Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_bR1a_HCSJSOCCXPyH63FLHfB0c.roa
File: _bR1a_HCSJSOCCXPyH63FLHfB0c.roa (raw, json)
Hash identifier: p14oXBG1uGjVyHAtZISQE8NtHhpTtwcVyJR0kJpuj58=
Subject key identifier: FD:B4:75:6B:F1:C2:48:94:8E:08:25:CF:C8:7E:B7:14:B1:DF:07:47
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018608EE2F2D6A2A8DAEBA9038F16A1AACDA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_bR1a_HCSJSOCCXPyH63FLHfB0c.roa
Signing time: Tue 31 Jan 2023 17:44:32 +0000
ROA not before: Tue 31 Jan 2023 17:44:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 77.75.60.0/24 maxlen: 24
194.4.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:ee:2f:2d:6a:2a:8d:ae:ba:90:38:f1:6a:1a:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 31 17:44:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb4756bf1c248948e0825cfc87eb714b1df0747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:9b:df:4e:79:9a:94:c7:99:78:7d:7e:3c:
e9:59:87:c9:a9:ce:6e:f5:8c:f9:4e:7d:cd:e3:ad:
32:26:b5:09:ad:3e:68:25:24:18:4c:62:d8:43:42:
42:84:ce:0e:62:93:ed:ca:78:d1:03:30:94:73:50:
fe:60:54:62:b5:b1:43:26:0c:67:11:e0:9f:aa:75:
c4:4a:65:10:a7:a1:22:f7:af:68:fe:34:a0:25:88:
a1:3b:fd:ba:9a:27:05:03:b5:90:2c:b2:e7:7b:59:
e9:37:d2:96:e8:56:4f:4d:9f:77:31:aa:56:89:54:
aa:f6:d2:a0:ae:26:3b:4b:01:73:fa:d9:bd:27:44:
db:94:1b:55:54:c1:46:5d:52:fe:21:bb:fd:3f:af:
91:f5:8b:ef:d6:a9:b8:16:f9:d2:b6:f5:80:5e:b6:
d7:4e:bc:3e:eb:58:90:b4:d4:c8:98:0d:f8:de:c3:
37:d4:b9:4d:23:ab:24:c9:68:48:19:01:07:fc:1c:
41:f5:2e:0b:ec:a7:ff:51:94:2e:ac:5c:e9:8a:5f:
c1:d4:95:99:ce:44:3e:8e:71:28:60:3d:ac:bd:55:
09:9e:3b:e7:e9:ca:ae:57:23:83:f7:d3:eb:30:0b:
76:64:5f:ec:db:bf:6c:9f:35:31:21:9c:75:89:a7:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:75:6B:F1:C2:48:94:8E:08:25:CF:C8:7E:B7:14:B1:DF:07:47
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_bR1a_HCSJSOCCXPyH63FLHfB0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.60.0/24
194.4.157.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5f:1a:df:90:20:10:ea:82:5a:a8:98:76:10:86:1c:da:0b:
ab:cd:80:e2:2e:e3:58:e8:74:d8:5a:e5:8c:01:cf:33:ea:00:
6d:f6:1c:c6:a7:3a:ae:63:f0:70:e7:9b:c3:10:dd:10:70:24:
66:a9:1d:6f:d8:ba:15:b5:db:a0:7a:bc:f2:a7:4a:1b:30:29:
ae:e1:5c:4f:f0:20:09:5b:1e:c8:1f:4d:70:f0:0e:20:84:a9:
06:bc:ec:d2:72:dd:fe:33:f0:52:e6:2a:b2:f8:68:a6:ec:91:
42:c0:04:5b:a8:91:93:2a:36:d4:b0:9c:25:19:ea:07:0d:79:
4d:c1:53:66:16:ea:19:22:ee:a1:0d:47:a5:05:16:46:65:81:
e1:f0:90:c4:4d:a7:43:ec:32:02:57:6b:f3:7e:3c:7e:69:e2:
12:4e:e9:1c:d2:f9:7a:c0:35:53:df:92:aa:2c:9f:e1:83:28:
b9:27:3e:89:97:1b:3e:d0:64:df:25:b5:fc:3f:86:15:92:82:
1d:df:50:f6:e9:66:b6:8c:03:ea:ba:52:a0:77:fa:9a:61:87:
8f:f4:43:49:48:26:b4:46:68:16:b8:04:cc:32:f5:b6:23:e6:
35:21:c2:98:b1:16:4c:ee:a3:c7:70:17:54:9b:2b:8b:87:18:
03:0c:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org