Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/xI-bXbf8gfMiPf5WFp2Lcbr9yVk.roa
File: xI-bXbf8gfMiPf5WFp2Lcbr9yVk.roa (raw, json)
Hash identifier: jK+mRiXx/Y19fMcjTaNborIwvtQbZxaaVcGQvBGGgUs=
Subject key identifier: C4:8F:9B:5D:B7:FC:81:F3:22:3D:FE:56:16:9D:8B:71:BA:FD:C9:59
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 018570F08D8A4D457380B9B6800A8F243B60
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/xI-bXbf8gfMiPf5WFp2Lcbr9yVk.roa
Signing time: Mon 02 Jan 2023 05:24:51 +0000
ROA not before: Mon 02 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199224
IP address blocks: 77.74.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8d:8a:4d:45:73:80:b9:b6:80:0a:8f:24:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 2 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c48f9b5db7fc81f3223dfe56169d8b71bafdc959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:99:dc:ea:87:96:ba:2d:5f:65:e5:13:b5:
a9:27:bc:f6:e9:a0:22:f9:91:42:0e:37:41:39:22:
72:8e:5f:eb:42:9a:08:c6:61:7a:2e:71:14:e2:d2:
99:91:c7:27:d4:d3:78:da:2e:e0:61:82:f2:1f:5e:
af:56:01:9c:8f:29:7a:db:54:80:44:c0:48:67:cd:
b1:af:4c:34:82:72:f7:18:b5:3a:48:51:ce:aa:15:
97:e4:3e:1e:13:71:48:19:8e:94:2e:02:6c:e7:62:
d0:a8:97:c5:2b:ed:75:26:aa:d3:d7:79:81:9d:74:
c0:a3:51:35:f1:e2:12:d4:4e:e1:60:8c:4d:dd:fb:
11:eb:77:0c:3c:f0:a4:d2:da:34:1c:51:53:be:30:
f8:66:23:f9:7d:ba:79:a8:c7:3c:0e:72:3b:76:11:
1c:da:2b:c3:d8:b3:9e:88:89:a0:bb:8e:07:19:16:
31:46:43:89:92:2c:ef:e2:d1:d5:85:4e:4b:1b:cf:
d3:f8:bc:aa:bb:f5:60:12:15:4b:75:92:ad:87:ea:
df:47:9e:ed:c3:22:2e:d4:e0:dc:1c:4d:17:5a:7c:
b0:b8:e1:98:b2:fe:db:5e:a0:2b:06:49:02:65:7f:
75:e1:0d:9e:48:c1:41:de:ea:c1:c9:35:d6:7e:00:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:9B:5D:B7:FC:81:F3:22:3D:FE:56:16:9D:8B:71:BA:FD:C9:59
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/xI-bXbf8gfMiPf5WFp2Lcbr9yVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.104.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:23:13:aa:aa:96:65:ba:7b:7d:d3:da:e7:37:d2:37:fc:8d:
a4:88:0e:5d:dc:c1:69:6d:15:39:bd:76:0b:d6:0d:6b:0d:31:
3f:db:25:9d:01:e7:b1:bb:86:c3:78:f3:36:83:16:04:79:cd:
1a:fc:20:5f:47:b4:c3:4d:c3:77:4f:2f:91:d4:cb:f2:c2:30:
59:2a:7e:db:43:e5:9e:42:39:dc:04:fe:19:9a:06:d4:33:82:
9f:3b:b2:f4:25:8a:f6:b1:3b:ac:ad:61:a0:bb:de:8c:57:8e:
f1:f4:b5:e9:27:cb:48:73:8d:60:2d:f9:a8:17:e8:66:95:7c:
33:ae:71:1f:9c:50:24:b2:58:9e:05:85:ee:8e:f5:cd:db:7d:
8c:f4:38:f4:85:47:1e:e2:45:73:cf:47:b9:93:70:28:1f:cd:
4d:e6:1b:af:9e:96:f9:c8:2d:79:a0:13:c4:1e:65:d2:2c:56:
55:ff:70:67:f2:34:23:05:eb:46:31:eb:6c:0f:8b:5c:eb:75:
b4:26:a3:0d:76:b9:73:b6:f0:b6:4a:a5:0f:2d:5d:0a:6a:89:
36:a9:71:7a:cf:d7:58:42:6a:3c:8b:dd:44:da:73:a9:65:a0:
9d:bc:f6:6d:a1:bb:25:bb:1a:90:18:21:66:e4:51:d1:93:7f:
ad:90:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:01 2024 by rpki-client on console-ams.rpki-client.org