Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sadPpbcWRfDdScxmI0goB9XDWec.roa
File: sadPpbcWRfDdScxmI0goB9XDWec.roa (raw, json)
Hash identifier: 6Pm8kLY51ogMqv0DaAXm7qR4i0CyCNaB3u0LexCP9IE=
Subject key identifier: B1:A7:4F:A5:B7:16:45:F0:DD:49:CC:66:23:48:28:07:D5:C3:59:E7
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DBA6667794A28AD083C98FDC659E3
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sadPpbcWRfDdScxmI0goB9XDWec.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60627
IP address blocks: 81.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ba:66:67:79:4a:28:ad:08:3c:98:fd:c6:59:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a74fa5b71645f0dd49cc6623482807d5c359e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:6b:27:b7:fd:86:74:a8:f9:80:8f:3d:71:
3b:99:64:18:9f:fc:c3:db:a3:0e:db:e6:f5:52:6d:
d8:20:81:42:d6:8b:a5:c0:96:45:c7:c8:97:da:2f:
0a:af:58:a5:f1:af:10:3b:d9:df:eb:ed:eb:4e:b4:
26:f4:7a:77:f9:67:b5:5f:f6:6e:29:65:6f:d2:34:
ea:c7:38:41:be:34:15:5e:06:a8:12:2e:02:37:42:
59:06:5a:69:31:00:91:4f:ac:fe:87:82:54:e5:1f:
8a:06:c2:3e:42:b1:8b:4c:44:0b:91:78:bf:e1:68:
48:ab:30:42:97:7f:62:66:35:01:0c:ac:f8:78:a5:
ac:69:f4:a8:60:9e:80:a7:25:1e:00:54:c9:2f:d9:
a5:1e:4c:13:71:44:0c:b3:81:87:90:05:47:8a:ff:
42:fa:b6:52:27:36:6e:a6:36:bb:17:d7:49:9b:dc:
b3:20:4e:6e:8f:67:19:bb:f2:90:b4:e2:bd:87:78:
8c:df:02:d7:76:05:48:91:c0:e5:1f:2f:a6:13:2d:
63:ac:17:00:bb:b9:d8:ce:57:5c:27:31:b1:35:27:
e5:d3:dd:e9:41:3e:7f:3b:53:b5:e4:09:29:67:91:
ab:11:89:95:c4:61:fe:7d:d2:bb:9c:1e:86:71:77:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:4F:A5:B7:16:45:F0:DD:49:CC:66:23:48:28:07:D5:C3:59:E7
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sadPpbcWRfDdScxmI0goB9XDWec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1f:2a:36:4c:8a:90:32:0f:0e:5e:dd:1f:9a:93:b1:76:c0:
13:ac:ab:fb:28:12:5b:ca:b9:3c:ab:ae:b5:77:ce:a4:4c:23:
60:01:2c:7d:89:e7:1e:3a:72:0c:dc:9e:c1:7f:09:ae:f0:fc:
84:f7:f8:68:e3:da:69:c8:67:5e:ff:6c:07:5e:22:4c:01:f8:
e7:45:98:96:d0:6d:73:d0:f8:5f:76:e3:16:c9:b9:e9:55:14:
7b:60:b4:7f:ec:90:f2:08:f4:a3:ff:34:fa:19:3e:b6:ae:57:
f0:31:12:b1:aa:cd:f6:56:69:de:c2:cf:92:f1:c1:d6:12:37:
09:07:78:a7:a5:7e:30:8f:0b:8b:f9:4e:66:d3:e5:c3:4b:89:
60:68:67:98:74:75:8a:91:4d:7f:0c:3c:f4:ff:25:37:37:57:
5e:35:09:01:31:6c:1f:95:03:36:dc:46:5e:79:b9:be:c3:44:
10:eb:62:a6:9d:83:e0:b8:1c:12:2c:40:81:71:3c:b2:c1:aa:
cd:27:d8:13:6b:25:f8:5c:be:03:18:e3:6c:e9:5f:bc:71:be:
2a:a7:81:1d:62:80:3a:91:e2:9c:d3:d1:6d:d6:81:3b:00:f3:
52:a8:c5:21:6f:87:57:b6:e7:20:ab:c0:fa:74:32:83:10:06:
48:49:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org