Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/yS23CdhQ3_kSHtUgixWs67-jhKc.roa
File: yS23CdhQ3_kSHtUgixWs67-jhKc.roa (raw, json)
Hash identifier: c09Bheg8aZEN5QMdzz+J//nGnnBMp5gCbb6s88YDqRY=
Subject key identifier: C9:2D:B7:09:D8:50:DF:F9:12:1E:D5:20:8B:15:AC:EB:BF:A3:84:A7
Certificate issuer: /CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
Certificate serial: 0186CADF3477DE862C8AA0C9E0150E07EDC1
Authority key identifier: 1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/yS23CdhQ3_kSHtUgixWs67-jhKc.roa
Signing time: Fri 10 Mar 2023 09:34:30 +0000
ROA not before: Fri 10 Mar 2023 09:34:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206654
IP address blocks: 37.77.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:df:34:77:de:86:2c:8a:a0:c9:e0:15:0e:07:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
Validity
Not Before: Mar 10 09:34:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c92db709d850dff9121ed5208b15acebbfa384a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:0d:0d:3d:9e:97:28:82:b0:3c:1f:ec:9f:
cd:48:4c:b2:d6:b2:0e:a3:5c:50:04:f0:09:5d:8a:
9b:36:73:51:0d:a4:83:3f:f3:51:8a:bd:f5:80:b5:
b1:0f:b5:e1:96:36:fd:2b:6f:48:93:08:47:fe:6e:
9a:20:b9:a1:05:de:45:c0:71:1d:84:46:c0:3f:6c:
77:1f:46:c5:0f:ec:b2:37:6d:b2:6a:10:94:c4:78:
7f:36:d6:e9:86:e3:e5:bf:e0:49:d4:3a:dd:27:51:
aa:02:4a:e5:52:fe:80:a7:e6:c8:65:34:eb:4c:31:
eb:3f:9e:a6:f1:89:98:a4:32:81:53:15:46:e9:05:
8a:43:d6:c7:b4:10:4d:6f:a9:57:af:31:03:9a:93:
e8:5e:3c:72:0a:24:3f:31:4d:1e:ef:51:a4:1e:74:
cc:a7:38:c5:49:e1:8a:d1:d0:2e:16:0c:2e:fe:7c:
68:cf:fb:cb:85:96:a0:f8:26:1d:5b:63:b9:3b:d5:
d9:ba:54:33:b6:a6:91:57:4e:5a:20:43:26:5c:24:
5d:23:fd:94:36:7a:a1:83:d0:62:3b:a0:a0:d4:fc:
60:f0:ef:a3:c2:31:a9:2b:a1:10:fb:ff:9d:81:65:
62:65:e4:6b:da:6a:cd:cc:b5:c2:2b:d1:dc:8b:67:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:B7:09:D8:50:DF:F9:12:1E:D5:20:8B:15:AC:EB:BF:A3:84:A7
X509v3 Authority Key Identifier:
keyid:1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/yS23CdhQ3_kSHtUgixWs67-jhKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.144.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3a:0e:a9:02:80:d7:9b:b6:2d:d3:25:18:02:db:40:50:d5:
fc:a6:26:d2:60:49:c6:61:84:59:ea:7a:e6:5b:bd:7b:6c:0e:
8c:ce:67:6a:4d:53:52:1b:04:3b:02:2c:d6:87:e8:ce:32:67:
05:d0:2d:c7:18:ee:34:13:d4:f1:89:35:e0:00:d5:84:c3:51:
5d:9f:dc:24:39:99:6a:34:bd:87:71:b7:22:74:92:ea:a7:c2:
c0:bb:4b:0a:8f:08:63:4d:cf:58:ee:9d:ac:dc:ec:c0:66:e7:
8c:ee:6d:a0:1a:9b:91:80:2f:87:63:43:c3:86:cb:4d:76:72:
b5:53:a6:0f:21:60:9e:54:10:1a:ee:11:46:b5:5c:a0:74:37:
e6:c1:4d:80:64:0a:f1:a9:01:76:88:cb:b3:45:eb:7f:f5:20:
97:8d:9a:3e:7e:94:a9:c4:0f:60:10:2a:1d:6b:a8:c8:c1:d1:
dc:8a:65:69:04:a2:38:57:d1:33:b4:8d:fe:54:1a:f4:71:99:
28:20:a3:94:a3:6f:27:6f:b4:0c:76:e6:d3:47:de:81:82:75:
8b:08:8a:05:00:96:7e:c3:65:c2:d5:77:6f:6b:2f:8f:53:93:
c9:1c:23:f5:86:74:0e:08:15:00:b5:3a:d0:69:77:0f:d4:a9:
5a:a6:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:39 2024 by rpki-client on console-ams.rpki-client.org