Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/Iu4CJKFRXxoThjibYcWoifhDJ5A.roa
File: Iu4CJKFRXxoThjibYcWoifhDJ5A.roa (raw, json)
Hash identifier: FrtHjno0Decl/8s44g50narq0mevj2Jy5NEewNsX4h4=
Subject key identifier: 22:EE:02:24:A1:51:5F:1A:13:86:38:9B:61:C5:A8:89:F8:43:27:90
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 0187747DB5DAB2EC69E116604066ECA3AC21
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/Iu4CJKFRXxoThjibYcWoifhDJ5A.roa
Signing time: Wed 12 Apr 2023 08:03:28 +0000
ROA not before: Wed 12 Apr 2023 08:03:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 77.232.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:7d:b5:da:b2:ec:69:e1:16:60:40:66:ec:a3:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Apr 12 08:03:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22ee0224a1515f1a1386389b61c5a889f8432790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4c:05:2b:4e:00:91:68:a7:33:aa:60:0d:00:
f7:c9:af:2d:1b:e5:ec:b2:92:8d:ac:9a:0b:e3:85:
b3:1c:3c:6a:b6:ab:b9:e6:c2:25:00:1a:90:93:87:
13:c7:7f:44:fc:7a:73:a2:8f:d8:82:ee:e0:f8:2c:
27:cb:62:1e:28:71:d9:a9:8f:d9:85:90:43:5a:a2:
75:9b:e4:41:e2:24:6e:b3:c2:1d:1e:9e:8b:7d:94:
ce:1b:29:2f:cb:fc:0a:12:3a:13:9f:d5:8b:1f:81:
61:ac:93:b0:98:2a:79:a7:88:c0:f0:ff:6c:8a:c0:
da:30:fc:ea:6e:1d:5d:f1:bd:5f:92:5c:5c:66:1a:
a1:de:9b:0c:0a:32:a7:1a:79:95:59:99:41:cf:ae:
c6:5e:c5:4d:f7:60:55:b5:ce:44:b4:cd:9c:7f:dc:
58:fc:fc:9d:d2:c5:21:01:ce:a0:97:54:61:e7:b0:
e9:86:13:42:c4:c7:59:33:c1:64:8c:7e:3d:44:79:
c1:74:d6:0f:48:8b:81:37:89:05:54:54:9e:cb:58:
65:bd:4b:49:d7:e6:0f:df:29:77:bb:d7:be:1a:df:
5f:d5:77:50:44:f4:b4:2b:74:22:99:cc:12:e7:ce:
37:e1:fe:09:03:28:90:ab:af:22:a8:e6:a0:bf:f8:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:02:24:A1:51:5F:1A:13:86:38:9B:61:C5:A8:89:F8:43:27:90
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/Iu4CJKFRXxoThjibYcWoifhDJ5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.97.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5c:38:70:2d:77:70:19:25:ed:2f:e0:56:05:91:b9:d1:77:
78:0a:53:3f:d9:05:a7:72:33:46:58:a1:71:eb:34:01:3d:0d:
cd:d9:5b:58:72:83:bd:a8:d1:85:b7:bd:b2:c9:61:9b:20:97:
1e:cb:7e:d9:f4:70:ee:86:9b:4d:5a:b4:5a:0d:df:9a:92:14:
d6:4f:ec:f5:42:cb:a2:5a:5f:f6:06:de:b1:28:8d:fe:10:46:
2a:ea:76:8f:7c:d8:9e:f0:2f:f0:d1:16:f9:19:fb:a9:a2:c7:
7e:7c:cd:aa:0a:91:af:3d:8e:c3:5d:05:30:45:d7:33:5b:6f:
60:2b:c2:f4:03:ee:48:34:e2:c3:ff:16:80:7d:aa:58:9f:b8:
3e:c1:ec:b3:9e:27:9b:4a:90:39:eb:be:dd:81:47:44:dc:99:
6b:3d:1d:65:82:7f:68:53:e2:1e:b6:d1:d8:fd:63:7d:40:2d:
a3:e4:e1:0d:18:dc:2c:a3:e4:e4:8f:e9:c7:a3:a3:6d:58:6e:
bb:49:e7:97:aa:b3:ac:02:b1:ff:d5:03:7c:58:a9:0f:5c:ac:
87:0a:eb:f2:d6:64:7a:67:7a:c9:f4:51:d5:36:4b:5b:27:29:
86:72:f1:37:9b:e1:b4:51:33:dd:4c:6b:52:7c:e5:70:40:4b:
9f:cc:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:40 2024 by rpki-client on console-fra.rpki-client.org