Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AzKFkgN23Xze7BFxoqyZbqeBCyA.roa
File: AzKFkgN23Xze7BFxoqyZbqeBCyA.roa (raw, json)
Hash identifier: cAnbeThCrw2BxE9dU5UUV0QuDhVqeWgG5hsXNGOwNjc=
Subject key identifier: 03:32:85:92:03:76:DD:7C:DE:EC:11:71:A2:AC:99:6E:A7:81:0B:20
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DB86DDEF50354ECBB5E907C8CCA84
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AzKFkgN23Xze7BFxoqyZbqeBCyA.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51777
IP address blocks: 81.12.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b8:6d:de:f5:03:54:ec:bb:5e:90:7c:8c:ca:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033285920376dd7cdeec1171a2ac996ea7810b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:18:f7:1c:2e:ec:96:61:b9:f0:9d:7f:c7:
e0:7c:53:e7:0c:c8:9e:e7:29:8f:6d:fa:67:1e:f3:
39:72:ce:84:bb:6a:29:02:3f:a8:8b:0d:1e:60:57:
c1:a0:ec:da:20:3c:4a:1b:4f:89:77:96:5b:f8:48:
23:57:a0:1f:1e:49:a2:fa:e9:a5:f8:12:e0:35:e8:
5f:95:67:28:02:c7:b6:ed:b7:cf:cc:fa:be:3e:c2:
21:82:08:42:23:05:b5:7c:e0:53:85:76:cb:51:e2:
a9:84:0c:b8:60:48:db:dc:cf:20:32:4d:8d:8f:2b:
cd:37:0b:4e:8d:1a:3c:9a:59:44:49:13:86:5a:e7:
db:b5:fa:38:f8:18:40:07:48:9c:b2:ce:8a:72:91:
b0:d1:a5:1f:4e:59:f1:bd:39:47:80:a8:f7:d0:8a:
ab:9f:66:95:4c:28:1c:46:58:5f:42:de:4c:e9:4a:
b2:79:b4:06:5c:91:f8:2f:81:b9:82:d5:a2:ec:a2:
33:bc:75:b0:00:70:7d:f1:e4:f6:1b:77:5a:f4:d0:
86:7a:85:a0:77:ca:89:f1:83:14:f3:25:ab:e9:14:
f3:c6:8f:e7:80:f2:79:93:ca:0d:1f:30:a7:21:35:
52:cd:12:39:33:1b:19:20:ec:af:38:6f:8f:85:bf:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:85:92:03:76:DD:7C:DE:EC:11:71:A2:AC:99:6E:A7:81:0B:20
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AzKFkgN23Xze7BFxoqyZbqeBCyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.29.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:08:5d:95:38:1e:b7:e4:85:53:08:6c:d0:6a:91:3d:dc:16:
dc:05:57:39:32:da:4b:e4:d9:33:21:b7:8d:2e:4d:e4:25:9d:
6c:c2:84:dd:43:ec:7e:33:7c:5f:d6:92:2b:a0:02:4c:51:bd:
49:41:54:24:db:f0:60:c5:48:0d:da:8a:a3:8d:e6:79:77:4b:
f4:f9:d1:3b:12:1b:1b:5f:1d:23:9a:5f:d3:cf:03:b5:bd:fa:
bc:e0:99:0b:44:66:1e:73:19:e8:8f:7f:20:03:25:4c:5e:fe:
f9:37:e2:c6:50:17:32:d8:c7:bd:6f:4a:a8:62:82:c7:44:08:
65:59:f8:7e:da:0d:24:6d:6c:81:ec:fd:3d:9f:d2:99:19:c5:
9b:b8:90:09:a5:de:08:29:0d:78:47:8a:24:73:c8:af:6d:6e:
94:1a:15:1e:99:1b:b3:48:37:5a:fb:4a:a4:ad:d1:6e:28:bc:
b7:ff:e1:4a:18:f5:de:06:62:74:dd:1a:9e:95:dc:b6:74:4f:
af:cd:fb:a1:97:34:3f:cf:a8:e2:60:e2:48:8d:2c:85:27:f7:
21:11:e0:fe:2f:8e:f9:97:62:61:bd:67:c4:fa:67:ff:b9:8b:
85:95:d2:98:aa:7a:dc:58:5f:40:a8:ed:31:bb:d1:f1:de:f2:
7f:6a:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:54 2024 by rpki-client on console-ams.rpki-client.org