Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/zDQ1rNz6eNyUrqHSr5vCp9Q4UWM.roa
File: zDQ1rNz6eNyUrqHSr5vCp9Q4UWM.roa (raw, json)
Hash identifier: COyKhLgXzdbVl/Z6EFQsSXHPQA2BZEtAe6I35wjEBFk=
Subject key identifier: CC:34:35:AC:DC:FA:78:DC:94:AE:A1:D2:AF:9B:C2:A7:D4:38:51:63
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 018B239170FAA5D97E24FDB27BA3C8CB1033
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/zDQ1rNz6eNyUrqHSr5vCp9Q4UWM.roa
Signing time: Thu 12 Oct 2023 11:06:56 +0000
ROA not before: Thu 12 Oct 2023 11:06:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 77.232.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:91:70:fa:a5:d9:7e:24:fd:b2:7b:a3:c8:cb:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Oct 12 11:06:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc3435acdcfa78dc94aea1d2af9bc2a7d4385163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:3f:e7:cf:7f:67:21:da:14:5a:67:8f:1e:
4e:3a:35:a9:87:04:0b:35:f8:f8:b2:ea:a1:b6:31:
7f:92:74:e2:51:45:0b:3b:b1:d2:08:cc:f0:51:b2:
ab:91:95:07:2c:97:9d:ee:5e:fa:ae:5b:6b:20:df:
cc:9b:d8:05:f7:ef:db:91:40:e1:6f:36:ff:2e:af:
07:b1:e9:fa:60:93:bd:e3:ee:c2:9e:ff:92:fc:40:
09:37:94:58:70:ac:f6:3e:5f:d3:b8:47:4c:6d:81:
4c:03:43:6b:59:91:31:a5:9d:bb:1a:51:21:88:89:
82:45:09:c9:a5:a1:90:36:71:e3:f2:a7:c7:e6:c5:
88:e8:7e:8d:56:1b:2e:e0:90:16:2b:a6:67:79:86:
30:d9:36:29:fd:e8:58:4a:e8:a4:1c:a3:6b:fc:a6:
94:8c:93:a5:97:85:14:1e:08:f1:6a:99:e8:cc:a9:
a1:c6:a2:b4:bf:a5:40:ef:20:27:df:2f:10:84:b8:
52:a4:a2:75:8c:12:bc:65:a6:eb:81:6b:a3:cc:c9:
61:32:55:35:16:d2:11:09:c3:c4:34:a6:c7:47:7a:
fa:ba:e1:31:42:c5:4f:6d:fd:ba:94:bb:d9:e2:12:
d1:b9:f3:57:8a:a5:78:3f:38:39:af:dc:ff:fe:22:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:35:AC:DC:FA:78:DC:94:AE:A1:D2:AF:9B:C2:A7:D4:38:51:63
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/zDQ1rNz6eNyUrqHSr5vCp9Q4UWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fb:01:ed:55:3c:a1:45:a4:60:39:3a:74:99:98:9e:56:61:
db:4c:b9:e8:86:08:3c:64:2d:f6:73:ad:9f:c1:3e:25:69:ed:
84:6a:01:91:b0:5a:3c:f7:b0:c1:cd:3a:a4:4a:ce:e5:4e:07:
4e:dc:8d:ef:6a:7c:d5:9d:88:c0:e8:44:13:19:da:bd:c2:90:
f6:60:ac:e0:e6:93:30:a1:04:2a:1d:4f:ce:2b:dd:2a:83:c1:
5c:0f:5f:f3:85:20:d7:e5:99:aa:ed:24:b3:99:2e:ec:5e:cc:
91:54:da:5b:c0:36:8c:fd:0e:2c:f4:2d:f0:03:d3:f2:7e:57:
2d:1a:0a:88:ff:74:1c:4c:44:99:a4:3b:bb:ec:d1:00:b2:1c:
fd:17:35:90:9e:d9:c3:22:c9:31:b7:44:d3:a3:d5:ac:95:3f:
ca:f5:74:3a:05:ad:5b:9e:46:12:9e:e1:7b:c4:f4:de:71:67:
f1:4d:ff:31:99:83:0a:f2:6a:ac:15:dc:6a:6f:18:48:c4:99:
56:cc:13:10:ae:3b:cc:65:2c:66:d4:68:34:28:2c:35:65:e3:
35:c0:63:49:dd:b6:eb:c1:c3:d2:af:3f:e9:52:d9:73:9b:28:
b8:c6:02:8c:10:ca:1f:58:ba:5c:bd:ac:bb:67:e5:e5:d8:32:
0a:dd:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:15 2024 by rpki-client on console-ams.rpki-client.org