Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/tWQ8sJGgnNiw8VepyUWCCvxQOg4.roa
File: tWQ8sJGgnNiw8VepyUWCCvxQOg4.roa (raw, json)
Hash identifier: HOX3VSPdpELLwkuu3udUTv82mN4NxQNpT23+ZiMv3lU=
Subject key identifier: B5:64:3C:B0:91:A0:9C:D8:B0:F1:57:A9:C9:45:82:0A:FC:50:3A:0E
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6DF482C523656CAC70A8DEA57FE9
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/tWQ8sJGgnNiw8VepyUWCCvxQOg4.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209203
IP address blocks: 77.78.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6d:f4:82:c5:23:65:6c:ac:70:a8:de:a5:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5643cb091a09cd8b0f157a9c945820afc503a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:23:00:47:ba:18:06:36:b4:38:d2:b2:f0:
cc:61:c4:e4:7e:67:48:03:92:cf:8d:02:e9:91:78:
03:8f:cb:50:7f:db:eb:18:1f:5b:a2:5a:eb:43:2c:
18:cb:91:56:40:e2:08:3d:31:69:bb:f1:23:aa:a8:
dd:fe:bb:0b:da:55:0d:74:2b:1e:71:4d:ad:95:44:
f2:76:2a:d0:43:81:a3:c5:be:29:a0:e4:f9:b7:84:
a6:5c:04:61:d8:1d:df:dd:b8:5b:31:2b:c6:0d:04:
3f:75:db:6d:2a:7b:a2:9c:9f:86:9f:e3:aa:2a:5c:
7b:6f:08:c8:ef:68:98:d1:62:7c:85:85:b4:22:ea:
c0:f9:59:6b:d9:a8:21:44:00:dc:c9:aa:e3:4e:43:
b6:e3:75:50:d1:f0:62:f7:20:41:e1:d1:97:b6:96:
19:31:58:c5:a3:24:7f:44:a6:71:35:d6:33:fb:2c:
f5:08:c9:29:0a:4b:4c:a7:15:48:a3:d7:77:46:1e:
ab:46:ea:1e:3e:c4:58:e1:f8:11:3d:72:5c:5c:f0:
cf:26:0e:85:39:38:c3:5b:c1:4e:25:b8:ad:a1:be:
82:2c:1b:3c:ce:0c:35:a0:de:dc:a9:01:3b:9d:29:
cf:09:a8:9b:aa:39:4b:7e:f4:5a:19:bd:e7:cb:c5:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:3C:B0:91:A0:9C:D8:B0:F1:57:A9:C9:45:82:0A:FC:50:3A:0E
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/tWQ8sJGgnNiw8VepyUWCCvxQOg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8d:22:54:37:13:09:9a:18:a4:b6:8b:81:14:86:d7:04:f4:
1a:8b:04:9a:26:59:cd:85:3f:b2:f8:d7:4e:53:7f:4c:af:29:
81:75:bf:8e:d3:74:44:7b:b6:e4:09:e5:a2:53:03:ec:c7:b5:
e9:07:bd:04:ad:e1:b7:d5:19:2b:ba:4a:b0:f6:8b:af:8d:0a:
72:44:60:26:27:43:a0:69:cf:58:7c:b7:ef:47:b5:9a:90:5f:
54:74:f3:f0:0c:96:74:72:51:3e:20:23:4d:12:ae:3e:50:a8:
8e:b6:f1:7d:39:f2:2d:87:c3:a4:41:89:12:34:b3:4f:be:bf:
09:73:73:88:87:27:a9:38:99:da:2a:65:49:a3:a3:4b:3b:3c:
f5:d6:9a:8b:05:9d:60:e0:3e:06:fa:9c:98:5d:3f:c8:01:d8:
5b:26:fd:7c:4f:0b:68:85:80:44:ff:e1:43:82:b6:8c:a8:3e:
00:fa:4e:5f:07:5f:b5:72:7a:8e:1c:ea:87:f9:fd:71:e3:e3:
6a:59:af:32:2f:56:25:a2:1c:29:51:46:5d:76:60:f3:24:9e:
ed:ed:2c:7f:30:06:af:dd:e7:a6:30:b4:57:ee:09:02:9f:a5:
c1:4c:0d:b9:7b:60:8c:f7:1d:b1:92:8b:da:85:8f:2e:53:c9:
0e:e2:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org