Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/V-KdWUxkK0V9VRN6p6rvPEesuV0.roa
File: V-KdWUxkK0V9VRN6p6rvPEesuV0.roa (raw, json)
Hash identifier: tRU+rGps/a6G4hU6LA5gUqkXzQ9rX4xgMUC4eUVqxm8=
Subject key identifier: 57:E2:9D:59:4C:64:2B:45:7D:55:13:7A:A7:AA:EF:3C:47:AC:B9:5D
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018C24D61FD31963555145A67C0712DEAB56
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/V-KdWUxkK0V9VRN6p6rvPEesuV0.roa
Signing time: Fri 01 Dec 2023 10:04:21 +0000
ROA not before: Fri 01 Dec 2023 10:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.200.0/23 maxlen: 24
178.216.184.0/21 maxlen: 24
79.139.64.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
198.145.112.0/22 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:d6:1f:d3:19:63:55:51:45:a6:7c:07:12:de:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Dec 1 10:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e29d594c642b457d55137aa7aaef3c47acb95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:20:bc:2d:18:9f:5f:8b:a0:04:d4:c3:87:
5f:4d:63:21:10:e3:fb:7a:e3:85:ef:c3:a1:ac:4e:
ce:67:0d:5e:54:a7:41:a8:31:95:c3:1e:15:a7:1f:
1b:59:28:9b:f6:d7:5e:34:b5:b4:de:e2:19:ed:c8:
63:17:37:ba:20:98:c8:ab:5f:2a:23:85:a8:0c:41:
c8:32:56:7b:aa:94:c9:4a:82:0d:67:d1:80:4e:e7:
b6:f9:c0:59:75:c8:51:00:ea:b0:c6:92:f1:7f:f6:
98:a6:ea:b2:59:f6:4f:31:69:c1:e2:f1:05:72:fe:
d3:ec:df:f0:ba:1d:5a:bb:15:59:5c:fe:41:a6:c8:
dc:d8:02:8b:06:ed:ab:7c:34:60:ff:cb:d3:e2:73:
c0:bd:8d:65:f3:f3:51:b4:63:3e:9a:37:d0:e2:e9:
7e:54:33:5e:f1:58:1f:ce:6e:5d:91:6a:a2:89:b1:
d9:81:f3:e3:ee:a5:53:e8:51:53:14:23:9d:4e:66:
28:62:22:64:13:06:d2:52:31:fe:82:6a:96:c6:0d:
f7:83:a6:d0:3d:a8:99:de:7d:de:1b:16:c9:66:7a:
d9:9f:50:b1:54:03:64:c0:f5:37:d8:da:f2:fb:30:
c0:68:e7:bc:7b:6b:c4:7e:8d:81:48:b7:a2:a3:96:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:9D:59:4C:64:2B:45:7D:55:13:7A:A7:AA:EF:3C:47:AC:B9:5D
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/V-KdWUxkK0V9VRN6p6rvPEesuV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.200.0/23
79.139.64.0/23
176.222.48.0/22
178.216.184.0/21
198.14.16.0/20
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
32:33:8d:83:9c:6e:64:4c:67:c6:76:7b:0f:72:81:23:75:82:
6d:a3:3b:b2:78:a5:88:f8:e3:f8:ae:85:a8:25:b3:ae:17:00:
09:e4:51:b5:84:e7:dd:e6:54:b3:c4:e2:f3:98:6d:93:49:75:
3a:7b:bc:b0:bc:66:a8:3e:0d:b7:8f:a2:a9:8c:eb:98:64:18:
37:83:3a:70:de:c2:9a:a8:dc:e6:0c:ec:e5:fe:6f:08:9a:95:
13:5b:db:4b:b1:ac:4b:ea:a9:ae:5d:69:2e:77:08:c8:cc:40:
cd:4f:02:19:b0:b8:52:d4:67:9c:a7:67:ee:80:9c:88:9b:7b:
70:94:9f:91:52:c1:ec:62:97:1f:7e:c0:1b:95:97:44:2c:87:
0b:89:6c:3d:e8:55:93:b4:a5:41:d6:8c:f4:bb:8b:08:a4:67:
90:18:76:e0:52:99:63:59:74:0f:f4:e0:55:9e:cf:3b:52:ee:
0f:ef:45:36:05:81:72:67:ce:b8:ee:ce:3c:48:a7:f8:cc:51:
dd:f1:4d:43:25:f3:8a:b7:22:05:bb:df:3d:a0:18:71:a4:f5:
07:9c:f3:80:e1:10:5e:fb:d8:41:7f:06:bb:a7:d9:47:53:db:
f2:75:f1:5b:7f:ec:9e:7d:bf:b6:32:f0:d6:93:9d:9c:df:f0:
5e:ee:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 18:54:08 2023 by rpki-client on console-ams.rpki-client.org