Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6rG4jt0p8J_tqmArMg1Hm-yKhgU.roa
File: 6rG4jt0p8J_tqmArMg1Hm-yKhgU.roa (raw, json)
Hash identifier: PbuTMmX+efj3GGszvvIvyoqJ1p8WhOgWRap41b35Bhw=
Subject key identifier: EA:B1:B8:8E:DD:29:F0:9F:ED:AA:60:2B:32:0D:47:9B:EC:8A:86:05
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018BD1E301F0308732D0D8023ED4E1280CE9
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6rG4jt0p8J_tqmArMg1Hm-yKhgU.roa
Signing time: Wed 15 Nov 2023 07:29:57 +0000
ROA not before: Wed 15 Nov 2023 07:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:e3:01:f0:30:87:32:d0:d8:02:3e:d4:e1:28:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 15 07:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab1b88edd29f09fedaa602b320d479bec8a8605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:e2:d7:94:61:fe:fa:c1:b6:ff:74:4e:83:
76:b5:2d:d0:e3:c5:b8:fe:f6:74:d7:5f:9b:d3:b7:
79:8c:22:2b:78:e2:55:cc:38:32:31:20:e0:e6:e7:
49:34:7f:c9:63:8e:43:04:fa:e2:09:ba:1f:de:c0:
53:09:4d:f9:fb:ee:34:47:9a:f0:c9:4d:7f:e0:71:
64:96:1e:b7:72:ea:c7:4f:0b:43:59:24:17:f2:ac:
3a:de:d1:f5:ad:0e:9d:c9:b4:d2:ec:74:4b:bd:b9:
64:53:ba:53:6e:5f:fa:4d:70:3a:2e:a7:8d:87:9e:
41:7f:e3:96:fb:c8:2b:96:81:97:43:f7:30:ac:40:
b7:d4:14:ba:c7:72:5d:a8:45:af:b1:d4:55:9a:7d:
83:3e:e6:62:b1:65:5b:f9:0a:4d:f9:77:71:0f:c5:
e8:b0:ca:68:e7:0f:ea:4c:d9:e1:58:ea:23:5e:ee:
c4:66:aa:d1:8c:a9:3e:49:41:47:28:89:ce:df:98:
f8:4e:07:53:09:d9:c6:2b:e5:cd:ee:35:df:5f:52:
a2:81:6b:30:db:5d:34:88:25:a7:bb:ac:5b:3b:74:
a5:fb:4b:64:f9:07:a6:30:9c:7a:7c:e5:b8:8a:96:
fa:a0:5e:00:b7:21:a4:30:2d:85:b3:c6:1e:b7:36:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B1:B8:8E:DD:29:F0:9F:ED:AA:60:2B:32:0D:47:9B:EC:8A:86:05
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6rG4jt0p8J_tqmArMg1Hm-yKhgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
Signature Algorithm: sha256WithRSAEncryption
81:8a:90:16:ee:8c:86:be:35:c9:a2:2c:bd:52:65:5e:15:0f:
4f:02:92:ba:0f:a6:84:1b:fe:c1:1f:32:d6:78:5d:7d:35:74:
ce:71:8f:d2:66:35:71:2c:57:30:e2:6c:08:39:51:50:1b:28:
e0:23:88:1d:45:a9:66:8f:df:a0:8c:09:f7:bd:aa:9a:1a:e2:
88:a0:ae:18:d2:84:b4:61:96:67:a9:41:ac:0d:ed:6d:aa:4f:
f1:09:48:6b:bc:43:9b:d7:cf:01:d3:44:c9:91:7f:9f:70:e2:
46:74:f8:74:7d:11:e6:20:90:23:19:3a:12:98:9c:f6:64:40:
c5:fd:1e:bf:72:6b:dd:e8:30:c3:cf:01:fe:fc:b2:33:14:73:
a3:9f:e2:8c:76:0c:ea:ef:c2:9e:3d:f1:40:d4:22:f3:51:bc:
95:65:d4:7c:f0:90:86:12:77:6d:3a:1e:8b:be:de:90:87:87:
c9:ae:82:3e:35:05:36:50:6f:c3:1f:29:e6:67:78:41:bd:d6:
d8:b2:6b:7f:38:a1:33:12:a9:f7:fc:d3:a1:f4:b0:76:02:5f:
f5:b8:5b:59:46:15:14:7b:41:1d:b1:01:af:db:8a:ca:b9:ff:
ab:cb:3e:5c:db:18:84:55:dd:f2:27:01:2f:1b:a5:1f:ef:5e:
eb:65:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:46 2024 by rpki-client on console-ams.rpki-client.org