Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/D2_bzB8_DbxUj4FEWzwyW_DaqZU.roa
File: D2_bzB8_DbxUj4FEWzwyW_DaqZU.roa (raw, json)
Hash identifier: 1ZFXDSi04Wm2+qE2vk/Jdm1FEa2hs6Puex0GGhOUZcU=
Subject key identifier: 0F:6F:DB:CC:1F:3F:0D:BC:54:8F:81:44:5B:3C:32:5B:F0:DA:A9:95
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 018570F08D069C7C81C3CEB825358EB7A56A
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/D2_bzB8_DbxUj4FEWzwyW_DaqZU.roa
Signing time: Mon 02 Jan 2023 05:24:50 +0000
ROA not before: Mon 02 Jan 2023 05:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212009
IP address blocks: 45.9.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8d:06:9c:7c:81:c3:ce:b8:25:35:8e:b7:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jan 2 05:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f6fdbcc1f3f0dbc548f81445b3c325bf0daa995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:e9:0e:be:ed:2f:1d:50:8e:b4:65:90:7a:
be:41:9e:d3:09:18:49:99:35:4a:53:a0:c1:22:86:
50:a8:48:d8:d0:79:1c:ef:84:89:a9:19:f6:7e:d0:
9d:f4:64:bf:1e:83:72:0e:d6:48:bf:55:c4:d2:de:
37:18:3f:57:6b:56:70:da:48:42:c7:b2:96:14:fc:
0b:df:4b:ab:0b:c5:65:7e:4e:28:57:89:3d:62:1e:
9b:ca:72:05:70:c3:67:0c:48:5d:d6:16:8d:3e:d4:
20:3b:90:af:70:76:e9:0f:68:de:f2:ac:fa:9b:ea:
1c:2b:ae:2e:05:33:c5:23:1e:91:62:21:4f:f1:31:
71:ff:c1:c9:2d:6c:bd:39:2b:a0:70:c4:39:76:b3:
e2:c8:79:53:7f:d5:6e:69:d5:16:f6:a5:fb:47:57:
d2:35:2a:ec:3b:30:c3:6c:1d:a4:20:ce:a0:49:e4:
a6:85:b7:16:14:5e:d0:30:38:80:1d:8e:2c:6d:7a:
88:24:85:19:29:e1:9a:ba:b1:d8:f2:de:eb:89:b6:
6c:cd:c3:c3:ad:42:52:6c:40:ef:ae:d4:35:6e:6d:
26:42:5f:a8:69:14:cb:8f:fc:26:75:a3:71:15:1a:
67:51:b3:53:c6:cd:c9:06:07:50:14:9e:76:ac:f5:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:DB:CC:1F:3F:0D:BC:54:8F:81:44:5B:3C:32:5B:F0:DA:A9:95
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/D2_bzB8_DbxUj4FEWzwyW_DaqZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.77.0/24
Signature Algorithm: sha256WithRSAEncryption
81:95:fc:83:8f:f1:81:8e:2b:eb:13:cc:bd:84:9b:91:e4:c9:
60:db:23:4d:73:07:93:6d:18:13:b2:1c:2a:40:4e:04:3d:38:
ca:b5:61:c7:50:86:80:46:7a:61:4e:aa:82:48:bf:0a:3b:ac:
15:0e:0f:07:d0:19:85:fe:d3:f1:f4:eb:3d:1e:6c:f1:d4:d7:
99:93:43:7e:36:d5:3d:c7:70:fb:0b:7d:9e:f6:99:09:60:27:
64:25:91:6f:83:5c:39:2b:22:86:35:fb:12:7f:19:db:c1:08:
21:2a:32:d1:46:51:8a:c5:31:c6:d4:de:3a:a9:3c:c6:56:0f:
42:6a:3f:32:1a:ec:76:fc:ae:49:f1:4b:46:8b:ba:b6:ea:a3:
db:3f:f8:80:38:24:75:7b:16:3e:d9:91:20:d5:99:ae:b4:e1:
36:e1:13:bd:9c:c9:df:e3:16:a0:95:e8:7f:f7:20:88:6b:0d:
69:39:9e:09:3a:68:fe:5d:37:9c:14:40:32:cd:47:d5:3d:3a:
67:af:f8:d4:37:95:e9:b1:a9:bf:5a:63:8e:93:4f:6f:55:37:
39:9f:5e:a1:b7:78:d9:f0:2e:06:af:b1:58:6f:d2:e8:d8:4a:
7c:65:4a:b7:74:ad:f5:69:96:1e:57:f2:63:43:c1:e9:ad:46:
29:ca:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:36 2024 by rpki-client on console-fra.rpki-client.org