Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/PRvuJTtYqycgJvpTdwFFjQOga2I.roa
File: PRvuJTtYqycgJvpTdwFFjQOga2I.roa (raw, json)
Hash identifier: ebB4ZNXP+qGj58WoWPT+l6ILSxyOxofTqf2juZPm0yI=
Subject key identifier: 3D:1B:EE:25:3B:58:AB:27:20:26:FA:53:77:01:45:8D:03:A0:6B:62
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018596BB1276CFCF9914C7C9E01203802189
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/PRvuJTtYqycgJvpTdwFFjQOga2I.roa
Signing time: Mon 09 Jan 2023 13:32:00 +0000
ROA not before: Mon 09 Jan 2023 13:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207408
IP address blocks: 80.77.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:bb:12:76:cf:cf:99:14:c7:c9:e0:12:03:80:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 9 13:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d1bee253b58ab272026fa537701458d03a06b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:06:1c:65:70:cd:64:61:c8:29:a3:0f:17:
0f:bd:5c:86:53:f8:14:64:ce:2b:7a:d6:f0:07:d2:
cc:3b:dc:ff:45:2c:78:ab:c4:6a:5d:f7:5d:67:b0:
1f:d6:2c:af:5d:2d:88:06:8a:10:50:b9:81:b9:c9:
68:c8:ad:31:0a:b0:dc:38:f8:93:f7:ae:25:6e:91:
07:10:d3:35:df:6a:0c:4f:17:16:fd:2e:1a:6e:2d:
92:f4:c6:fa:9f:3e:13:01:95:b0:83:0b:c8:88:d8:
a0:d6:2e:37:2e:06:2b:e2:c3:41:c0:e5:d0:df:91:
d8:63:32:b8:fa:80:6f:c7:a5:2b:fa:58:35:4d:fa:
68:45:b2:06:60:c1:70:65:8e:20:54:a2:ef:2b:2c:
33:c3:77:30:82:61:46:9e:da:07:6d:be:f8:e4:06:
e2:90:5a:d1:db:0b:4f:cf:fc:41:30:8a:7e:bb:40:
ca:5d:f9:27:ab:36:c9:46:ee:ee:b2:3b:03:be:62:
0f:d8:f0:83:18:3f:0f:9c:0c:53:7c:49:4a:4d:10:
75:72:24:0c:78:85:52:9d:8b:c2:4a:b0:4f:86:38:
76:29:5c:e8:78:9f:bf:af:ad:02:1c:21:8e:24:cd:
8e:eb:34:03:54:94:40:b8:81:f3:2b:18:6a:03:d3:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:EE:25:3B:58:AB:27:20:26:FA:53:77:01:45:8D:03:A0:6B:62
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/PRvuJTtYqycgJvpTdwFFjQOga2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.25.0/24
Signature Algorithm: sha256WithRSAEncryption
03:59:b7:44:ad:1f:3b:29:0a:62:98:51:9b:66:51:25:28:af:
bb:ec:82:28:04:ff:82:0e:8c:e8:76:44:74:a6:76:6b:0a:d0:
b1:91:13:b3:ea:bb:8c:e0:09:26:43:ee:16:91:c1:05:3f:44:
1b:a6:9d:39:da:36:6f:a3:47:88:ec:03:2e:01:e8:35:d7:e4:
9c:28:9c:f5:c1:2e:af:d6:95:34:3d:66:17:bf:f1:31:c4:87:
2e:89:13:24:b2:d3:49:95:b1:37:3c:38:d7:d2:b4:43:d1:83:
37:02:15:7c:df:e8:c2:15:3e:d2:aa:fa:ec:05:41:be:bc:3a:
56:4d:18:ee:28:c0:8c:8e:2e:7d:ab:a4:69:70:46:79:7b:6f:
46:bf:42:9f:58:2a:65:92:92:76:ef:60:fa:d7:c8:44:88:58:
2b:fc:fc:21:e8:48:eb:6d:5b:0a:db:38:a0:0f:1d:81:a3:ca:
0b:5c:9d:cb:1b:c2:41:e1:05:fb:c8:5b:dc:4b:32:b6:96:41:
11:a1:47:e3:5e:05:4b:4a:82:93:fd:4f:38:ed:6d:53:bf:4a:
7c:e9:64:7a:8f:6a:a0:a5:c8:09:09:ba:da:d6:83:64:d5:17:
c0:5b:1b:50:c5:58:d1:f9:44:1e:fa:50:f7:be:43:d2:3a:3e:
a5:c0:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:19 2024 by rpki-client on console-fra.rpki-client.org