Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/I5rihDP7qM9COw_mFb7_Od58xsc.roa
File: I5rihDP7qM9COw_mFb7_Od58xsc.roa (raw, json)
Hash identifier: jpWZvBMdJ3F+Eg2Q2bOp8Q4xGoF9D8E4XoJvLOGspcM=
Subject key identifier: 23:9A:E2:84:33:FB:A8:CF:42:3B:0F:E6:15:BE:FF:39:DE:7C:C6:C7
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 01856E14262669B3D12022C3C1FDECDCF406
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/I5rihDP7qM9COw_mFb7_Od58xsc.roa
Signing time: Sun 01 Jan 2023 16:04:52 +0000
ROA not before: Sun 01 Jan 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24951
IP address blocks: 77.244.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:26:26:69:b3:d1:20:22:c3:c1:fd:ec:dc:f4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jan 1 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=239ae28433fba8cf423b0fe615beff39de7cc6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:3e:24:ba:01:75:67:23:04:6a:64:98:1a:
16:d9:34:e8:88:25:71:10:9c:84:f7:4f:c1:22:69:
c6:9b:05:07:2f:8b:eb:b2:ee:7a:b6:0e:25:a4:10:
26:bf:0a:e5:ad:03:49:55:cc:dd:44:b8:9b:b6:88:
d8:1b:3b:10:ca:a0:8d:e0:99:1f:85:c4:cc:ad:39:
f1:ca:46:10:30:5e:f4:bc:5e:1b:6f:1d:78:5a:db:
3d:9e:9a:b7:7c:28:18:58:46:2f:7e:f2:d0:b3:6d:
fb:76:06:31:14:20:bf:c8:43:7e:bd:15:ba:af:37:
89:da:54:aa:14:c3:9c:71:13:6a:75:09:be:18:94:
cc:3c:52:2f:93:1a:8a:fe:f1:8a:4d:c0:ea:42:0a:
8d:29:14:82:fb:7b:75:e4:e0:4b:29:56:70:7d:bf:
cd:68:3d:df:f1:03:76:39:98:b4:fd:17:06:62:df:
cc:bc:11:0a:f8:06:2b:ac:c1:2f:45:bf:32:ef:95:
e6:7c:90:1b:52:f3:89:41:44:ba:42:ee:40:a8:be:
60:9e:40:db:fb:72:b9:2c:0d:53:03:70:97:35:f8:
71:57:fb:de:63:a7:81:70:67:03:eb:fd:0c:27:01:
3d:f3:ec:98:09:2e:6b:ce:14:8c:78:62:66:15:df:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:E2:84:33:FB:A8:CF:42:3B:0F:E6:15:BE:FF:39:DE:7C:C6:C7
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/I5rihDP7qM9COw_mFb7_Od58xsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:e6:34:00:d2:cc:a5:9a:91:b0:5f:40:99:64:ad:65:6b:d1:
cc:42:46:6f:4e:2d:85:86:89:9e:a0:ef:b0:1c:83:74:07:16:
52:02:00:20:09:67:1a:13:c4:48:18:dc:fd:fc:0e:87:41:23:
b2:de:61:d0:1f:ca:94:1d:f8:5d:1c:41:8c:ab:4a:af:6d:7c:
83:e7:85:89:32:18:8a:5d:56:dd:cd:d3:68:3c:33:c3:d9:c4:
5a:b9:5b:f8:33:10:08:ed:52:3c:30:e8:0d:aa:ff:73:be:26:
59:b6:aa:23:4e:15:af:0b:af:d8:f0:29:5f:9c:88:89:97:8f:
18:29:f5:4d:e9:63:2a:31:48:ff:5e:14:82:2d:fd:69:ca:10:
59:2e:09:fa:d4:5d:2b:49:60:23:ee:cd:6e:35:1f:8a:bc:fb:
17:d2:19:07:82:fa:6a:20:49:1d:09:e1:03:25:1a:b9:de:16:
e9:f2:50:79:34:e1:25:37:d9:fb:ca:ad:a6:ea:67:e7:fe:29:
d2:22:98:77:c4:fa:b3:53:6c:d3:3b:27:fe:ad:73:aa:be:98:
6a:8c:3b:6c:72:26:09:e2:6f:5f:77:24:79:78:fd:bb:5e:38:
e1:36:16:14:4a:9f:a8:e0:fd:b2:1b:49:18:5a:60:5c:54:3b:
e9:8d:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:58 2024 by rpki-client on console-ams.rpki-client.org