Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dGZf4y_Rsv-bx-R4LqsvxwpAJiE.roa
File: dGZf4y_Rsv-bx-R4LqsvxwpAJiE.roa (raw, json)
Hash identifier: uaYHoV/Uzzo3rFmM+mfH6/KtwUfAj6Idld+BzKuZjEI=
Subject key identifier: 74:66:5F:E3:2F:D1:B2:FF:9B:C7:E4:78:2E:AB:2F:C7:0A:40:26:21
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018C01F152B2A9C5ED5CC80AFEB9C747B79A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dGZf4y_Rsv-bx-R4LqsvxwpAJiE.roa
Signing time: Fri 24 Nov 2023 15:27:21 +0000
ROA not before: Fri 24 Nov 2023 15:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215941
IP address blocks: 77.76.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:f1:52:b2:a9:c5:ed:5c:c8:0a:fe:b9:c7:47:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Nov 24 15:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74665fe32fd1b2ff9bc7e4782eab2fc70a402621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:aa:93:28:71:78:b2:80:53:4c:3e:72:bf:
01:8c:de:65:ad:39:5d:9b:d0:f2:64:dc:93:c0:3b:
c5:e6:d6:2a:68:68:07:c0:f7:47:4d:ae:4a:70:34:
62:a4:e3:32:74:67:a9:89:b2:6f:ba:53:0c:27:19:
13:12:d9:5b:13:5a:fc:db:54:a9:f2:fc:21:fe:b4:
ec:22:88:5b:34:8e:4a:27:55:bb:13:2c:fe:21:df:
4d:56:af:93:c5:d0:96:a8:ee:8e:24:0c:40:32:5c:
52:91:aa:ad:13:56:f9:30:50:bf:77:f3:0b:0f:dd:
2d:df:1c:04:f8:78:01:cc:63:ad:50:bc:a7:6e:60:
5d:99:ae:98:3a:c5:67:68:02:d7:b9:ad:80:57:6b:
b3:aa:7f:f1:03:05:96:4c:56:3d:0d:5b:b6:3e:78:
a7:5b:93:ab:ad:a8:b4:3f:97:eb:0d:d2:d5:26:bc:
46:df:78:87:94:3b:f6:f1:f6:9a:5b:15:ca:ba:c6:
1b:9c:81:ff:56:08:44:51:ff:ce:db:d1:ea:ba:07:
d5:ab:8d:64:9e:7f:72:36:aa:48:32:e1:23:4e:de:
ed:de:05:87:35:fd:45:d7:9e:e4:b2:d4:8a:a5:2b:
93:a1:79:36:7d:f5:12:d3:0c:7f:66:7b:ef:09:67:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:5F:E3:2F:D1:B2:FF:9B:C7:E4:78:2E:AB:2F:C7:0A:40:26:21
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dGZf4y_Rsv-bx-R4LqsvxwpAJiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:60:40:ce:49:9c:c2:ce:5d:08:aa:0b:8c:e1:d6:43:c8:de:
78:a3:23:c9:42:94:2f:cd:f3:9c:4f:0f:ad:56:cf:f9:25:b1:
60:ca:dc:a1:e8:78:80:f7:88:5e:b1:0c:4c:4b:7a:61:1b:e5:
53:35:c8:d5:94:e5:bc:74:0c:2a:19:6c:41:5d:2c:b9:b9:52:
8b:3a:d0:ef:03:2f:5e:74:4f:fe:cf:7d:f7:5f:69:40:c6:01:
7f:d5:87:f9:b2:bc:28:55:2a:6a:d3:52:66:b3:d2:a2:1b:32:
44:dc:0d:df:dd:69:eb:04:58:fc:50:55:34:88:5b:75:3a:4a:
02:24:bf:58:b8:d4:e7:01:ae:8e:e4:c5:08:69:0c:69:b3:1d:
2f:13:85:03:ff:20:14:3b:0d:db:b5:2c:4a:c9:b0:63:0a:41:
d1:81:e6:9d:2d:2e:ad:ed:b9:a4:d5:4c:8c:12:5a:0c:db:e5:
f1:31:c4:f3:36:29:b8:27:35:36:08:6d:d3:1d:62:59:68:2f:
da:c9:48:d6:d2:bc:26:d2:b6:bd:e7:a5:63:f2:55:c9:37:20:
ac:93:08:58:28:92:13:fc:f5:26:94:d5:b2:77:26:ef:06:e1:
91:cf:f4:87:05:a8:7e:23:4a:41:91:88:22:1a:61:54:ac:db:
ab:95:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:50 2024 by rpki-client on console-ams.rpki-client.org