Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/v-YR95Rt9Z4G-87ql-pT-RAEMZE.roa
File: v-YR95Rt9Z4G-87ql-pT-RAEMZE.roa (raw, json)
Hash identifier: nnF9qt+odMACagNBSuTFN3U5Tfkp4XD+nxxLMKXJoO4=
Subject key identifier: BF:E6:11:F7:94:6D:F5:9E:06:FB:CE:EA:97:EA:53:F9:10:04:31:91
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01856F949EF102917C6389E8EC301E83E4B4
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/v-YR95Rt9Z4G-87ql-pT-RAEMZE.roa
Signing time: Sun 01 Jan 2023 23:04:49 +0000
ROA not before: Sun 01 Jan 2023 23:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.162.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9e:f1:02:91:7c:63:89:e8:ec:30:1e:83:e4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 1 23:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe611f7946df59e06fbceea97ea53f910043191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:c5:cf:bc:b4:c8:30:f0:4d:e2:d6:58:ff:
c6:84:fe:a5:17:56:e7:cd:0a:a5:ac:52:f3:49:ef:
10:f0:86:d6:cd:eb:dc:33:05:2b:1b:8e:32:c8:f2:
73:7e:1e:51:48:07:4e:c7:d5:5d:3f:a6:fb:48:3d:
17:82:02:45:0e:f9:c9:8e:6b:3c:a2:71:ae:fa:e7:
ee:9b:d0:6d:74:b6:31:c1:ab:61:bd:04:28:49:26:
2a:f0:60:2c:4b:f0:93:8c:ce:5a:f4:87:0f:20:00:
74:94:56:d1:36:42:69:e9:b9:f3:af:9f:db:16:d6:
80:6e:df:9d:fc:a2:d2:df:0e:0c:1a:a5:10:07:83:
37:14:05:57:3e:ac:5f:de:cd:07:01:4c:5a:7d:4e:
1e:b6:05:65:e1:01:c3:ca:d8:27:45:b8:5a:d4:36:
ef:4b:20:86:f7:52:ef:ea:3f:1a:07:93:cd:7c:c8:
77:15:c6:84:45:60:8e:6e:67:d6:d1:a0:bc:34:00:
5d:6e:84:d6:83:36:c8:88:1b:70:87:0b:ab:67:56:
c9:bc:39:ea:a1:fa:51:12:d5:01:df:8d:74:f8:f9:
3e:3e:d9:1a:fd:38:38:7a:5c:20:36:85:8e:dd:1c:
ea:48:a8:9e:7f:77:bd:0d:7f:0e:ba:ec:29:cb:86:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:11:F7:94:6D:F5:9E:06:FB:CE:EA:97:EA:53:F9:10:04:31:91
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/v-YR95Rt9Z4G-87ql-pT-RAEMZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.160.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
11:dc:84:aa:9a:c8:f9:0a:a4:36:3f:22:49:47:ca:2d:5e:58:
99:6e:47:dd:44:47:c3:72:43:3a:a0:05:3f:10:25:3f:7a:9b:
46:0e:c0:f8:71:af:3e:18:bb:ae:06:8a:5d:e0:be:c5:3e:46:
0b:1d:1a:62:37:70:4f:47:ca:ea:c0:9c:79:af:18:68:c1:cc:
65:b9:55:77:6e:f0:73:70:e5:ef:9c:00:eb:6f:fd:be:a7:1b:
cc:7c:91:3c:af:20:c2:10:d0:ff:c1:9b:01:2c:5a:7a:f0:25:
04:93:b7:dd:3a:45:8f:bb:0d:c5:e5:2a:e7:21:f4:2e:57:0d:
e1:a7:ce:46:9a:fd:9f:32:7d:e5:0e:15:16:2f:cf:94:62:20:
43:5c:82:58:cd:23:6d:12:43:a0:0d:b2:6d:7f:97:c4:f7:02:
ff:7d:4f:a8:7e:f3:6e:77:b1:57:8b:df:a8:e2:10:1b:16:5b:
36:4e:75:69:b1:18:04:f2:42:a1:e9:37:6f:76:0c:ca:3b:fe:
5c:03:ad:c0:9c:b1:85:18:f5:9d:db:3f:13:26:31:0a:77:23:
82:25:1d:10:10:1d:d4:9d:ac:d9:dc:2a:69:28:37:9c:de:14:
f4:78:4b:54:0d:31:6a:4a:ce:63:58:70:dd:77:f1:d7:9f:23:
4d:70:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 11:36:03 2023 by rpki-client on console-ams.rpki-client.org