Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/bM4JxKdWjnlt1_pSyr8Ir8Zm2YI.roa
File: bM4JxKdWjnlt1_pSyr8Ir8Zm2YI.roa (raw, json)
Hash identifier: nZSCEccxRxGVANTTWVnpdQIC5n2z8RXjogYuy0O+ukw=
Subject key identifier: 6C:CE:09:C4:A7:56:8E:79:6D:D7:FA:52:CA:BF:08:AF:C6:66:D9:82
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01878025E79BEFCC401B33121C5FEE6E56DD
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/bM4JxKdWjnlt1_pSyr8Ir8Zm2YI.roa
Signing time: Fri 14 Apr 2023 14:23:00 +0000
ROA not before: Fri 14 Apr 2023 14:23:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42751
IP address blocks: 77.222.32.0/22 maxlen: 22
77.222.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:25:e7:9b:ef:cc:40:1b:33:12:1c:5f:ee:6e:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Apr 14 14:23:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cce09c4a7568e796dd7fa52cabf08afc666d982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:bb:87:c9:77:53:ef:6a:ce:fc:b5:e4:55:
e3:f0:1e:8b:1a:32:be:91:ad:2d:9c:7f:d5:7b:f4:
05:a6:31:b7:ed:b1:88:0f:e2:2a:74:51:02:79:80:
6b:f0:cf:22:dc:db:86:bd:4e:d0:dc:15:2b:6f:ae:
4d:0a:06:d9:aa:d9:8f:b5:62:54:22:eb:58:54:fa:
b5:7e:10:48:ff:39:03:c8:02:ef:26:7e:5f:ae:57:
8f:4f:27:aa:74:af:ce:7e:48:3b:22:cc:78:50:22:
b2:b0:17:7d:97:e3:6d:13:75:86:2b:88:a3:a0:56:
9d:5e:69:e7:e0:54:6e:3b:f3:b7:e7:68:48:fb:31:
25:f1:5c:e9:94:f7:96:72:70:4d:39:b1:61:a4:66:
17:9d:9e:26:9a:d2:03:77:f5:37:a7:f5:1c:44:bc:
91:77:f2:e4:a1:91:cc:24:29:56:e9:60:b8:c4:6a:
b8:50:6b:d7:b2:11:a2:23:82:db:1d:99:d6:53:c3:
05:d9:c5:97:f1:06:f6:4a:2d:e0:91:b0:9e:36:ff:
c6:80:3a:7f:ed:20:db:28:8f:12:d2:53:0f:a6:6a:
c4:f9:a0:17:bc:4a:94:43:fd:e5:79:f5:f7:0e:b8:
12:96:56:96:36:4d:f8:3c:52:a0:fe:e3:6e:7b:bd:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:09:C4:A7:56:8E:79:6D:D7:FA:52:CA:BF:08:AF:C6:66:D9:82
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/bM4JxKdWjnlt1_pSyr8Ir8Zm2YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.32.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:d9:a9:d8:70:b5:aa:c5:3f:ae:17:65:51:1e:8b:04:87:c9:
2a:ea:f8:29:40:fc:a1:c0:a3:1b:16:bb:c9:12:12:12:66:52:
70:60:f8:8a:47:f3:a2:22:38:d9:a3:60:25:c5:90:37:a8:6b:
50:cd:51:b0:09:59:59:23:0e:58:a6:41:5d:19:84:93:f2:a7:
d9:f3:be:19:48:d4:e7:de:66:41:d2:4b:9f:9c:9b:0c:22:b7:
7e:03:ed:6c:07:28:ad:d4:ee:ab:54:e3:4a:0f:ba:6f:fd:da:
9b:61:af:15:8b:d4:f1:f6:58:67:de:b9:21:46:4c:37:d3:1d:
46:72:3b:bb:04:d0:80:b4:1c:be:38:99:5d:3f:87:9e:87:22:
27:1c:52:ca:20:e5:8e:8e:5e:1b:3b:7d:7d:37:75:ad:6d:0b:
9e:06:5c:36:1c:ee:2a:d0:db:c0:70:1f:26:c2:ba:45:50:47:
a4:41:18:17:57:2a:30:f6:e1:a1:cc:33:60:6d:5b:63:6d:f2:
83:51:2d:e6:36:52:e8:f2:98:b6:ed:59:c6:78:03:5a:08:9d:
eb:0f:c5:e1:3a:bf:0c:81:ff:59:0c:0e:12:f5:a4:a8:5d:72:
f4:30:27:a4:64:b1:ac:a9:29:c0:c1:9e:23:60:56:59:21:b5:
24:3a:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org