Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Y_AErzFXDUEXbUSn6DCDGMO1XbU.roa
File: Y_AErzFXDUEXbUSn6DCDGMO1XbU.roa (raw, json)
Hash identifier: 6zJnzaO96etaJBlAhUmVPCx9Hxs3u8rREPj0Q1pO56A=
Subject key identifier: 63:F0:04:AF:31:57:0D:41:17:6D:44:A7:E8:30:83:18:C3:B5:5D:B5
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01862D676B9B86ADED9B5162C6AD32EE2C9A
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Y_AErzFXDUEXbUSn6DCDGMO1XbU.roa
Signing time: Tue 07 Feb 2023 19:43:17 +0000
ROA not before: Tue 07 Feb 2023 19:43:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38984
IP address blocks: 77.105.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:67:6b:9b:86:ad:ed:9b:51:62:c6:ad:32:ee:2c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Feb 7 19:43:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63f004af31570d41176d44a7e8308318c3b55db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:ab:02:60:c0:96:33:27:75:c5:06:5c:2e:
28:0e:1b:f6:55:e5:87:3e:32:2e:9c:02:cb:cc:85:
ca:67:14:56:ac:52:9e:ad:34:ba:04:93:84:17:78:
6c:3c:49:d3:d5:aa:22:a1:9e:36:de:55:e5:4f:37:
87:d3:79:1b:e2:15:6d:e1:6a:72:6b:43:32:b5:27:
e9:83:3f:fc:75:d2:0d:d0:5b:2e:80:6c:17:97:45:
48:85:4b:d8:b3:81:44:79:9d:ca:4e:9e:d0:85:8f:
74:58:9f:f0:1f:2c:b3:02:e9:e8:ca:41:c8:37:55:
ca:89:68:d0:e8:aa:84:49:53:a0:e4:31:17:10:90:
0f:3d:05:da:67:32:73:63:68:3c:69:fa:94:f6:f9:
1e:ec:41:b1:57:d6:ad:3c:5c:3b:ad:20:ea:98:1f:
01:ef:87:2b:38:40:6a:e4:43:18:08:b6:c6:5c:10:
f0:ef:8a:80:1d:92:cd:2b:7d:3b:22:2c:ad:71:f4:
9f:c9:9c:e2:6c:26:03:e7:56:48:ed:8d:6f:4e:54:
2e:a8:cf:76:b6:2e:27:f1:56:d6:54:9d:5a:59:6a:
17:0c:b1:4f:3a:97:6a:00:e4:e7:40:8f:a3:ed:4b:
0d:c6:22:d7:51:ab:fb:c3:68:f7:80:e2:96:0b:16:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:04:AF:31:57:0D:41:17:6D:44:A7:E8:30:83:18:C3:B5:5D:B5
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Y_AErzFXDUEXbUSn6DCDGMO1XbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f1:5e:76:d2:d2:51:63:c5:b7:26:ec:ab:77:b1:1a:b4:f5:
d9:1f:00:0b:4c:19:f9:69:fd:e7:be:c9:cb:86:55:b5:8e:8b:
fa:09:4d:bb:6c:25:d4:24:90:8d:42:19:3d:a7:e4:34:d8:3d:
94:98:c0:83:19:1e:41:9e:2d:59:6b:f1:2a:b2:2b:4c:55:f7:
e4:bb:cb:8d:f2:47:86:d5:7e:37:e4:05:35:4e:30:c3:8a:fc:
a1:31:7c:9f:f9:f3:4b:b9:d9:2b:af:da:0e:94:df:59:30:56:
e6:14:02:a5:c3:52:50:b3:4a:45:5c:fb:62:bb:a8:91:6f:80:
33:da:48:ae:c2:9a:f7:3d:16:70:a5:b4:bd:1e:0e:07:2c:3a:
e5:44:c6:c1:41:f3:4f:be:32:7d:ea:49:a3:3f:88:d3:b3:8c:
0c:aa:a9:2d:26:11:12:d5:96:a1:af:85:fe:0a:09:e4:86:98:
80:94:4d:8f:44:b1:d7:5a:10:41:0c:e5:3e:4a:ba:3a:7d:e1:
04:36:40:19:b2:40:0d:8d:ec:68:d8:d3:b7:b8:22:17:82:9b:
23:d3:10:65:3e:5b:2b:56:b1:c4:bc:5b:b5:c7:f8:d3:5b:78:
8a:86:ee:98:98:47:f6:3f:6c:92:c6:b6:89:4a:e4:f3:fa:b0:
90:be:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:34 2024 by rpki-client on console-fra.rpki-client.org