Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/ApxhPMbTSD-fUzg9wI4F2VGBazk.roa
File: ApxhPMbTSD-fUzg9wI4F2VGBazk.roa (raw, json)
Hash identifier: LS6/w/hQLt9KyU8mKhH5WNIatcIfOA7mrfv09rj7rCU=
Subject key identifier: 02:9C:61:3C:C6:D3:48:3F:9F:53:38:3D:C0:8E:05:D9:51:81:6B:39
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C65A1E0C6776A594268FC07DC91D4
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/ApxhPMbTSD-fUzg9wI4F2VGBazk.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42244
IP address blocks: 80.77.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:65:a1:e0:c6:77:6a:59:42:68:fc:07:dc:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=029c613cc6d3483f9f53383dc08e05d951816b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:a0:86:89:6f:84:80:52:c6:7b:82:c8:dc:
e1:ac:2e:d0:66:49:97:44:63:e3:0f:04:d7:dc:e6:
b7:73:05:19:8a:f6:6a:6f:f5:33:bb:95:86:f7:58:
99:5c:5a:a2:b9:91:9f:ac:94:8c:aa:b0:ac:82:b6:
e5:db:dc:9e:67:bc:52:e5:5e:35:65:ee:97:e2:4d:
9e:10:f6:10:af:2a:15:66:26:ca:5c:bf:5d:1d:ad:
25:1c:a9:53:3c:7a:bb:5e:6a:f8:8b:3d:d0:d3:07:
b2:a0:9d:4c:bb:a4:68:7b:e8:e2:af:4c:36:e0:a0:
7a:0c:0e:4d:f4:3c:39:01:95:3a:b3:33:77:d3:2f:
dc:d0:17:8a:1e:15:c7:ea:64:09:b3:39:0a:d9:fa:
72:ef:60:59:6c:1d:18:f9:45:00:d5:78:f5:18:5d:
10:ef:60:a3:af:ff:d5:70:b8:02:b3:32:a3:45:c3:
0b:52:5e:88:d6:08:2b:54:7e:18:6a:ab:e3:f2:3b:
be:b0:98:d4:de:76:a6:c1:a3:22:55:cf:b3:99:ec:
7a:b7:80:1a:5b:48:f7:d3:7a:50:1e:75:61:ce:9e:
91:5a:f7:fa:4a:de:fa:e8:57:d8:09:38:bb:86:e1:
ee:ff:c3:8c:e7:1b:ae:e8:ce:63:fd:0e:d3:55:e2:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:61:3C:C6:D3:48:3F:9F:53:38:3D:C0:8E:05:D9:51:81:6B:39
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/ApxhPMbTSD-fUzg9wI4F2VGBazk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.168.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ef:79:05:01:f7:d6:2e:99:34:2f:14:a1:26:f6:f8:12:0b:
cd:e2:ff:3f:7c:1d:d1:37:3b:4d:f2:62:43:e0:aa:5a:2c:de:
46:ba:5c:55:68:a3:b5:c2:6d:8d:7b:2f:cf:43:7c:15:af:14:
8e:bd:0b:32:17:1e:84:46:c4:61:31:24:59:c9:1c:07:2e:e3:
9e:82:25:a9:95:13:de:88:f6:7b:bb:03:5a:2a:b6:5d:f9:e3:
fe:52:cd:f3:43:7a:65:d8:1a:04:66:f8:d9:51:f7:62:33:39:
0c:c9:03:cc:4d:1a:a8:6f:d5:e1:8d:d5:3c:fc:18:4e:a4:55:
1d:27:ea:06:f9:b5:4e:80:06:3c:00:47:54:fe:30:f6:29:97:
a4:f9:ae:1d:ac:42:21:49:a3:d0:6b:1c:1d:c6:1b:0c:1c:a2:
8d:7e:36:7c:8e:f5:1d:32:c0:6c:d9:83:57:0b:e1:b8:f4:d1:
9c:b7:99:1b:e5:4c:48:e5:bc:33:3a:ca:ce:00:8c:34:04:33:
a0:9b:25:a1:58:ea:1c:f9:b1:ef:1f:b0:1c:73:e9:a3:2d:5c:
cd:78:09:86:26:ee:08:7a:88:bc:94:cf:73:46:7e:b1:b3:87:
ea:b4:ba:60:24:3f:89:99:9b:a2:07:d5:8b:a0:32:b9:ff:f2:
1f:37:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:17 2024 by rpki-client on console-fra.rpki-client.org