Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/ZJKNF6b7XuPOxAOhokeh94VW46k.roa
File: ZJKNF6b7XuPOxAOhokeh94VW46k.roa (raw, json)
Hash identifier: VJGNdEyVV94GAXAkvxmCJpxivY8wrPewW5oPn8NDxHA=
Subject key identifier: 64:92:8D:17:A6:FB:5E:E3:CE:C4:03:A1:A2:47:A1:F7:85:56:E3:A9
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 0187E094B87DDC58F3223278ACDB64AC1CA8
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/ZJKNF6b7XuPOxAOhokeh94VW46k.roa
Signing time: Wed 03 May 2023 07:47:35 +0000
ROA not before: Wed 03 May 2023 07:47:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199276
IP address blocks: 77.247.94.0/24 maxlen: 24
77.247.92.0/24 maxlen: 24
77.247.95.0/24 maxlen: 24
77.247.93.0/24 maxlen: 24
77.247.90.0/24 maxlen: 24
77.247.91.0/24 maxlen: 24
77.247.88.0/24 maxlen: 24
77.247.89.0/24 maxlen: 24
2a13:bc00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:94:b8:7d:dc:58:f3:22:32:78:ac:db:64:ac:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: May 3 07:47:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64928d17a6fb5ee3cec403a1a247a1f78556e3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:d1:29:92:e1:8a:92:f2:a2:78:f8:a9:79:
d6:41:7e:99:ba:f3:e3:6e:30:35:b3:0c:60:b2:5e:
74:8e:a9:bf:70:d1:cd:f5:c6:d3:f3:19:a9:53:62:
5a:f2:0e:20:13:8e:34:fd:b2:70:dd:e6:6d:90:12:
17:fe:96:3f:ab:6e:c8:ce:6e:e4:03:bc:39:6f:66:
79:1a:9a:6d:3c:86:22:c3:ce:62:ef:d0:e2:7f:38:
11:92:2b:1a:90:28:46:de:c4:e1:09:f3:b1:0d:46:
9b:a3:73:2e:80:c1:39:63:08:88:56:6a:b8:0b:3f:
01:82:e9:24:ee:ec:28:ae:20:46:82:2a:1d:93:82:
53:da:14:82:89:d1:87:1f:af:1d:c2:fb:7f:29:89:
0a:b6:7f:da:40:89:fd:97:5b:9e:9c:9e:7c:7b:40:
f2:ea:ae:20:33:68:2e:fc:c9:dd:34:5f:e0:56:6d:
15:ef:e4:71:6f:8b:07:bb:ad:fa:28:c6:92:f7:22:
5d:4b:c2:7a:c3:d9:61:29:d3:11:27:89:e9:eb:01:
63:68:03:63:ad:1d:22:c6:97:5e:29:ad:24:9f:df:
5e:cc:20:f4:1a:e1:56:e9:95:a2:03:d4:4b:c1:94:
cc:3b:58:1d:e6:65:8f:9a:40:03:5b:13:82:a8:69:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:8D:17:A6:FB:5E:E3:CE:C4:03:A1:A2:47:A1:F7:85:56:E3:A9
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/ZJKNF6b7XuPOxAOhokeh94VW46k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.88.0/21
IPv6:
2a13:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
44:bc:24:0e:54:c9:1a:b0:aa:de:d2:3d:8d:98:7b:40:9f:8f:
8e:d8:32:d3:2c:23:05:60:20:01:16:33:1a:58:1a:50:2b:52:
b5:16:68:04:18:b3:5a:1c:09:9e:b5:0a:c5:a9:d5:38:18:71:
c5:0c:78:67:4f:db:50:e7:03:0f:2f:05:62:84:5b:8b:40:5a:
fb:c9:89:b9:52:23:c8:57:51:e3:52:2c:f9:07:47:3c:9c:17:
48:a9:a2:27:2d:e9:d5:78:32:2d:b9:d4:b7:d8:ca:bb:1d:22:
ae:4e:fa:67:bf:ae:02:c5:0c:91:64:16:e6:35:90:7d:57:16:
de:bc:44:06:2e:56:88:9b:2c:08:cb:e4:b4:fe:96:43:a6:a8:
03:b2:f2:30:f8:55:36:18:70:fd:4b:e4:8f:a3:a6:bc:50:37:
39:80:e9:eb:55:71:ff:20:bb:d0:49:bb:ec:bf:00:50:7e:ec:
67:0e:cf:d7:6c:c5:1d:01:88:e9:ad:cb:b3:c1:eb:15:21:7f:
bc:20:71:64:5b:b5:61:ba:66:af:fd:65:25:b3:3b:f3:f6:a5:
eb:01:d7:ee:63:52:7d:93:99:1a:6d:23:0c:51:15:c0:4a:cc:
e9:43:3f:0d:80:4c:43:dd:15:d9:f6:ef:68:ba:41:02:b8:0d:
aa:3f:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:38 2024 by rpki-client on console-fra.rpki-client.org