Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/xu5Bf88Pou9KfZrZbvfPwB-SdWU.roa
File: xu5Bf88Pou9KfZrZbvfPwB-SdWU.roa (raw, json)
Hash identifier: pKSZlCETwtguxIzwr7jqR5O0+u5e8zuAYgWEbQ8RzaU=
Subject key identifier: C6:EE:41:7F:CF:0F:A2:EF:4A:7D:9A:D9:6E:F7:CF:C0:1F:92:75:65
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 01856D5D1F3B8F498B2C008FE3C680A28E93
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/xu5Bf88Pou9KfZrZbvfPwB-SdWU.roa
Signing time: Sun 01 Jan 2023 12:44:57 +0000
ROA not before: Sun 01 Jan 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 77.81.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:1f:3b:8f:49:8b:2c:00:8f:e3:c6:80:a2:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jan 1 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6ee417fcf0fa2ef4a7d9ad96ef7cfc01f927565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:2d:9f:cf:d6:a4:ef:6c:8d:39:7a:72:dc:
3b:cd:36:d1:8a:53:d6:ee:e7:ed:62:12:69:51:d7:
3d:39:49:f9:7f:55:a2:fc:d3:b0:5e:8d:79:2c:9f:
d3:94:af:d5:a3:78:4f:32:71:a1:ca:93:15:7a:0e:
1e:6e:32:89:4f:4a:c9:e9:1a:10:9b:b3:97:0b:8c:
b2:bc:61:26:ca:bc:4a:49:b1:1f:1b:94:b6:91:90:
e5:1d:c8:c2:da:fc:8e:49:c0:e6:68:b1:43:49:ad:
ca:c2:8d:19:6a:07:64:21:c4:94:f1:a1:13:b8:ab:
73:ce:12:08:c9:1a:1b:ab:60:27:0e:b4:af:97:c9:
35:f0:8a:d0:5e:02:ce:c8:73:79:26:28:e4:c2:0c:
60:0e:6e:7f:44:cf:93:72:14:9b:2a:e7:a3:d1:84:
6a:c7:2e:b4:bf:0c:80:3e:43:4e:3d:4c:ba:69:c1:
64:cb:34:24:50:8a:20:49:e2:e1:2f:67:60:c7:9a:
15:44:5f:cc:f9:a3:50:4c:28:4f:85:93:94:94:f8:
4d:8d:9a:54:c1:ae:54:37:c4:db:58:c2:6c:51:66:
3a:01:9d:03:50:f5:96:f0:cc:27:fb:8c:b8:c5:66:
14:45:e3:d9:5a:9f:11:ff:ca:32:dc:d2:87:d9:de:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:41:7F:CF:0F:A2:EF:4A:7D:9A:D9:6E:F7:CF:C0:1F:92:75:65
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/xu5Bf88Pou9KfZrZbvfPwB-SdWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d0:fd:0b:95:4b:84:37:de:57:fd:91:37:e1:50:ad:a9:cc:
a8:56:e9:76:6a:a0:98:de:04:4e:3b:99:aa:96:73:4f:03:d3:
4b:be:05:ba:bd:56:6f:6f:2d:ee:6c:1d:aa:66:b7:5c:2e:7b:
6d:53:ef:ce:4d:07:d6:56:b7:c9:29:be:46:47:bd:8d:0c:94:
15:d6:46:f0:26:86:f6:b8:92:05:c0:a0:cd:04:c9:68:e9:66:
59:66:34:8f:89:93:41:ae:f2:b1:46:7b:58:e9:d4:4b:a7:a6:
1f:59:82:2e:92:d7:90:60:78:e1:6c:76:b2:cb:74:aa:5b:41:
88:c6:94:7f:b7:f9:a1:67:b5:5a:d0:b5:64:b9:a4:e5:f4:fe:
08:22:cd:6a:25:8c:4b:d6:20:4c:ab:17:c7:92:51:43:e9:00:
d2:79:00:79:12:f5:5d:58:84:de:fe:7d:ea:2d:bd:85:c3:27:
a0:5d:5e:94:aa:da:55:fc:c5:8f:cd:54:83:f8:b2:42:64:89:
7c:25:9e:8b:90:bd:f3:b3:9d:18:7f:74:93:d8:d4:d3:73:9f:
68:19:b1:63:02:12:1b:0e:f1:92:6c:c4:2f:1d:97:8d:b7:66:
4b:80:b0:14:9d:b1:55:ef:32:a8:9f:d6:67:05:6d:2a:15:13:
f6:14:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-ams.rpki-client.org