Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1vysGar5BNC9vhK9Gn4ZFojBxho.roa
File: 1vysGar5BNC9vhK9Gn4ZFojBxho.roa (raw, json)
Hash identifier: y0rSwoKTgQ5tkPH3YDuOkfsvGedZFlCHsd7QEu/LV48=
Subject key identifier: D6:FC:AC:19:AA:F9:04:D0:BD:BE:12:BD:1A:7E:19:16:88:C1:C6:1A
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0188E24648C2C63342123ABE59CF02A83A54
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1vysGar5BNC9vhK9Gn4ZFojBxho.roa
Signing time: Thu 22 Jun 2023 08:43:56 +0000
ROA not before: Thu 22 Jun 2023 08:43:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206814
IP address blocks: 77.111.125.0/24 maxlen: 24
77.111.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:46:48:c2:c6:33:42:12:3a:be:59:cf:02:a8:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 22 08:43:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6fcac19aaf904d0bdbe12bd1a7e191688c1c61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a6:17:cf:28:08:77:9c:51:16:bf:a6:3f:d8:
9f:3f:dc:5a:4e:de:d4:98:e8:59:98:85:24:41:61:
b5:f7:95:18:32:6d:34:b4:9b:74:b4:82:5a:57:43:
07:4d:ab:56:92:40:91:0b:51:4d:80:b8:4e:f0:4d:
24:e8:50:d6:2f:70:be:69:4a:c1:a3:df:69:24:27:
dd:a8:ee:9a:a5:99:45:82:ca:5e:35:36:fa:07:8f:
06:37:35:34:ac:1c:46:11:9c:7d:99:e2:78:a5:86:
1c:97:5d:1d:cf:22:5f:e3:f2:5d:38:8e:84:4d:33:
6c:80:10:36:de:da:59:14:31:14:12:bb:91:c7:86:
39:80:13:84:49:7f:08:01:d6:5a:32:95:f0:68:6b:
e2:f3:e1:7b:f6:b9:e8:b0:0f:f2:19:e5:00:31:38:
1b:fa:95:d9:17:2b:ae:26:8f:3b:73:c7:ea:61:fc:
63:08:61:cc:61:7b:51:c3:33:27:dc:20:00:b6:6d:
7d:de:23:c6:08:f0:c2:eb:3f:f2:6d:14:27:f4:aa:
a9:22:b1:93:a7:de:ab:53:f4:48:f8:f4:3f:09:20:
ae:26:9b:6f:69:4a:b5:ed:74:46:41:2a:f9:d8:fd:
84:9d:f4:b7:e6:45:bb:96:77:62:bd:80:81:98:f7:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FC:AC:19:AA:F9:04:D0:BD:BE:12:BD:1A:7E:19:16:88:C1:C6:1A
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1vysGar5BNC9vhK9Gn4ZFojBxho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.124.0/23
Signature Algorithm: sha256WithRSAEncryption
81:93:b0:03:85:56:aa:95:b8:94:29:0a:f1:a2:04:c8:a7:29:
c8:09:75:f0:eb:89:f5:ff:af:3a:79:ed:51:b7:90:d5:aa:be:
2e:72:cf:7d:f1:a9:7c:a0:48:79:30:8a:77:a2:34:37:20:e1:
1b:cd:6f:e0:d1:07:81:f7:9c:58:5f:c9:72:58:75:13:ce:06:
d5:3a:0e:5c:66:61:45:51:79:d6:66:4a:7d:1e:99:33:87:e4:
24:92:89:76:11:98:08:a7:ba:89:77:87:cc:1b:36:1c:17:6b:
20:0e:6e:5e:78:ca:07:a5:ab:76:e8:36:16:38:4e:ba:44:c3:
1d:2a:c6:ed:44:97:27:a4:fe:5c:ff:ca:57:cb:72:a0:43:c0:
1f:3f:f9:bf:48:f3:7a:3f:1b:75:d6:4f:dd:98:8e:d7:18:6a:
ed:33:e9:46:42:a1:8a:af:41:0f:ac:6c:4e:f4:57:a1:58:c6:
54:35:1c:79:68:20:30:71:1f:13:84:4f:76:30:2b:2a:ba:6f:
68:94:e3:93:0e:8b:3f:62:70:31:6f:95:c3:26:20:c7:66:2c:
b8:a5:5c:36:ef:78:8f:53:c1:bf:ea:94:65:ed:df:e7:94:99:
b7:b4:61:2c:2b:5e:75:54:ea:c8:98:cd:f2:28:83:d4:9a:02:
b0:a6:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:36 2024 by rpki-client on console-fra.rpki-client.org