eJ2TkY1yu8Texmlv8v8W5aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.132.0/24
Signature Algorithm: sha256WithRSAEncryption
71:63:51:eb:bd:79:a8:38:c4:2e:0e:69:a4:70:ba:c3:45:4b:
aa:9f:eb:27:3a:e5:b8:60:e3:e1:ba:be:ef:81:d2:8f:fe:92:
29:a2:78:26:e8:e7:6a:3a:5c:26:0a:d4:e0:63:a4:9a:5b:55:
d2:22:2b:13:b1:ee:4b:43:4b:4c:aa:2e:da:3f:81:c6:c9:0a:
08:ac:ad:e7:0c:f5:c0:a6:9a:32:cc:02:a0:10:b1:87:dd:56:
e4:70:7e:6f:cf:42:bf:93:90:b0:46:fd:6a:fb:eb:a9:49:dd:
3e:cd:cc:b0:a4:86:cd:db:cb:5b:f5:bd:80:d8:6b:ce:de:0d:
89:02:01:40:d2:89:25:80:8f:13:2a:da:32:ec:31:54:de:eb:
b1:88:b2:8f:7d:2d:41:0e:8d:94:02:1e:f0:ce:e6:48:4a:9f:
c9:33:83:88:d1:a7:6a:aa:47:e2:47:0b:36:58:a2:e3:41:28:
a5:7a:b4:5d:6b:c0:43:e4:61:c8:6f:f7:64:c6:b5:3e:e7:27:
e7:40:03:3f:11:27:2e:d8:f9:6c:3b:6f:35:b7:21:5a:2a:bd:
08:b4:3d:4c:8f:5a:8d:e8:4c:2c:bc:05:84:16:62:99:33:86:
8e:bc:d4:a5:ee:b4:1a:40:3f:2a:77:39:56:18:1f:ae:6d:00:
bc:47:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org