Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/jvjUtAp7EhtvsncSO8OnPCYclAs.roa
File: jvjUtAp7EhtvsncSO8OnPCYclAs.roa (raw, json)
Hash identifier: AtR7WKOgkWAF4B6D1vuj5JhZ1NC0gxmkcQoi5kxgmaw=
Subject key identifier: 8E:F8:D4:B4:0A:7B:12:1B:6F:B2:77:12:3B:C3:A7:3C:26:1C:94:0B
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 018778919D5A156DADC3ED98688D7C9B747B
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/jvjUtAp7EhtvsncSO8OnPCYclAs.roa
Signing time: Thu 13 Apr 2023 03:03:41 +0000
ROA not before: Thu 13 Apr 2023 03:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35753
IP address blocks: 77.220.116.0/22 maxlen: 24
2a00:5400:1234::/48 maxlen: 48
2a00:5400:e067::/48 maxlen: 48
2a00:5400:e050::/48 maxlen: 48
2a00:5400:e051::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:91:9d:5a:15:6d:ad:c3:ed:98:68:8d:7c:9b:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Apr 13 03:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ef8d4b40a7b121b6fb277123bc3a73c261c940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:8c:e9:74:62:e5:b0:e4:67:74:8f:24:2f:
29:83:e0:13:1e:20:a8:de:44:83:9f:aa:bf:1e:4a:
84:91:df:da:38:75:c7:49:b5:1e:d8:48:82:de:1f:
b1:e7:5d:9d:af:42:78:22:65:83:1c:aa:d8:2e:38:
f7:06:bd:e6:f5:8a:d9:8b:39:f5:70:06:7c:d8:e7:
04:e4:7b:02:48:f2:27:d8:21:ae:1b:f7:b9:4b:98:
e1:c5:ef:7f:84:ab:a2:dd:67:10:a3:14:55:fb:92:
4e:61:00:25:98:c9:ea:36:2a:c7:32:a2:ff:1c:49:
ca:cc:9f:38:54:51:49:38:e1:4c:66:01:58:af:1a:
72:36:df:fd:6e:a0:8e:42:93:0d:fb:cb:15:e6:a1:
7f:98:8b:2a:c6:d7:76:5b:29:6e:ce:69:88:03:4f:
64:90:e7:c6:b7:89:70:c3:25:e8:c8:d2:a2:60:8d:
6d:be:89:82:c8:02:8b:5a:16:ee:c5:11:6d:4e:6e:
87:b9:a2:5c:12:18:c3:73:44:92:1c:bd:b0:88:c3:
13:76:6b:5d:b7:95:06:c4:86:7f:4d:24:f9:8b:1a:
a0:44:73:a4:34:14:45:8a:59:81:aa:09:c1:65:55:
2b:c9:63:d9:74:06:e8:9b:2a:cc:53:b6:14:98:1c:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F8:D4:B4:0A:7B:12:1B:6F:B2:77:12:3B:C3:A7:3C:26:1C:94:0B
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/jvjUtAp7EhtvsncSO8OnPCYclAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.116.0/22
IPv6:
2a00:5400:1234::/48
2a00:5400:e050::/47
2a00:5400:e067::/48
Signature Algorithm: sha256WithRSAEncryption
95:66:2b:95:cb:39:e9:51:6c:81:44:17:a1:38:fd:de:04:1f:
12:86:a0:62:5f:05:dd:c3:38:27:fc:40:81:f3:cf:e7:21:b3:
9f:f2:cc:b4:11:4f:95:3e:5a:97:5f:b7:44:22:81:d4:5e:52:
2d:d9:99:fb:c9:58:aa:7f:8d:9e:f0:ef:72:d2:ee:b0:6a:28:
e5:10:82:d5:b8:87:39:57:93:f4:8e:79:80:a8:5e:c5:1b:ee:
cb:be:9e:36:f3:f5:04:c1:35:71:eb:5e:56:9b:61:6e:bc:2a:
20:c6:ba:97:0f:2a:3b:74:af:1d:48:d8:90:ea:ba:ac:d7:c9:
6c:c5:b8:d6:62:6d:ae:f8:10:e7:19:7b:67:1a:6b:b3:ca:1c:
d9:f2:8b:66:a0:e9:99:a7:e8:7c:ea:b6:04:49:d6:1b:ee:bc:
97:e5:ac:01:e7:ec:a3:be:d6:cf:4a:54:d3:6c:92:97:77:19:
81:65:64:d1:f4:55:b4:0e:4b:d2:90:84:e3:df:a3:1b:68:ab:
77:2b:fe:90:1b:92:9f:a3:b4:f4:73:56:2a:2c:84:05:49:69:
2d:bf:06:c8:92:97:bc:96:93:89:97:46:b7:e8:54:08:b4:02:
d8:a9:8c:60:6e:bb:5e:55:6d:e5:96:9b:68:60:51:0d:1e:4f:
48:d7:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org