Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nLuShG-qoJe3-PpCicpZYhAnF5M.roa
File: nLuShG-qoJe3-PpCicpZYhAnF5M.roa (raw, json)
Hash identifier: Hw/WjyZNfDgGKPzI2KuI8gtUAmGbVmZRTaE7ytro2N0=
Subject key identifier: 9C:BB:92:84:6F:AA:A0:97:B7:F8:FA:42:89:CA:59:62:10:27:17:93
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DBE39088513E20DA82907FA5F3D23
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nLuShG-qoJe3-PpCicpZYhAnF5M.roa
Signing time: Sun 01 Jan 2023 22:04:52 +0000
ROA not before: Sun 01 Jan 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204393
IP address blocks: 81.12.78.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:be:39:08:85:13:e2:0d:a8:29:07:fa:5f:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cbb92846faaa097b7f8fa4289ca596210271793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:d6:01:5b:20:76:30:c8:e4:aa:a2:03:91:
df:6b:bf:1d:4c:ea:76:b0:79:4f:6b:87:46:34:33:
ab:6b:6f:4f:85:f2:fe:59:35:e5:da:6b:79:97:48:
18:20:2e:bd:29:79:ba:ce:7f:e4:c2:cc:98:aa:a3:
74:04:e9:4a:4d:07:52:3f:15:8f:4c:0b:a7:8b:f4:
58:c0:d5:f1:21:ba:a1:b7:ce:ee:17:a4:24:73:eb:
d2:f4:a0:b6:2f:21:a4:8f:69:77:db:e4:45:c1:ea:
4a:ac:0f:ec:df:cb:e7:04:56:29:68:33:03:3d:88:
49:bb:82:fc:21:6b:9a:1f:c8:fb:ce:8c:8f:15:53:
81:75:ff:f4:82:c1:ea:60:c4:37:92:c7:10:88:0e:
89:56:32:49:f3:e7:a7:72:a0:2c:3b:a1:e1:bb:b5:
62:db:4d:b6:2b:1c:d2:c9:c3:4a:45:86:49:85:3c:
e5:a5:84:93:50:a7:5f:eb:89:3a:c9:c8:c2:6c:43:
6e:c6:64:71:e4:82:97:b9:0f:bf:2e:0d:52:6d:76:
65:42:03:40:c2:ea:4d:c8:a9:bd:8e:9e:dc:2e:96:
08:d0:53:92:52:cf:26:2f:14:9d:5e:09:50:0f:8c:
bb:c0:39:07:e5:c9:42:9b:35:64:ff:ed:d1:be:9d:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:92:84:6F:AA:A0:97:B7:F8:FA:42:89:CA:59:62:10:27:17:93
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nLuShG-qoJe3-PpCicpZYhAnF5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.78.0/24
87.107.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0d:6b:93:1b:05:77:58:86:5b:05:d8:3e:e3:fa:b5:c9:fe:
9c:ec:8d:60:be:b7:17:05:db:2b:e9:07:8a:da:32:17:be:1f:
4a:d0:62:76:bb:d9:d7:d9:4e:76:1c:19:81:cf:29:00:1a:1e:
11:73:1e:81:b2:71:fa:b5:c9:38:d1:4f:62:ed:fc:48:0e:e0:
0b:0d:b0:2c:64:e5:db:61:dc:be:a7:89:9b:03:3a:e5:30:09:
0b:18:9e:d8:94:16:34:2c:5b:dc:a1:b1:43:fd:ea:d4:cb:54:
37:6a:ba:1b:17:71:a1:e3:82:ab:24:22:10:e2:04:71:b5:2f:
32:d9:17:27:31:d1:a1:d3:f9:02:b5:bb:05:fa:a1:c1:b3:d3:
89:5a:2a:55:98:22:eb:b6:15:c5:68:8d:81:bb:c4:7f:ef:8a:
36:85:b9:21:12:71:a2:57:26:2c:c0:07:ed:98:79:c8:6c:d4:
01:5a:c9:e5:a4:b5:4d:d7:4a:e4:e4:a0:05:7c:c1:b1:d1:71:
47:7b:57:a1:51:5d:16:3a:75:d7:9b:fc:c0:0b:1d:e1:e5:04:
9a:99:4d:5e:f3:9b:15:9c:9e:f4:01:2f:00:d8:7b:50:fe:6c:
eb:2a:12:f6:5a:d1:ca:46:bd:b7:de:cf:79:48:e5:47:fd:12:
9f:8b:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org